Security.

Authentication

Sign-in and account sessions are handled by Clerk. We don't write our own password-storage or session code.

Payments

Billing runs through Stripe. Card numbers are entered directly into Stripe's hosted fields — they are never typed into a form we control, and they never touch our servers.

Data & database

Application data lives in Postgres on Supabase, behind row-level security policies scoped to the authenticated user — not application-layer checks alone.

Model providers, as subprocessors

A prompt you send may be routed to any of the model vendors we measure and route across. When it is, your prompt goes to that vendor's API, subject to their own data-handling terms — the same way it would through any tool built on their models.

• Anthropic (Claude)
• OpenAI (GPT)
• DeepSeek
• Moonshot AI (Kimi)
• Alibaba (Qwen)
• xAI (Grok)
• Google (Gemini)
• Meta (Llama)
• Groq
• Perplexity (Sonar)

12+ models in active rotation across these vendors; see how we count.

Company & jurisdiction

Keen Labs (Keen Andersson Lang, enskild firma) is based in Landskrona, Sweden — an EU company operating under GDPR.

What we don't claim

No SOC 2, no ISO 27001, no certifications of any kind — we haven't pursued them yet. Independent penetration testing is on the roadmap, not done. If a badge isn't on this page, we don't hold it.

Report a vulnerability

Email security@keenlabs.pro with subject “Security report — Keen Labs”. We aim to respond within 5 business days.

Account deletion

Email support@keenlabs.pro from the address on your account and we'll delete your account and associated data.