Keeper Security
Security and trust center evidence
Keeper is the leading provider of zero-knowledge security and encryption software covering password management, dark web monitoring
Summary
Keeper Security has 3 registry-verified rows in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Keeper Security is listed in FedRAMP as Authorized, with the authorization issued 18 Dec 2025 and audited by A-LIGN Compliance and Security, Inc. dba A-LIGN, as of 20 Sep 2026. Keeper Security is listed in CSA STAR at Level 1 self-assessment (CAIQ), issued 17 Jan 2022, as of 17 Sep 2026. Keeper Security is listed in the EU-US Data Privacy Framework registry as active under UK Extension Certification, EU-US Certification and SW-US Certification, as of 17 Sep 2026. The Data Privacy Framework listing, as of 17 Sep 2026, was issued 17 Nov 2016 and expires 17 Jun 2027. No public evidence found for SOC 2 or ISO/IEC 27001 as of 20 Sep 2026.
- FedRAMP - Authorized, issued 18 Dec 2025, audited by A-LIGN Compliance and Security, Inc. dba A-LIGN (as of 20 Sep 2026)
- CSA STAR - Level 1 self-assessment (CAIQ), issued 17 Jan 2022 (as of 17 Sep 2026)
- EU-US Data Privacy Framework - active (UK Extension, EU-US, SW-US), issued 17 Nov 2016, expires 17 Jun 2027 (as of 17 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 20 Sep 2026; it is regenerated whenever a row changes.
Among devops and observability vendors
3verified rows
Category median 1, across 193 indexed devops and observability vendors. Keeper Security has more verified rows than 96 percent of them.
dark-web-monitoringencryptionidentity-protectionpassword-management
Compare with similar vendors
Pick your own comparisonCompliance grid
FedRAMPVerifiedFedRAMP Authorized
as of 1 Nov 202646 sources · A-LIGN Compliance and Security, Inc. dba A-LIGN
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: UK Extension Certification, EU-US Certification, SW-US Certification
as of 26 Oct 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the DevOps and observability category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Datadog
DevOps and observability
Datadog is a monitoring service for hybrid cloud applications, assisting organizations in improving agility, increasing efficiency, and
RegScale
DevOps and observability
RegScale is a continuous controls monitoring (CCM) platform that enables rapid GRC
Sentry
DevOps and observability
Application performance monitoring for developers & software teams to see errors clearer, solve issues faster & continue learning
HyTrust
DevOps and observability
HyTrust, an Entrust company, is an American company
Evidence against regulations
All regulations for Keeper SecurityHow much of each regulation’s vendor requirements Keeper Security’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read