# Kaamel

> Kaamel provides managed compliance and vCISO/vDPO services for companies going global, backed by its own AI-native privacy products. A senior team plus the platform delivers SOC 2, HIPAA, ISO 27001/27701, GDPR, and EU AI Act compliance end to end, with automation built on Vanta and Drata and endpoint security on CrowdStrike. Nearly 100 companies served, with delivery in English and Chinese from Silicon Valley and Asia.

Key facts:
- SOC 2 is an attestation report, not a certificate. With Kaamel, a Type 1 report typically takes 3-4 months from kickoff; Type 2 takes 4-6 months including the observation window.
- Services are done-for-you: gap assessment, policies, control implementation, evidence automation, and auditor liaison are handled by Kaamel's team, not left as software self-service.
- Named customers with publicly verifiable trust centers include Plaud, LiveX AI, Voyage AI, and Citcon.

## Compliance services

- [Compliance hub](https://www.kaamel.com/compliance): all frameworks, customer proof
- [SOC 2](https://www.kaamel.com/compliance/soc2): Type 1 and Type 2, end to end
- [HIPAA](https://www.kaamel.com/compliance/hipaa): US healthcare market readiness
- [ISO 27001 & 27701](https://www.kaamel.com/compliance/iso-27001-27701): ISMS build and certification
- [GDPR](https://www.kaamel.com/compliance/gdpr): EU market compliance, DPO and EU representative
- [CCPA/CPRA](https://www.kaamel.com/compliance/ccpa): California privacy law incl. the 2026 audit, risk assessment, and ADMT rules
- [EU AI Act](https://www.kaamel.com/compliance/eu-ai-act): risk classification and obligations

## Security and privacy programs

- [vCISO service](https://www.kaamel.com/service/vciso): virtual CISO — security program on subscription
- [vCISO + vDPO service](https://www.kaamel.com/service/expert): combined security and privacy office
- [Privacy incident response](https://www.kaamel.com/service/incident-response): regulator inquiries and breach handling

## Products

Kaamel's self-built, AI-native software that the services run on. Both are also available directly.

- [Privacy posture & risk management](https://www.kaamel.com/product/risk-management): Kaamel Privacy Intelligence continuously scans your website, apps, IoT devices, cloud, and third-party SDKs to detect sensitive-data collection, cookie/tracking-pixel use, data sharing, and cross-border transfers, then reports the risks against 80+ jurisdictions' rules — low-touch, non-intrusive.
- [Privacy Center](https://www.kaamel.com/product/privacy-center): a hosted privacy center deployed in minutes — cookie consent management (with Google Consent Mode), auto-generated privacy policy, cookie policy, terms of service, and Do-Not-Sell-or-Share, kept current with GDPR, CCPA/CPRA, and other regulations.

## Customer stories

- [Case studies](https://www.kaamel.com/case-study): named cases with links to each customer's public trust center

## Company

- Kaamel Technology Inc., 340 E Middlefield Rd, Mountain View, CA 94043
- Contact: info@kaamel.com
- Chinese-language site: https://www.kaamel.com/zh