# Kanonik > Kanonik is security compliance software. It makes your AI a compliance expert and > checks every draft before you see it. Only what a named person approves goes > into a Record anyone can verify: every entry has an owner, a date, a source and > a named approver, and the record can be checked offline without a Kanonik account. > Kanonik's Verifier checks each draft before a person is asked to approve it. > Separation of duties is recommended, and a single-user workspace can approve its > own AI's work with a sealed exception noting there was no second reviewer. > Runs SOC 2, ISO/IEC 27001, HIPAA, GDPR, NIST CSF 2.0, NIST SP 800-53 Rev. 5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, FedRAMP Rev. 5 baselines, GovRAMP Rev. 5 baselines, CCPA/CPRA, DORA, NIS2, NYDFS Part 500, EU AI Act, NIST AI RMF 1.0 and NIST SSDF. > We attest provenance, integrity, and freshness, never the truth of an > underlying fact. This file is a curated map. Use the pages below to understand what Kanonik is, how it works, how it compares, and what it costs. ## What it is - [What it does](https://kanonik.ai/what-we-do): the program your AI runs with Kanonik (policies, controls, evidence, risks, vendors, questionnaires), Foresight, which checks a vendor change against your recorded promises, and who it is for. Use for a plain-English overview for a security or compliance buyer. - [How it works](https://kanonik.ai/how-it-works): the loop once. Your AI drafts, the Verifier checks each draft, a named person approves in the web app (separation of duties is recommended; a single-user workspace can approve with a sealed exception), the record is sealed, you share an export the recipient checks offline, and Foresight checks a planned vendor change against your promises. Use for the mechanism. - [Ask Kanonik](https://kanonik.ai/ask): asking Kanonik through your AI, tried on Harbor Ledger, a sample company. It answers a security question with the approved answer, who approved it and when, says when no answer is approved yet, and shows a Foresight check of a planned vendor change. - [Foresight](https://kanonik.ai/foresight): before you sign with a new vendor or make a change, Foresight checks it against the promises your team approved. Start it in Slack or Claude, from a photo of a contract page, from a vendor's PDF or web page that your AI reads on your side, or from the Kanonik app. - [Technical walkthrough](https://kanonik.ai/walk-the-chain): the engineering document for a security architect. One approved item followed through 12 steps: MCP and OAuth, skills, the Verifier, single-use signed approval tokens, the hash-chained event store, bi-temporal reads, the export checker, single-record proofs and workspace isolation. - [Trust](https://kanonik.ai/trust): data handling. We do not train, fine-tune or evaluate any AI model on your data. Cancel any time in Settings; it takes effect at the end of your billing period, and you can undo it until then. Export your record any time before your subscription ends. The record carries control ownership, not your people's personal data, and Kanonik doesn't ask for or store credentials to your systems. Use for security and privacy questions. ## Use cases and comparison - [Use cases](https://kanonik.ai/use-cases): a month at a sample company, with the work shown from the real app (a security questionnaire answered from the record, a policy change, a vendor checked against your promises with Foresight, an audit prepared). Use for practical jobs. - [Compare](https://kanonik.ai/compare): how Kanonik differs from legacy tools, question by question. Use for competitive framing (them and us). Vendor names appear in some comparison page titles and in this file. ## Help and examples - [Help center](https://kanonik.ai/docs/): how to connect your AI, approve drafts and export your evidence. - [Examples](https://kanonik.ai/use-cases): a month at a sample company. ## Pricing - [Pricing](https://kanonik.ai/pricing): Starter $3,000/year or $300/month, self-serve; Audit-Ready $6,000/year; Enterprise from $18,000/year. Your compliance work runs on the AI you already pay for, so we don't charge you for one. No per-user fees, no per-questionnaire fees. Your own AI subscription is separate. Each extra framework is $3,000/year and an extra Sealed Audit Package $1,800; yearly totals from $6,000 can be paid by invoice. Starter has a 14-day trial (https://dash.kanonik.ai/signup?plan=answer); the card is checked at sign-up and charged on day 15 unless cancelled first. NIST CSF 2.0 and GDPR come with every plan. Audit-Ready and Enterprise add audited frameworks and audit help: talk to us. Use for plan selection. - [Talk to us](https://kanonik.ai/contact#contact-form): for Audit-Ready, Enterprise, private deployment, product questions and security reviews. ## All indexed pages - [Home](https://kanonik.ai/) - [What it does](https://kanonik.ai/what-we-do) - [How it works](https://kanonik.ai/how-it-works) - [Ask Kanonik](https://kanonik.ai/ask) - [Technical walkthrough](https://kanonik.ai/walk-the-chain) - [Examples: a month at a sample company](https://kanonik.ai/use-cases) - [Foresight: check a new vendor or a change against your promises](https://kanonik.ai/foresight) - [Compare](https://kanonik.ai/compare) - [Compare: Vanta, Drata, Sprinto](https://kanonik.ai/compare-compliance-automation) - [Compare: enterprise GRC suites](https://kanonik.ai/compare-enterprise-grc) - [Pricing](https://kanonik.ai/pricing) - [for auditors](https://kanonik.ai/for-auditors) - [for consultants](https://kanonik.ai/for-consultants) - [Trust](https://kanonik.ai/trust) - [Your AI does the work in your own chat](https://kanonik.ai/ai-in-your-chat) - [Discovery: systems, evidence and risks](https://kanonik.ai/discovery) - [The Verifier and the refinement loop](https://kanonik.ai/verifier) - [Approvals](https://kanonik.ai/approvals) - [The tamper-evident record](https://kanonik.ai/record) - [The Sealed Audit Package](https://kanonik.ai/audit-package) - [Security questionnaires](https://kanonik.ai/questionnaires) - [Live assurance](https://kanonik.ai/live-assurance) - [Frameworks and controls](https://kanonik.ai/frameworks-and-controls) - [Vendors and risks](https://kanonik.ai/vendors-and-risks) - [Reports and dashboards your AI writes](https://kanonik.ai/reports) - [Your path to a SOC 2 Type II report](https://kanonik.ai/soc-2) - [Contact Sales](https://kanonik.ai/contact) - [Terms of Service](https://kanonik.ai/terms) - [Privacy Policy](https://kanonik.ai/privacy) - [Data Processing Addendum](https://kanonik.ai/dpa) - [Offline verifier](https://kanonik.ai/verify) - [Help center](https://kanonik.ai/docs/) - [Blog](https://kanonik.ai/blog/)