Built for IT and legal to sign off.
Keystone connects to your stack and keeps data governed, with EU-based hosting and controls that satisfy both your IT team and your data-protection obligations.
Define the data boundary before connecting
- Tenant isolation: customer workspaces are isolated.
- Restricted supplier access: supplier access is limited to authorised information.
- AI boundaries: controls govern AI providers and processing regions.
Agree data ownership, public DPP fields, support access, retention and deletion during the security review.
Fit your existing Microsoft and AWS environment
Keep your ERP and PIM authoritative. Scope Dynamics 365 or other systems through documented APIs and agreed field mappings. Microsoft Entra ID SSO is ready to integrate; configure and validate it with your IT team. Agree roles and audit requirements. For AWS workflows, agree API access, credentials and network requirements. Connector availability and setup effort are confirmed during scoping.
Integration
- MCP and a documented REST API, with webhooks for events
- Two-way sync with ERP (Dynamics 365, SAP), PIM, PLM and DAM
- Your existing systems stay the systems of record; Keystone is the governed layer on top
- No rip-and-replace, so onboarding is measured in weeks
Security
- A 99.5% uptime service-level agreement, with incident response and status reporting
- SSO and SAML, role-based access control and audit logging
- Full provenance on every value, so each number traces to its source
- AI used within guardrails, with sources tracked, never an unmanaged black box
Data protection, so legal can sign off too
- EU-based hosting, with data residency set in the agreement
- Frontier AI models used under controls, with sources tracked and no training on your data
- A clear sub-processor and transfer position for your DPA, aligned to GDPR
- Access, retention and deletion controls your legal team can review