Run compliance for your portfolio. Key 102 runs the infrastructure.
Multi-tenant compliance platform licensed to QSAs, C3PAOs, CMMC RPOs, and multi-framework MSSPs. One billing relationship, per-client isolation, co-branded deliverables — audit-grade by design.
Built for firms running compliance at portfolio scale.
Your firm’s logo on every PDF — SPRS L1/L2 affirmations, Fortress SSP + POA&M, Master Audit Report, Quarterly Reports, Tier 2 PCI. The footer locks the Key 102 verification chain, and dashboards carry an “Operated under {Your Firm}” badge.
Every client gets their own engagement: evidence vault, hash-chained audit log, signed deliverables. PostgreSQL Row-Level Security enforces hard boundaries — a misclick can’t leak PHI, CHD, or CUI across your portfolio. A 65-assertion regression suite re-runs on every RLS change.
Append-only hash-chained audit log. Every signed deliverable RFC 3161 timestamped by SSL.com’s TSA. A public /verify endpoint resolves any deliverable’s SHA-256 to a structured attestation — your clients’ QSAs and C3PAOs verify the chain, not your word.
Your clients own their evidence. If your agency ever cancels, each client gets a 30-day read-only grace period and can move to a direct Key 102 subscription, migrate to another partner, or export the full vault as a ZIP. Key 102 never auto-bills the customer.
Two tiers. Both real revenue lines.
Co-branded delivery on the Key 102 trust chain. The customer-visible footer credits the Key 102 Compliance Network.
- 5 consultant seats included · $250 / mo each above
- 10 concurrent engagements included · $150 / mo each above
- Co-branded covers on every deliverable PDF
- "Operated under {Your Firm}" badge on customer dashboards
- Customer-owned evidence vault — ZIP export on demand
- Full trust chain (hash-chained audit, RFC 3161 anchors, public /verify)
- Daily quota reconciliation — Stripe add-ons auto-scale
Full white-label tier under intentional development. The architecture is locked; the build is paced to ship right. The first one or two design partners shape the operational details.
- Everything in Standard
- Custom DNS (
compliance.your-firm.com) via Host-header routing - No Key 102 wordmark customer-visible — fully white-labeled
- Custom SMTP on your domain (encrypted credential storage)
/verifymirror at your hostname
No Stripe Connect, no revenue share. You pay Key 102; you invoice your clients on your own terms. Zero financial-plumbing complexity.
Talk through tier fit.
30-minute discovery call. Bring your portfolio size, your existing tooling, and your biggest compliance pain points. We'll map Standard or Enterprise to your shape.