keepmeright.com

What It Is

KeepMeRight is a GDPR management system under Enigma+. Its goal is not to provide traditional network perimeter protection, but to help organizations continuously manage GDPR compliance workflows and keep evidence of every step. It focuses on data subject requests, deletion requests, complaints, data breach response, data mapping, policy controls, and compliance reporting, making it suitable for formalizing privacy compliance processes.

Core Capabilities

In terms of protection type, it is more about privacy compliance and process governance: it can manage SAR access requests, RTBF right-to-be-forgotten/deletion requests, data breaches, complaints, and training records. For management and alerts, the system highlights outstanding items in the dashboard, menus, Email, and SMS, and can send customizable confirmation emails to data subjects. Logging and reporting are its main selling points: all actions are automatically recorded, and PDF compliance reports can be generated. A website Widget can be embedded into customer websites, allowing users to submit requests, file complaints, or view privacy policies directly, reducing the cost of manual collection.

Pricing and Deployment

Pricing is public and a free trial is available: Standard costs £20/month and supports up to 20 GDPR issues/month; Multi-website costs £35.50/month and supports up to 10 website Widgets and 100 issues/month; Fully Managed Service costs £250/month and includes unlimited Widgets, policy maintenance, report reviews, and expert GDPR advice. Based on the available text, deployment appears to be an online system plus a website widget, but it does not state whether private deployment, data residency, or API access is supported.

Pros and Cons

Its strengths are relatively comprehensive workflow coverage, a low barrier to adoption, and reports/logs that can help demonstrate compliance efforts to the ICO. It is especially suitable for organizations without a dedicated privacy team. The limitations are also clear: the page does not disclose details about encryption, access controls, certifications, data security architecture, SLA, or third-party integrations. Its compliance scope is focused on GDPR, with no visible support for local regulations such as China’s Personal Information Protection Law.

Best Fit and Access from China

It is suitable for UK/EU-facing business websites, SMEs, multi-website organizations, and teams that need to quickly establish GDPR request handling and evidence retention processes. The text does not provide information about access from China, so network connectivity and payment methods are both unknown. For China-facing operations, it is advisable to also evaluate local privacy compliance, data security governance, or Cookie/consent management alternatives, and to confirm cross-border data handling, payment options, and access stability.