Features and capabilities recently added to the platform.
Kevala ships on a regular quarterly release cadence.
Your logo and organization name on the reports you hand to leadership and assessors.
Upload your organization's logo and choose the name that appears on reports. Both show up on PDF exports, on-screen reports, downloadable HTML reports and scheduled report emails, so what you send to the board or an assessor looks like it came from your team.
Organization names written in Arabic now render correctly in PDF reports, with properly joined letters and right-to-left direction, in the header, footer and watermark.
Choose whether PDF reports carry a diagonal watermark with your organization name. Keep it on for drafts and internal circulation, or turn it off for final copies.
CSV exports now open cleanly in Excel when they contain Arabic text, and carry your report name in the header.
Native Arabic, signed in-app updates, and broader operational coverage.
Kevala is now fully bilingual. The entire product (every screen, form, message, and report) is available in English and Arabic, with full right-to-left layout. Locale preference persists across login. Designed for GRC teams in the Gulf and broader MENA region who need to operate in their working language.
Apply new releases directly from the admin interface. Upload a signed release package, and the appliance applies it automatically, with cryptographic verification at every step and automatic rollback if anything fails. No SSH, no service restarts, no maintenance window.
Attach the canonical PDF or DOCX to each policy record, alongside the structured metadata and version history. The document and its metadata stay together as the policy evolves.
A new module for plotting a multi-quarter compliance roadmap across phases, from initial scoping through audit-ready. Available on Professional and Enterprise tiers.
Comprehensive in-app help, fully bilingual, with articles for every major module. Available without leaving the application.
Saudi Arabia's Personal Data Protection Law is now a built-in framework, with each control traced back to the Law and its Implementing Regulations. It is recommended automatically during onboarding for organizations in Saudi Arabia.
When a change needs sign-off, Kevala records exactly what was requested. Once the approver signs off, the change is carried out for you, with nothing to re-enter.
Built-in guidance for controls across the major Saudi and regional frameworks, in English and Arabic, ready the moment you open a control. No internet connection needed.
Every font, icon and script the interface needs now ships inside the appliance. Kevala looks and works the same on a network with no internet access at all.
EU AI Act conformity, an appliance distribution model, and a security hardening pass.
A step-by-step wizard for conformity with the EU AI Act. Classify your AI systems by risk tier, complete the technical documentation checklist, and generate a conformity report. Built into the platform alongside your existing frameworks.
Kevala now ships as a pre-built VM appliance: download, import, and run. Suitable for on-premises deployment, air-gapped environments, and regulated sectors where data sovereignty matters.
Comprehensive security review across the entire application: authentication flows, session handling, input validation, file upload pathways, and rate limiting. The full security posture is documented on the Security page.
We're happy to talk through the roadmap and what would matter most for your environment.
Talk to us