{
  "title": "Keragon: full-surface brand truth proof",
  "publisher": "BrandAnchor",
  "relationship": "Independent research example. Keragon is not represented as a client or endorsing party.",
  "approval_status": "Proposed reference record; Keragon approval pending",
  "sources": [
    {
      "id": "keragon-pricing",
      "label": "Plans & pricing",
      "surface": "Pricing",
      "summary": "Plan-specific scope for enterprise identity and granular access.",
      "url": "https://www.keragon.com/pricing",
      "captured_at_utc": "2026-10-22T23:09:26.146722+00:00",
      "raw_sha256": "2a76174c7ff7e8917548638337e33541959ef5744bedcd4490fac0b38990d024"
    },
    {
      "id": "keragon-security",
      "label": "Security & compliance",
      "surface": "Security",
      "summary": "Broad access-control wording needs a distinction between standard and enterprise controls.",
      "url": "https://www.keragon.com/security",
      "captured_at_utc": "2026-10-22T23:10:08.212088+00:00",
      "raw_sha256": "e0f79ecdca2142f2cb62975ac241b2171f3e04aeada99f55f2791aa3a460b79d"
    },
    {
      "id": "keragon-comparison",
      "label": "Keragon vs. Zapier",
      "surface": "Comparison",
      "summary": "The page assigns all enterprise controls to every plan.",
      "url": "https://www.keragon.com/hipaa-zapier-alternative",
      "captured_at_utc": "2026-10-22T23:10:10.638009+00:00",
      "raw_sha256": "1bcc133aa480f35676662f523557b6bcb4df2b3b8e64f9695db02ea9b8c04aca"
    },
    {
      "id": "keragon-pricing-md",
      "label": "Machine-readable pricing",
      "surface": "Machine-readable",
      "summary": "The pricing record separates Google login from Enterprise SAML/LDAP and RBAC.",
      "url": "https://www.keragon.com/.well-known/pricing.md",
      "captured_at_utc": "2026-10-22T23:10:17.995631+00:00",
      "raw_sha256": "b66f1fcfb21efc15a3da5c477f415b7b0fa548f499fcf877985b59c9b5236ca5"
    },
    {
      "id": "keragon-llms",
      "label": "llms.txt",
      "surface": "Machine-readable",
      "summary": "An index links to product, pricing and security sources. Its BAA and trial summaries align.",
      "url": "https://www.keragon.com/llms.txt",
      "captured_at_utc": "2026-10-22T23:10:15.615158+00:00",
      "raw_sha256": "b1c642ebb95e3f46382ce3303f1cba4ed25dcf5a253d34874c4132b5612d9b3f"
    },
    {
      "id": "keragon-home",
      "label": "Product website",
      "surface": "Product",
      "summary": "Product and integration descriptions provide context for the buying question.",
      "url": "https://www.keragon.com/",
      "captured_at_utc": "2026-10-22T23:10:13.106704+00:00",
      "raw_sha256": "2a7f0e29af9433dc18aa0d532163f6c30e7461fb6c2212e9c40a9b5d5f4a22db"
    },
    {
      "id": "zapier-data-privacy",
      "label": "Zapier published data terms",
      "surface": "Competitor source",
      "summary": "Zapier states that HIPAA-regulated PHI is unsupported on its platform. It also states that it cannot sign BAAs or equivalent agreements for handling PHI.",
      "url": "https://zapier.com/legal/data-privacy",
      "captured_at_utc": "2026-10-22T23:12:41Z",
      "raw_sha256": null,
      "capture_method": "Official URL opened with web tool; rendered text reviewed at Data Privacy FAQ, lines 338-339. This is not a browser screenshot or raw-page capture."
    }
  ],
  "findings": [
    {
      "id": "enterprise-controls",
      "topic": "Security & plan scope",
      "status": "Source disagreement",
      "kind": "issue",
      "title": "Enterprise controls: every plan, or Enterprise scope?",
      "finding": "The comparison page assigns all enterprise controls to every plan. The pricing sources reserve SAML/LDAP identity and granular access controls for Enterprise.",
      "decision": "Use the plan-specific pricing record as a provisional reference. Ask Keragon to approve the scope before publishing any correction.",
      "sources": [
        "keragon-comparison",
        "keragon-pricing",
        "keragon-pricing-md"
      ]
    },
    {
      "id": "standard-roles",
      "topic": "Product capability",
      "status": "Needs clarification",
      "kind": "pending",
      "title": "Standard roles and granular RBAC need separate definitions.",
      "finding": "The security page describes roles on every plan. That wording could refer to basic roles rather than the granular Enterprise feature.",
      "decision": "Keep this distinction unresolved until the product owner defines standard permissions and granular RBAC. Generic SSO is not automatically Enterprise SAML/LDAP.",
      "sources": [
        "keragon-security",
        "keragon-pricing-md"
      ]
    },
    {
      "id": "baa",
      "topic": "Commercial terms",
      "status": "Aligned in reviewed sources",
      "kind": "aligned",
      "title": "Standard BAA availability stays consistent.",
      "finding": "The reviewed pricing, security, comparison and llms.txt sources describe a standard BAA on paid plans. Custom BAA terms have a separate Enterprise scope.",
      "decision": "Preserve this supported distinction. The review records vendor statements; it does not certify the product or review an executed agreement.",
      "sources": [
        "keragon-pricing",
        "keragon-security",
        "keragon-comparison",
        "keragon-llms"
      ]
    },
    {
      "id": "trial",
      "topic": "Trial & pricing",
      "status": "Aligned in reviewed sources",
      "kind": "aligned",
      "title": "The 14-day trial is a supported fact.",
      "finding": "The pricing page, machine-readable pricing and llms.txt agree on a 14-day trial without a credit card.",
      "decision": "Keep the trial statement separate from paid-plan entitlements and BAA terms.",
      "sources": [
        "keragon-pricing",
        "keragon-pricing-md",
        "keragon-llms"
      ]
    },
    {
      "id": "integrations",
      "topic": "Integrations",
      "status": "Compatible lower bounds",
      "kind": "aligned",
      "title": "300+ and 400+ integrations do not prove a contradiction.",
      "finding": "Machine-readable pricing uses a 300+ lower bound. The product and llms.txt sources use 400+. Both statements can hold at the same time.",
      "decision": "Treat this as a possible freshness improvement, not an exact-count disagreement. A count alone does not establish integration depth or plan access.",
      "sources": [
        "keragon-pricing-md",
        "keragon-home",
        "keragon-llms"
      ]
    },
    {
      "id": "onboarding",
      "topic": "Service scope",
      "status": "Needs clarification",
      "kind": "pending",
      "title": "Dedicated onboarding and ongoing support are different promises.",
      "finding": "The comparison describes dedicated onboarding on paid plans. Pricing describes tiered support. Those services may differ.",
      "decision": "Ask the owner to define onboarding separately from recurring support. Do not label the two statements a confirmed contradiction.",
      "sources": [
        "keragon-comparison",
        "keragon-pricing-md"
      ]
    }
  ],
  "canonical_record": [
    {
      "id": "identity",
      "truth": "Keragon's published pricing assigns Google SSO to every plan and SAML/LDAP SSO exclusively to Enterprise.",
      "invalidated": "SAML/LDAP SSO across every plan",
      "sources": [
        "keragon-pricing-md"
      ],
      "scope": "Published plan scope; brand approval pending"
    },
    {
      "id": "granular-access",
      "truth": "Keragon's published plan matrix assigns granular role-based permissions exclusively to Enterprise.",
      "invalidated": "All enterprise controls across every plan",
      "sources": [
        "keragon-pricing",
        "keragon-pricing-md"
      ],
      "scope": "Granular roles; standard-role scope remains unresolved"
    },
    {
      "id": "standard-baa",
      "truth": "Keragon's reviewed official sources provide a standard BAA on every paid plan and reserve custom BAA terms for Enterprise.",
      "invalidated": "Aligned control; no conflicting assertion observed.",
      "sources": [
        "keragon-pricing",
        "keragon-security"
      ],
      "scope": "Vendor-published commercial terms"
    }
  ],
  "proposed_updates": [
    {
      "surface": "Comparison page",
      "action": "Replace the all-plan enterprise-control claim with approved plan-specific SAML/LDAP and granular-role scope.",
      "state": "Proposed edit"
    },
    {
      "surface": "Security page",
      "action": "Define standard permissions separately from granular RBAC. Add the approved identity-provider scope.",
      "state": "Owner clarification first"
    },
    {
      "surface": "Product & pricing",
      "action": "Preserve the plan matrix. Add a shared definition for basic roles after the owner confirms it.",
      "state": "Preserve + clarify"
    },
    {
      "surface": "Machine-readable pricing",
      "action": "Keep the same approved plan scope and link to the reviewed human-readable explanation.",
      "state": "Consistency check"
    },
    {
      "surface": "llms.txt",
      "action": "Optionally link to the approved identity and access record. Retain its aligned BAA and trial summaries.",
      "state": "Optional proposed addition"
    },
    {
      "surface": "AI answer",
      "action": "After approved source updates, rerun the same buyer question and compare the captured answer.",
      "state": "Recheck not run"
    }
  ],
  "ai_observation": {
    "query": "Which Keragon plans include SAML or LDAP single sign-on and role-based access control?",
    "captured_at_utc": "2026-10-22T17:38:40.785Z",
    "classification": "mixed_or_ambiguous",
    "source_url_capture_method": "External links visible in the AI Mode answer and source cards; this capture does not distinguish inline citations from related source cards.",
    "visible_external_urls": [
      "https://www.keragon.com/pricing",
      "https://besthealthcareautomationsoftware.com/reviews/keragon",
      "https://www.keragon.com/security"
    ],
    "answer_excerpt": "Enterprise single sign-on (SSO) via SAML or LDAP and granular role-based access control (RBAC) are exclusive to the Enterprise plan on Keragon. \nHere is a breakdown of how identity management and access control features differ across their plan tiers:\nKeragon Security & Access Control Features\nFeature\tStarter, Professional, & Scale Up Plans\tEnterprise Plan\nAuthentication (SSO)\tGoogle SSO login\tSAML & LDAP Enterprise SSO\nAccess Control (RBAC)\tStandard role-based permissions\tGranular permissions by role\nMulti-Factor Auth\tTwo-factor authentication (2FA)\tTwo-factor authentication (2FA)\nWhile all paid plans include basic security measures like standard role-based permissions, 2FA, and a signed Business Associate Agreement (BAA) for HIPAA compliance, large organizations requiring corporate identity provider integrations and strict, custom permission mapping must opt for the Enterprise tier.",
    "review": "Mixed or ambiguous. The answer reserves SAML/LDAP and granular RBAC for Enterprise, then describes standard roles on paid plans. Standard-role availability remains unconfirmed.",
    "limit": "The visible link list mixes citations and source cards. The comparison URL is absent. This record does not establish causal attribution or a lost sale."
  },
  "related_ai_observations": [
    {
      "brand": "Jungle Scout",
      "observed_answer": "10 included seats",
      "selected_reference": "3 included seats in the selected pricing table",
      "captured_at_utc": "2026-10-22T17:37:39.865Z",
      "query": "How many seats are included in Jungle Scout Brand Owner plus Competitive Intelligence?",
      "visible_source_urls": [
        "https://support.junglescout.com/hc/en-us/articles/27245557182359-Jungle-Scout-Subscriptions",
        "https://fbasuite.com/jungle-scout-professional-plan/",
        "https://adlabs.app/alternatives/adlabs-vs-jungle-scout/",
        "https://www.rfp.wiki/retail-ecommerce/online-marketplace-optimization-tools/scale-insights/jungle-scout"
      ],
      "limit": "One historical run. This records disagreement with the selected reference, not source causation or current product entitlement."
    },
    {
      "brand": "Ora",
      "observed_answer": "3 Free-plan users",
      "selected_reference": "10 users on the selected pricing page",
      "captured_at_utc": "2026-10-22T17:37:50.386Z",
      "query": "How many unique users can join an Ora Basic organization?",
      "visible_source_urls": [
        "https://ora.pm/docs/adding-members-to-organization",
        "https://ora.pm/pricing"
      ],
      "limit": "One historical run. This records disagreement with the selected reference, not source causation or current product entitlement."
    }
  ],
  "coverage": "Six official Keragon sources, one separately reviewed official Zapier source, and one historical native AI observation.",
  "limits": [
    "Preparation method: reviewed public-source evidence.",
    "Help-center pages, private trust documents, private product behavior, and other AI engines are outside this example.",
    "No source was edited and no AI correction is claimed."
  ]
}