Ketch makes privacy software for brands that collect customer data. It helps them collect consent, answer data rights requests and make sure those choices are respected wherever customer data goes, from ad platforms and data warehouses to AI models.
It is for privacy, legal and marketing teams that need a consent choice to be honoured by every system that touches the data.
At A Glance
| Vendor | Ketch |
|---|---|
| Category | Privacy management, consent and data permissioning |
| Identities covered | Consumer and customer identities, through Identity Sync and the Permission Vault |
| Deployment | SaaS, with a script tag for consent and a Transponder signal layer in the customer environment |
| Agentic AI | Ketch Agent Network (private beta), AI Governance |
| Customers | TIME, Smartsheet, IMAX, Spreedly, Dollar Shave Club |
| Certifications | SOC 2 Type II, ISO/IEC 27001, ISO 27701, IAB Europe TCF registered CMP |
| Market classification | Privacy & Decentralised Identity; also Data Security |
What Ketch Does
Ketch treats privacy as a data permissioning problem. A consent banner does little if the choice never reaches the systems that use the data. The platform enforces consent, rights, policies and intended use across every connected system. Work runs in three stages: find where personal data is and how it flows, turn obligations into enforced permissions, then let marketing use the data that is permitted. One record of every consent and policy decision sits beneath all three as auditable evidence. Consent and data rights signals run for more than 3,500 brands.
Products
Discovery
Privacy teams start by finding out what data they hold and where it flows.
| Data Sentry | A privacy test of the organisation’s websites, scanning for trackers and other privacy issues |
|---|---|
| Data Mapping | Maps data flows and systems |
| Data Discovery and Classification | Automated scanning and diagnostics for websites and systems |
| Iris | A cohort-based scanning algorithm that replaces traditional cookie scanning |
Permissioning
This layer turns legal obligations into enforced behaviour across the business.
| Consent Management | Collects and enforces consent at each interaction point |
|---|---|
| DSR Automation | Takes in, verifies and fulfils data subject requests, fanning deletion out across connected systems with an audit trail |
| Risk Management and Reporting | Reports on privacy risk across the programme |
| AI Governance | Extends permissions to AI models and agents, with AI Sentry catching unauthorised data use |
Growth
Marketing teams use permissioned data without putting compliance at risk, through Marketing Preference Management, Progressive Consent for staged consent collection, and Profile Management for permissioned profiles ready for activation.
How It Works
Consent deploys with a single script tag and no-code configuration, in a reported two to four weeks. Full data orchestration with data warehouse integrations takes a reported six to eight weeks with light engineering support.
| Component | What it does |
|---|---|
| Permission Vault | The server-side source of truth for consent, preferences, rights, identity and policy, giving downstream systems one answer. |
| Transponder | A lightweight signal layer inside the customer environment that carries permission instructions into tags, APIs, partners and data systems, and classifies data without exposing raw records. |
| Identity Sync | Cross-browser and cross-device identity resolution that keeps permissions attached to a person across sessions. |
| Privacy 360 | An audit log of user interactions and choices, recording what fired and when. |
| Developer controls | APIs, webhooks and SDKs, with open source SDKs and rendering examples on GitHub. |
Identities And Systems Covered
| Consumer identities | Website visitors, customers and data subjects whose consent, preferences and rights requests are recorded and resolved across browsers and devices. |
|---|---|
| Workforce access to Ketch | RBAC, SSO and SCIM with organisation-scoped tokens. |
| AI models and agents | Models and agents that use personal data. |
| Systems | Websites, ad platforms, customer data platforms, data warehouses such as Snowflake, and SaaS systems including Salesforce, Workday, Braze, Jira and GitHub. |
Agentic AI Capabilities
Ketch Agent Network
The Ketch Agent Network, in private beta with select customers, orchestrates several agents across an enterprise privacy programme. It observes live context and recommends work, and anything that needs human judgment goes to the customer’s team for review as a diff.
| Document synthesis agent | Extracts AI usage, retention, security measures and sub-processors from DPAs and policies |
|---|---|
| Data discovery agent | Sweeps connected systems for data flows and processing activity |
| Data classification agent | Tags each field by sensitivity, data category and data type |
| Ketch configuration agent | Recommends and can apply configuration changes |
Integrations
| Area | Integrations |
|---|---|
| Google Consent Mode v2, GA4, Google Tag Manager | |
| Commerce | Shopify Plus |
| Data and SaaS | Pre-built connectors to more than 1,000 systems, apps and models |
Company Background
| Founded | 2020. |
|---|---|
| Headquarters | San Francisco, United States. |
| Leadership | Tom Chavez, Co-Founder and CEO; Vivek Vaidya, Co-Founder and CTO; Xavier Zang, COO and CRO; Maxwell Anderson and Anton Winter, Co-Founders. |
| Funding | A reported $68m raised in total, including a Series A in 2021 and a Series B in 2024. |
| Recognition | Included in the 2026 Gartner Magic Quadrant for Privacy UX. |
Note: This overview is compiled from Ketch’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.