Kanishu Assurance Prove. Protect. Move Forward.

Know when a control fails. Keep the evidence. Be ready to explain what happened.

Kanishu Assurance checks defined operational controls across your connected Kanishu products, flags exceptions, tracks remediation, verifies reported audit-trail integrity and helps organise supporting evidence for review.

See it in action See plans & pricing Watch the tour How it fits into the suite →

The problem

Audit gaps surface during the audit, not before it

Evidence is gathered in a scramble, and the gaps an auditor finds first — a change approved by its own requester, a disposed laptop with no wipe record — were sitting in your systems all year.

What changes with Continuous Assurance

Gaps found daily, not yearly

Checks run every day across your Kanishu products and land in one worklist, most severe first.

Findings that reflect reality

Fix the cause and the finding closes itself; mark it done while it still happens and it reopens.

Evidence in one place

Weekly check results filed against each control automatically, next to the evidence you upload — ready for your auditor.

A view auditors can use

A read-only, time-limited auditor link — every visit recorded.

Key capabilities

What Continuous Assurance does across its plans. Availability and limits vary by plan — each capability below shows the plan it starts on, and the comparison lists every difference.

Continuous control monitoring, not a once-a-year scramble
Reads asset, ticket, and vendor data across the whole suite
Automated findings with severity and remediation tracking
Built for teams who need evidence on demand, not just a dashboard

Take the 3-minute tour

Continuous Assurance with sample data — the screens your team would use every day.

See it

Control health: open findings, recent check runs and trends.
Dashboard. Control health: open findings, recent check runs and trends.
Every failed check with severity, status and the record behind it.
Findings. Every failed check with severity, status and the record behind it.
The record behind a finding, its history and resolution.
A finding. The record behind a finding, its history and resolution.
Scheduled check runs and what each one found.
Check runs. Scheduled check runs and what each one found.
Controls and the checks that test them.
Control library. Controls and the checks that test them.
Weekly check results and uploaded evidence, by control.
Evidence. Weekly check results and uploaded evidence, by control.

Works with the rest of Kanishu

IT Asset Management

Depreciation and disposal records are cross-checked.

Ticketing (ITSM)

Incidents without root cause and changes without proper approval are flagged.

Vendor & Contract Management

Renewal risk and vendor onboarding gaps are flagged.

Everything Continuous Assurance does

Every capability, grouped by what it's for — not a feature-name soup.

Asset & Fixed-Asset-Ledger Reconciliation

Depreciation/status mismatch detection (All plans)
Flags assets that are fully depreciated on paper but still marked active in your inventory.
Missing data-wipe record (All plans)
Flags disposed data-bearing assets with no recorded data-wipe confirmation or destruction certificate.

Incident & Root-Cause Reconciliation

Missing root-cause detection (All plans)
Flags closed incidents with no documented root-cause analysis — only for the priorities and categories you say need one.

Change Management Reconciliation

Growth and above
Segregation-of-duties checking (Growth+)
Flags any change approved by the same person who requested it.
Missing-approval detection (Growth+)
Flags changes marked approved or implemented with no recorded approver.
Incomplete-process detection (Growth+)
Flags changes marked complete without required process fields like a risk assessment.

Vendor & Contract Reconciliation

Business and above
Contract renewal risk detection (Business+)
Flags vendor contracts approaching expiration, cross-linked directly to the vendor record.

Findings & Remediation Tracking

A single, central exceptions worklist (All plans)
Every control gap found by any check, filterable by module, severity, and status.
Severity-first triage (All plans)
High-severity findings surface first by default.
A focused "open work" view (All plans)
Automatically shows only what's still open or acknowledged.
Full context on every finding (All plans)
Source system, record, a clear breakdown of why it was flagged, and a complete timeline.
A complete remediation workflow (All plans)
Acknowledge, resolve, dismiss as a false positive, or reopen at any time.
Self-healing findings (All plans)
A resolved or dismissed finding automatically reopens if the underlying issue is still true.
Automatic resolution when genuinely fixed (All plans)
Fix the issue upstream and the finding here closes itself, no manual bookkeeping.
A complete audit trail (All plans)
On every finding, who did what and when.

Controls, evidence and auditors

Control Library (All plans)
Every check Assurance runs, with its reference, the product it reads, its severity and how many findings are open — so you know exactly what is and isn't checked.
Overdue policy acknowledgements (All plans)
With Policy Management on its Business plan, people who haven't acknowledged a policy by its deadline appear as findings here.
Evidence Vault (All plans)
Every week, each check's results are filed on its control automatically — the runs and every finding open that week — so you can show it was checked throughout. Add your own reports, certificates and screenshots alongside, with a category, an optional expiry date and their history.
Weekly configuration snapshot (All plans)
Every week, a PDF of the security-relevant settings of each Kanishu product you use — the two-factor rule, who has access and which admins, API tokens, SLA targets, change approvers, vendor approval and banking access — filed as evidence. Settings and counts only, never secrets.
Auditor Portal (All plans)
Give an auditor a read-only, time-limited link (up to 90 days) to the controls in scope, the findings against them and the evidence, which they can download — no product account needed. You can revoke it at any time, and every visit and download is recorded.
Audit-trail integrity status (All plans)
The latest check of each Kanishu product's change history: whether it is intact and how many entries were verified, with the time of the check.
Audit periods and auditor requests (All plans)
An audit with a fixed period, so the auditor sees what was true then; their requests tracked to an answer, with evidence attached.
Risk register (All plans)
Risks rated before and after their controls, with an owner, a treatment, and who accepted a risk, why and until when.

Reconciliation Runs & Scheduling

Automatic daily checks (All plans)
Every connected, plan-enabled module checked once a day. Endpoint, log and identity checks also need their sources added.
Run checks on demand (All plans)
Trigger an immediate re-check instead of waiting for the next scheduled run.
A complete run history (All plans)
Status, findings opened/resolved, and duration for every run.
Per-run detail (All plans)
Exactly which checks ran and a clear explanation of any connection issue.

Reporting & Analytics

A compliance-monitoring dashboard (All plans)
Total open findings, high-severity findings, and your most recent check status.
A findings-by-module breakdown (All plans)
Counts per reconciliation module, one click into the filtered list.
A live feed of newest findings (All plans)
Linked directly into each one.
A full, tenant-wide audit log report (Business+)
Every tracked action across the entire product.
Per-record history (All plans)
On individual findings and other records.

Team & Access Management

Simple, secure invitations (All plans)
Teammates set their own password via a secure link.
Four built-in roles (All plans)
Tenant Admin, Assurance Analyst, Viewer, and Auditor, each with sensible defaults.
Individual permission overrides (All plans)
Grant or revoke any specific capability for a specific person, beyond their role.
User directory management (All plans)
View, edit, disable, and re-activate team members.

Security

Multi-factor authentication (MFA) (All plans)
Any user can turn on MFA. Making it compulsory, for administrators or for everyone, is on Business.
Move between Kanishu products (All plans)
Into Ticketing and the other products without signing in again.
Self-service password reset & change (All plans)
Via a secure emailed link, or while logged in.
Account lockout protection (All plans)
Against repeated failed login attempts.

Integrations

Reads records from your Kanishu products (All plans)
ITAM, Ticketing, Vendor & Contract Management, Policy and People — nothing re-keyed. Assurance keeps its own findings, check history and evidence.
Built-in Knowledge Base search & Contact Support (All plans)
Available to every authenticated user, right inside the product.
Access reviews and device coverage from Microsoft (Business+)
Who has an account and when they last signed in, and which devices are managed — collected from Microsoft every few hours instead of uploaded by hand.

AI

Use your own Claude or ChatGPT (Growth+)
Connect your organisation once; each person adds Kanishu to their own Claude or ChatGPT and asks in plain words. It reads only what that person's login may see, and it can't change anything. Uses their own AI subscription — Kanishu doesn't charge for AI.
Ask AI about this record (Growth+)
On a record's page, open Claude or ChatGPT with a question about it already written. Only the record's reference goes in the link, never its contents.
AI inside Kanishu, with your own AI key (Business+)
Add your organisation's own OpenAI, Anthropic or Google Gemini key and ask questions in a chat panel right in the product, as yourself. You choose which kinds of data AI may read and set a monthly limit; your provider bills you for what you use.
Help with the page you're on (Business+)
On any page, ask your own AI to improve what you're writing — a policy statement, the steps of a change, a vendor question — or to explain what you're looking at. It sees the form as you type it, saved or not, and suggests wording for you to use; it never fills anything in itself. Your administrator decides whether pages are shared at all, and passwords, keys and sign-in pages are never sent.
Explain with AI (Business+)
A plain-language explanation of a control's evidence confidence, citing only the checks, evidence and findings behind it. Kanishu works out the status; AI only explains it.
AI that only reads (Growth+)
AI in Kanishu never changes a record by itself: a suggested change waits for a person to approve it. Passwords and keys found in records are hidden before anything is sent, and you choose which kinds of data AI may read.

Health score and reporting

One health score for the whole organisation (All plans)
A score out of 100 on the dashboard, made of areas from the products you use — assets, the service desk, vendors and contracts, access, policies, logging and the sales pipeline — with the change since last month and the main reasons. You decide how much each area counts.
Monthly governance report by email (Business+)
On the 1st of each month, a PDF comparing the month with the one before: the score and what moved it, findings opened and resolved, changes made without approval, risks, assets, contracts ending, SLA breaches and the sales pipeline — sent to the people you choose.

Security

Each organisation's business records are kept in its own database, separate from every other customer's.
Multi-factor authentication any user can turn on; on Business and above, admins can make it compulsory.
Role-based access, adjustable person by person, permission by permission.
A history on every record — who changed what and when — in a chained audit log, so a later edit to the log is detectable.
Secrets you give a product, such as integration passwords and API keys, are encrypted at rest and never shown again once saved; an API token is shown once, when it is issued.

Plans & pricing

Capabilities marked "All plans" above are in every plan; higher plans add capacity and the capabilities marked with the plan they start on.

Starter

For organisations of up to 100 employees.

INR 6,999 /mo

Growth

For organisations of up to 500 employees.

INR 14,999 /mo

Business

For organisations of up to 2,000 employees.

INR 29,999 /mo

Enterprise

For organisations of more than 2,000 employees.

INR 49,999 /mo

Full plan comparison

Included Starter Growth Business Enterprise
Organisation size (employees) Up to 100 Up to 500 Up to 2,000 More than 2,000
Users Unlimited Unlimited Unlimited Unlimited
Evidence storage 5 GB 25 GB 100 GB 250 GB
Asset/Fixed-Asset-Ledger reconciliation
Incident & root-cause reconciliation
Daily automatic reconciliation
Findings worklist and dashboard
MFA for any user, and moving between products
Run checks on demand
Control library, evidence vault and auditor portal
Require MFA (for admins only, or for everyone)
Email support (first reply within 3 business days)
Change Management reconciliation —
Your own Claude or ChatGPT with Kanishu (AI connector) —
Vendor & Contract reconciliation — —
Custom report builder — —
Identity sources (account reviews against leavers in People) — —
Organisation-wide change log and export — —
Joiners, movers and leavers (People) — —
Automatic login changes for joiners and leavers — —
Single sign-on with your identity provider (SAML: Entra ID, Google, Okta) — —
AI inside Kanishu with your own AI key — —
Microsoft 365, Entra ID and Intune connection — —
Monthly governance report by email — —

Add-ons — more capacity without changing plan

Add-onPriceAvailable on
+10 GB storage ₹990 a month Every plan that limits it

Storage packs are bought, never metered, and end with the subscription. At renewal, enough packs are kept for the files you have stored; nothing is ever deleted because of a storage limit — over the limit, only new uploads wait until there is room.

Questions

Does Assurance need the other products?

It reads the Kanishu products you use, so the more of them you have, the more it can check. Its evidence store and auditor access work on their own.

Can I buy just this product?

Yes. Every Kanishu product is sold and billed on its own. Start with one and add others later from the same account — no bundle.

Do the products share one sign-in?

Your team moves between the Kanishu products your organisation uses without signing in again. Each product keeps its own roles and permissions, and People keeps one directory of your staff for all of them.

What happens when we reach a plan limit?

Your admins get an email at 80% and again at 100% of a limit. Nothing is deleted: at the limit you can't add more until you free some up or upgrade, and the usage is shown on your My Plan page.

Do you issue GST invoices?

Yes — a GST tax invoice in rupees for every payment.

What support do you offer?

Support is by email, from inside the product (Contact Support) or by replying to our emails. We reply within 3 business days on every plan, and within 1 business day on plans that include priority support. Business days are Monday to Friday, 9:00 to 17:00 India time. We don't offer chat or phone support.

Using more than one part of the suite?

See how Continuous Assurance connects with the rest of the suite — one account, single sign-on, and cross-linked records.

How the suite works together
← Back to all products