Legal Kit — a compliance portal for your brand

A Legal Kit is a branded, shareable compliance portal where you present legal documents, compliance badges (SOC 2, GDPR, ISO 27001, etc.), and certificates. Visitors can view public documents or request access to protected ones — all through a professional portal under your brand.

When a visitor clicks "Request Access" on a protected badge, they enter their email. If they already have approved access, they verify via a one-time code (OTP). If they are new, they fill a short form (name, country, reason) protected by Cloudflare Turnstile. The request goes to your dashboard where you approve or deny it. Approved users get an email with a link to access the documents.

Yes. The Free plan includes 2 Legal Kits with all features including protected badges and the access request flow. Starter gets 15 Legal Kits, and Pro/Agency plans get unlimited. Custom domain support requires Pro or Agency.

Yes. Pro and Agency plans support custom domains for Legal Kits, just like Brand Kits. You can serve your legal portal at compliance.yourcompany.com with SSL included.

PDFs render directly in the browser. PowerPoint (PPTX), Word (DOCX), and Excel (XLSX) files open via Office Online viewer. CSV files render as interactive tables. Images display with zoom. No downloads required to review any document.

Vanta and Scrut are full compliance automation platforms ($15K-50K/year) that focus on audit evidence, control monitoring, and SOC 2 readiness. BrandKity Legal Kit is a lightweight, affordable compliance document portal ($0-59/month) for sharing legal docs and compliance badges with prospects, partners, and clients. No audit automation — just clean, professional document sharing with access controls.

Yes. Legal Kits reuse the same visual block editor, but the block picker is filtered to only show Rich Text and Compliance Badge blocks. You get the same editing experience — just focused on legal content.

Yes. Protected badges require visitors to request and be approved before accessing documents. All public-facing forms are protected by Cloudflare Turnstile (bot protection) and rate-limited. Returning approved users verify via OTP. No shared passwords.