Question 1

Do I need to replace my HRIS?

Accepted Answer

No. Klef sits downstream of the HR system you already run.

Question 2

Is Klef an identity management tool?

Accepted Answer

Partly. Klef grants and revokes access as people join, move, and leave, and keeps their details in sync everywhere. It doesn't handle sign-in or replace SSO, so it runs alongside your identity provider.

Question 3

Does Klef overwrite everything in our downstream systems?

Accepted Answer

No. Klef only manages the fields a policy declares. Anything a policy doesn't mention, or marks as unmanaged, is left alone.

Question 4

How does Klef handle contractors or people with more than one job?

Accepted Answer

Contractors are workers like anyone else, and policies can target them separately. Policies also see each of a worker's jobs, so you decide whether access follows every one or only the primary.

Question 5

Who on the team usually owns Klef?

Accepted Answer

IT and People operations, together. People ops own what the HRIS says is true; IT own what the downstream systems do about it. Klef is the seam between the two, so both usually sit in it.

Question 6

What systems does Klef connect to?

Accepted Answer

See the connectors page for a comprehensive list.

Question 7

Which HR systems does Klef support?

Accepted Answer

ADP Workforce Now, Gusto, and BambooHR. See the HR and payroll connectors on the connectors page for the current list.

Question 8

How long does setup take?

Accepted Answer

You can set up your organization within an hour.

Question 9

What about accounts people already have?

Accepted Answer

Klef matches existing accounts to the right worker and takes them over instead of creating duplicates. Anything it can't match confidently is flagged for you to resolve.

Question 10

What if the system we need isn't listed?

Accepted Answer

Tell us which one and what you need it to do - get in touch and we'll tell you honestly whether it is on the roadmap.

Question 11

Can I preview what a sync will change?

Accepted Answer

Yes. Every sync generates a plan for your review. You can opt out in your workspace settings and instead have changes apply downstream immediately.

Question 12

When someone is terminated, is access removed immediately?

Accepted Answer

Within 15 minutes. Klef syncs on a schedule every 15 minutes, so access is removed on the next run. Event-based sync is coming soon and will make it immediate.

Question 13

What if someone changes an account directly in the downstream system?

Accepted Answer

Klef puts it back. On the next sync, any field a policy manages is returned to what the policy says, and the plan reports the drift so you can see it happened.

Question 14

Can we undo a change Klef made?

Accepted Answer

Not directly. Policies define what your downstream systems should look like, so to change what Klef did, update the policy and the next sync applies it. If you need Klef to stop writing to a system altogether, you can disable its connector.

Question 15

Is there a record of what Klef changed?

Accepted Answer

Yes. Every write Klef makes is recorded against the worker it affected and the plan that made it, so every change can be traced back to where it came from.

Question 16

Can we export our data?

Accepted Answer

Yes. An owner can start an export from the workspace settings, and we'll email them a download link when it's ready. The ZIP includes your workers, members, policies, segments, lookup tables, scripts, and audit log. Credentials and secret values aren't included.

Question 17

How do we delete our workspace?

Accepted Answer

An owner can delete it from the workspace settings. The workspace is locked right away and the subscription is canceled. For 14 days an owner can restore it, and after that all of its data is permanently deleted. Backups that still hold it expire on their normal schedule.

Question 18

Does Klef support SAML SSO?

Accepted Answer

Yes, on Standard and above. See the pricing page for what each tier includes.

Question 19

What does Klef cost?

Accepted Answer

See the pricing page for the full breakdown.

Question 20

Does my bill change as we hire?

Accepted Answer

No. Every tier is a flat monthly rate that covers every synced worker, so your bill is the same whether Klef keeps 50 people in sync or 5,000.

Question 21

Are there per-seat or per-connector fees?

Accepted Answer

No. Team members, policies, and connectors are all unlimited on every tier.

Question 22

Can I try it before paying?

Accepted Answer

We don't currently offer that.

Question 23

Can I cancel anytime?

Accepted Answer

Yes. However, you will be billed for period in which you canceled.

Question 24

Can I swap tiers?

Accepted Answer

Yes, at any time. You're credited for the time you've already paid for. See the docs for how tier changes are billed.

Question 25

What are AI credits?

Accepted Answer

Every tier includes a monthly allowance of AI credits for the AI chat assistant. Nothing else uses them. Unused credits don't carry over, and you can buy more at any time.

Question 26

What happens if we run out of AI credits?

Accepted Answer

The AI chat assistant stops working until your allowance renews or you buy more credits. Everything else keeps working.

Question 27

Do you offer discounts for nonprofits, education, or startups?

Accepted Answer

Not at this time, but we're willing to talk about it. Contact us if you'd like to.

Question 28

What happens to our data after we cancel?

Accepted Answer

Your workspace is locked and scheduled syncs stop, but your data isn't deleted. To remove it, an owner can delete the workspace from its settings.

Frequently asked questions

General

Pricing

Setup

Access and audit