Identity Governance & Administration
EU-native IGA — SaaS, private cloud, or on-premises.
From inquiry to working POC in a single morning.
Today
The problem
Classic IGA platforms take 12–18 months before they deliver real value. By then, your org has changed.
You have 50× more non-human identities than employees — service accounts, AI agents, bots — and no visibility into who owns them.
Certifications that nobody trusts. Managers rubber-stamp hundreds of rows without any context.
Connector configuration takes 4–8 weeks per system. You're still onboarding your 3rd connector when the project is due.
No audit evidence. Reconciliation gives you counts, not reasons. Your auditor asks "why?" and you have no answer.
DORA / NIS2 deadlines don't care about your 18-month implementation timeline.
Market context · 2026
Non-human identities now outnumber employees 50:1. AI agents, automation bots, and cloud workloads are your biggest identity surface — and the least governed.
DORA (Feb 2025), NIS2 (Oct 2024), and AI Act (2026) all require continuous access oversight and audit-ready evidence. Fines for non-compliance: up to €10M.
EU mid-market customers can't send identity data to US cloud hyperscalers. They need on-prem or EU-sovereign deployment — without losing SaaS convenience.
Our approach
New connectors land in read-only mode by default. Sync identities, accounts, entitlements in under 5 minutes — no provisioning rules to author first. Quick Scan delivers risk score, SoD findings, role proposals, and drift report the same day. Provisioning opt-in, per object.
14-component identity risk score (0-100, daily trend), cross-system SoD rules, dormant grant detector, peer-group outlier detector — all deterministic, all explainable. One-click audit packs map directly to SOX § Access, ISO Annex A.9, HIPAA § 164.312, GDPR Art. 32.
Tier-3 agent runs inside your VPC — connector credentials encrypted on your machine, never transmitted to the control plane. Deploy on our EU SaaS, EU Sovereign SaaS (OVH/Scaleway, no US Cloud Act), your own cloud account, or fully on-premises.
Competitive position
| Capability | RapidValue | SailPoint | Saviynt | Omada | Entra ID Gov |
|---|---|---|---|---|---|
| Connector onboarding (read-only) | ⚡ 5 min (visibility-first) | 4–8 wks | 4–8 wks | 3–6 wks | 2–4 wks |
| 14-component identity risk score + daily trend | ✅ Built-in (IVIP) | ⚠️ Atlas add-on | ⚠️ Add-on | ❌ | ⚠️ Basic |
| Cross-system SoD rules | ✅ Declarative (IVIP) | ❌ | ⚠️ Within app | ❌ | ❌ |
| Framework audit packs (SOX/ISO/HIPAA/GDPR) | ✅ One-click ZIP | ❌ | ❌ | ❌ | ❌ |
| Dormant grant detector + peer outliers | ✅ Built-in (IVIP) | ⚠️ | ⚠️ | ❌ | ❌ |
| NHI 4-tier ownership model | ✅ Built-in | ⚠️ Add-on | ⚠️ Partial | ⚠️ Partial | ❌ |
| Recon snapshot + reason per grant | ✅ Every run | ❌ | ❌ | ❌ | ❌ |
| Blast-radius graph (4-level) | ✅ Built-in | ⚠️ Partial | ❌ | ❌ | ❌ |
| Role mining (8 algo + cross-dedup) | ✅ Built-in | ✅ Add-on | ✅ Add-on | ✅ Basic | ⚠️ Basic |
| Tier-3 on-prem agent (EU data residency) | ✅ Included | ✅ Complex | ✅ Complex | ✅ Complex | ❌ |
| Engine pause kill-switch | ✅ Built-in | ❌ | ❌ | ❌ | ❌ |
| POC to production (time) | 30 min POC, 4 wks prod | 6–9 months | 6–9 months | 4–6 months | 2–3 months |
ROI & time-to-value
| Milestone | Classic IGA | RapidValue |
|---|---|---|
| First sync + drift report | 8–12 weeks | Same day |
| First role-model proposals | 6–9 months | 2–4 weeks |
| First audit-ready certification | 9–15 months | Week 4 |
| Full JML automation | 12–18 months | 8–12 weeks |
| 3-year TCO (mid-market baseline) | €3.04M | €1.19M |
The POC motion
rv-poc bootstrapPOC tenant enabled, agent registered, handoff text printed — 60 seconds.
curl -fsSL .../installer | bash — tier-3 agent running in their VPC in ~5 minutes.
5-step wizard, read-only by default. First sync completes in under 5 minutes — no provisioning rules to author first.
Risk score per identity (14-component), SoD findings, dormant grants, peer outliers, role proposals — all from their actual data, same morning.
Privacy-safe aggregate summary + one-click audit pack (SOX / ISO / HIPAA / GDPR) downloaded — safe to share with CISO, DPO, legal team without prior review.
Identity data syncs to the control plane to power governance workflows — same as any IGA vendor. Choose Private Cloud or On-Premises deployment to keep all data in your environment.
Ideal customer profile
SWEET SPOT ✓
🏢 500–10,000 identities (humans + NHIs combined)
🔌 5–50 target systems to govern
🇪🇺 Belgium / Netherlands / DACH / France — multi-locale first
⚖️ DORA / NIS2 / GDPR / SOX pressure but no 8-person IAM team
😤 Burned by a previous IGA project — or starting fresh and refusing to repeat it
NOT A FIT (today) ✗
❌ < 100 identities — a spreadsheet works fine
❌ > 50,000 identities — we scale there in 2027
❌ Needs 6-person implementation team for heavy customisation — look at SailPoint Identity Security Cloud
Vertical priority
Pricing
Ready to move?
We walk through your environment screenshots. You leave with a customised drift report and role proposals.
rapidvalue.be/iga/demo
Connect a sandbox in read-only mode. Get risk score, SoD findings, dormant grants, role-mining baseline, and audit pack for your CISO — same morning.
IVIP Visibility tier · €3k/mo · no provisioning rules to write
Our engineers map your current IAM landscape and deliver a gap report with a tailored migration path — no commitment required.
4-hour workshop, remote or on-site