SaaS transparency ranking · Security and compliance
Identity governance software
27 vendors · updated 2026-10-17 · 1 without enough data for a score
Access reviews, provisioning and joiner-mover-leaver, ranked by what they publish about how they handle your data.
Public transparency score, not a product or security rating. Transparency means: published on the vendor's own site, readable without a login, found by us at the addresses we checked.
+5points above the median of every category we measure
- Identity governance22
- All categories17
- A0 0%
- B0 0%
- C0 0%
- D3 12%
- E7 27%
- F16 62%
- Data processing agreement3, filter to these
- Subprocessor list1, filter to these
- Data location stated8, filter to these
- Status page with history6, filter to these
-
1
Hyprhypr.comTransparency 48/100 DBand D
- Data processing agreement: not found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: not found
5 found7 gapsGaps Data processing agreement, Data location stated, +5Transparency alternatives
-
2
Imprivataimprivata.comTransparency 43/100 DBand D
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Subprocessor list, Public pricing, +6Transparency alternatives
-
3
Oasis Securityoasis.securityTransparency 43/100 DBand D
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: found
6 found6 gapsGaps Subprocessor list, Data location stated, +4Transparency alternatives
-
4
Access Owlaccessowl.comTransparency 39/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
5
Simeiosimeio.comTransparency 35/100 EBand E
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Subprocessor list, Status page with history, +7Transparency alternatives
-
6
Avatieravatier.comTransparency 30/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
7
Beta Systemsbetasystems.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
8
Clear Skyeclearskye.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
9
GAT Labsgatlabs.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
3 found6 gaps3 not measuredGaps Data processing agreement, Subprocessor list, +4Transparency alternatives
-
10
Identityautomationidentityautomation.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
11
Ipgipg-group.comTransparency 23/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not found
- Named privacy contact: found
3 found8 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
12
Entitleentitle.ioTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
13
Gluugluu.orgTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
14
Radiantlogicradiantlogic.comTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
15
Optimal Idmoptimalidm.comTransparency 19/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not measured
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found9 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
16
Sonraisonraisecurity.comTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
17
Transmit Securitytransmitsecurity.comTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
18
Atvantageatvantage.comTransparency 14/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not found
- Named privacy contact: found
2 found9 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
19
BAYOOSOFTbayoosoft.comTransparency 13/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
20
Evidian Orbionevidian.comTransparency 13/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
21
Omadaomadaidentity.comTransparency 13/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
22
Tools4evertools4ever.comTransparency 13/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
23
Astrixastrix.securityTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
24
Evolveumevolveum.comTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
25
CAOSYS Shieldcaosys.comTransparency 4/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
26
Idmworksidmworks.comTransparency 0/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not found
- Named privacy contact: not found
0 found11 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
Stratastrata.ioNot enough data: 4 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: found
- Public pricing: not measured
- Certifications named: found
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
3 found1 gap8 not measuredGaps No third-party tracking before consent
-
Tick 2 vendors to compare them. 0 of 2 selected 1 of 2 selected 2 of 2 selected More than 2 selected. A comparison sets 2 side by side.
Narrow it down
Each of these lists the Identity governance vendors that meet one condition, with the source for each, and appears only where at least 8 of them meet it.
This category, criterion by criterion
How this market does on each criterion, with its own share and how it compares with the rest.
- Data processing agreement
- Subprocessor list
- Data location stated
- Status page with history
- Public pricing
- Certifications named
- Uptime SLA with a figure
- HTTPS enforced with HSTS
- No third-party tracking before consent
- security.txt (RFC 9116)
- Notice before subprocessors change
- Named privacy contact
Every result links its source on the vendor page. A grey segment means we could not measure it, not that it is missing. See how we score.