AI-Powered Identity Governance and Access Reviews for Human, Non-Human and AI Identities

BalkanID sells identity security and access governance software to organizations that must prove who can reach which systems and why. The company was founded by Subbu Rama, a repeat entrepreneur who previously co-founded Bitfusion, and Sameer Sait, a former chief information security officer at Whole Foods Market, Arrow Electronics and Forcepoint. Its stated buyers are CISOs, identity leaders, IT auditors and compliance officers in fintech, SaaS and healthcare, and its scope covers human, non-human and AI identities across both cloud and legacy estates.

Entitlement data is extracted on demand from HR, IT and application systems through more than 250 out-of-the-box connectors spanning identity providers, cloud infrastructure, SaaS and HR platforms, with an AI-assisted SDK for custom or on-premises applications that expose no API. Collected permissions feed a patent-pending identity knowledge graph, where peer-group comparison surfaces outliers and heuristics attach confidence levels to employee-to-role mappings. Toxic combinations, segregation-of-duties conflicts, orphaned accounts, dormant access and excessive privilege are flagged for risk-based review and remediation.

Four capabilities sit on that graph: risk-based access reviews producing audit-ready evidence for SOC 2, ISO 27001, SOX, HIPAA, GDPR and FFIEC cycles; access lifecycle management with just-in-time provisioning and deprovisioning; identity risk intelligence; and a Copilot that answers natural-language questions and emits playbooks as Python or visual query flowcharts. Copilot runs as both an MCP server and client, so it can operate alongside incumbent IAM tooling. Delivery spans a self-serve Lite tier, an enterprise edition and a managed IGA service.