AI Governance & Security Vendor Wiki

3 min read

SailPoint

Researched 2026-06-28. Primary category: identity-governance.

One-liner — The category-defining identity governance (IGA) vendor: who has access to what, access certifications, and joiner/mover/leaver lifecycle at enterprise scale.

What it does

SailPoint governs identity: it discovers and certifies access, runs access reviews/recertifications, automates provisioning/deprovisioning across the joiner-mover-leaver lifecycle, enforces separation-of-duties policy, and increasingly applies AI/ML to access risk. Its modern stack is the cloud Identity Security Cloud (Atlas; formerly IdentityNow); IdentityIQ is the legacy on-prem product still in regulated estates. Extends to data access governance (SailPoint DAS) over unstructured data.

Where it sits in the stack

The identity-governance foundation (IGA/ISPM), and data-access-governance for files/data. It controls access to sensitive data by governing and attesting who can reach what — the entitlement substrate that AI assistants and entitlement-aware-rag must inherit so an LLM never surfaces data the user can’t see.

Deployment & architecture

SaaS (Atlas/Identity Security Cloud) plus legacy on-prem (IdentityIQ). Connects to IdPs (microsoft-entra, okta, ping-identity), HR systems, and hundreds of target apps for provisioning and access collection. Sits above the IdP: the IdP authenticates, SailPoint governs/certifies.

Positioning & differentiators

The incumbent enterprise IGA leader — deepest connector catalog, strongest certification/compliance pedigree, the safe choice for large regulated buyers. Trade-off: heavyweight and implementation-intensive versus newer automation-first challengers (lumos, conductorone) and visibility-first platforms (veza). Competes head-on with saviynt.

Ownership, funding & M&A

Verified. SailPoint returned to public markets on Nasdaq (ticker SAIL) in February 2025, raising $1.38B (60M shares at $23). It first IPO’d in 2017, was taken private by Thoma Bravo in 2022 (~$6.9B), and re-IPO’d in 2025 — but Thoma Bravo retained ~88% and board control post-IPO, so it’s public-but-PE-controlled. Matches the brief’s re-IPO note. Ownership set public, confidence high. (Stub had independent → corrected to public.)

CTO / hedge-fund lens

Day-2 for most funds — IGA is a maturity/compliance layer you add after the IdP, SIEM, and DLP basics. It becomes Day-1-ish under SR 11-7-style model-risk / audit regimes or heavy RAG, where you must prove access entitlements and recertify them. For a 50–500-person fund, SailPoint is often heavier than needed; lighter automation-first tools may fit better unless the fund is large, regulated, or already standardized on it.

Competitors / alternatives

saviynt, veza, conductorone, lumos. Microsoft’s bundled option: microsoft-entra (Entra ID Governance). Data-access neighbors: varonis, cyera.

Open questions / to verify

  • Pace of migration from legacy IdentityIQ to Atlas; agent/NHI governance roadmap depth.

Sources

History

  • [2026-06-28] Stub created from seed registry.
  • [2026-06-28] Researched; verified Feb 2025 Nasdaq re-IPO under Thoma Bravo (~88% retained). Corrected ownership independent→public, confidence high. Day-2 (Day-1 under model-risk/RAG), medium hedge-fund fit.

Graph View

Backlinks