Identos provides a policy‑based access control platform that centralizes governance of user permissions and real‑time consent across both legacy and modern applications.
Funding
Funding not disclosed
Founders
Product
Problem
Healthcare and public sector organizations struggle with fragmented digital services and hard‑coded access controls, making it difficult to enforce consistent, real‑time consent and data‑sharing preferences across legacy and modern applications.
Solution
IDENTOS offers a policy‑based access control (PBAC) platform that centralizes governance of user permissions and consent. The platform integrates role‑based, attribute‑based, time‑based, relationship‑based, and user‑based (UBAC) policies, allowing organizations to define access rules once and enforce them instantly across internal and third‑party systems. Real‑time consent directives from patients, citizens, or caregivers are turned into active enforcement rules, enabling personalized “MyAccount” portals where users manage data‑sharing preferences. Legacy systems can be securely connected to feed modern applications, reducing the need for duplicated security logic and accelerating deployment of compliant digital services. The solution operates on a zero‑trust architecture, securing every API call and user interaction.
Target Audience
Primary customers are healthcare providers, public‑sector agencies, and enterprises that need to secure citizen‑ or patient‑facing digital services while complying with privacy regulations.
Features
- Unified policy engine that harmonizes RBAC, ABAC, TBAC, ReBAC, and UBAC into a single enforcement point
- Real‑time consent management that translates user directives into active access rules
- Personalized user portals for parents, caregivers, and mature minors to delegate and manage access
- Rapid deployment framework that integrates legacy systems without extensive re‑coding
- Universal policy updates that propagate instantly to all connected applications, including third‑party services
- Zero‑trust security model securing each click and API request across the ecosystem
- Compatibility with standard protocols such as OAuth 2.0 for seamless integration