SHT 02 Solutions · Flagship · PIAM Suite
The full identity platform.
One golden record from HR to door reader. Physical and logical access, joiners to leavers, audit-ready by default.
01 Capabilities
Six pillars. One install.
Identity broker
The single source of truth. One record, reconciled from HR, AD, and card systems. Collision detection and conflict resolution built in.
Policy engine
Role-, location-, and time-based access policies applied everywhere in seconds. Write once, enforce across every reader and app.
Lifecycle automation
Joiner, mover, leaver - no tickets, no delays, no drift. HR event to issued credential in under 4 minutes.
Full audit trail
Every grant, revoke, and door event. Regulator-ready lineage in one timeline. Export to SIEM, GRC, or CSV in one click.
148+ connectors
Nedap, Genetec, Honeywell, Oracle HCM, Workday, SAP, AD, Entra, Okta - already wired, production-hardened.
EU sovereign
eu-west-2, eu-central-1, EUSC. ISO 9001, ISO/IEC 27001, TISAX (DEKRA-certified), with GDPR / NIS2 / DORA support. Data never leaves European jurisdiction.
02 The broker
One record in. Every system out.
Four kinds of source on the left, one identity engine in the centre, every downstream system on the right. Watch the record travel the bus - HR event in, directory, PACS, card office, lockers and audit out.
03 Scale
Production numbers.
TISAX (DEKRA-certified)
GDPR / NIS2 / DORA support
Independently certified: ISO 9001, ISO/IEC 27001 and TISAX (DEKRA-certified), with GDPR / NIS2 / DORA support. Every figure above is measured, not estimated.
04 What you get
Out of the box.
- Golden record reconciliation across HR, directory, and PACS - no middleware to build
- Dashboards for access reviews, certification campaigns, and segregation-of-duties
- Self-service portal for managers, contractors, and end-users
- Native mobile credentials - Apple Wallet, Google Wallet, FIDO2
- Visitor management with host notifications and auto-expiring credentials
- Full audit export to Splunk, Elastic, Sentinel, ServiceNow
- 24/7 enterprise support with 15-min P1 response SLA
All product names, logos and brands are property of their respective owners. Integration and connector names are used for identification purposes only and do not imply endorsement.
05 Related sheets
Deploy modules standalone.
See it in context.
Every scenario in our interactive demo exercises the Suite live.