Imprivata
Imprivata provides digital identity and access management software (SSO, MFA, passwordless, PAM, and AI-driven behavioral analytics) purpose-built for hospitals, health systems, and other mission-critical industries, serving 4,000+ organizations and 4M+ users globally under Thoma Bravo ownership.
- Company typePrivate
- Founded2002
- HeadquartersWaltham, United States
- Headcount501–1,000
- GTM typeB2B
- OfferingSoftware
What Imprivata does
Imprivata is a digital identity and access management company purpose-built for healthcare and other life- and mission-critical industries. Founded in 2002 and headquartered in Waltham, Massachusetts, the company delivers a unified Enterprise Access Management platform that combines single sign-on (SSO), multifactor authentication (MFA), passwordless and facial biometric authentication, privileged access management (PAM), and AI-powered behavioral analytics. It sells primarily to hospitals, health systems, and clinical workforces that require frictionless yet compliant access to electronic health records (EHRs) and shared clinical workstations, with named customers including PennState Health, Seattle Children's, BayCare, Atrium Health, Cambridge Health Alliance, and 55 UK/Ireland hospitals.
The platform is built on integrations with Epic (native in Epic Toolbox and App Orchard), SailPoint, Netskope, Google Chrome Enterprise Premium, and IGEL, and has been expanded through acquisitions including Xton Technologies (PAM, 2021), SecureLink (vendor PAM, 2022), OGiTiX (2022), and Verosint (ITDR, 2025). Healthcare-specific modules include Patient Privacy Intelligence, Drug Diversion Intelligence, Medical Device Access Management, and Imprivata Patient Access, while a 2026 launch of Agentic Identity Management extends the platform to govern AI agents operating in clinical environments. Certifications cover HIPAA, HITECH, DEA-EPCS (21 CFR Part 1311), FIDO, ISO 27001:2022, ISO 27701:2019, SOC 2 Type 1 & 2, Cyber Essentials Plus, GDPR, and the EU/U.S./UK Data Privacy Frameworks.
Imprivata operates a subscription-based enterprise SaaS model with quote-based multi-year contracts, tiered maintenance and support, professional services, and hardware appliance sales. The company is privately held by Thoma Bravo (acquired in 2016 for approximately $544 million), serves 4,000+ organizations and 4M+ users globally across the Americas, EMEA, and APAC, and generates approximately $500 million in annual revenue. As of January 2026, Thoma Bravo is exploring a sale of the company at a potential valuation of up to $7 billion, with JPMorgan and Evercore advising on the early-stage process.
Imprivata firmographics
Firmographics- Name
- Imprivata
- Legal name
- Imprivata, Inc.
- Website
- http://www.imprivata.com
- Company type
- Private
- Founded year
- 2002
- Operating status
- Operating
- Headcount range
- 501–1,000 employees
- Short description
- Imprivata provides digital identity and access management software (SSO, MFA, passwordless, PAM, and AI-driven behavioral analytics) purpose-built for hospitals, health systems, and other mission-critical industries, serving 4,000+ organizations and 4M+ users globally under Thoma Bravo ownership.
- Ownership category
- akta.pro rank
Imprivata industry classification
Industry- Product category
- Identity and Access Management
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Authentication (MFA/Passwordless/Biometrics) Platforms (BPAMAEAE)
- akta.pro secondary industries
- Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers) (HDAEAJAB), Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA) (HDABAHAF), Identity & Access Security Services (IAM, PAM, Zero Trust) (BPAKAHAI)
Keywords
Where Imprivata is headquartered
LocationHeadquarters
- HQ city
- Waltham
- HQ country
- United States
- HQ region
- North America
Offices7 records
Markets served
Imprivata business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Enterprise Access Management Subscription: Subscription-based licensing for Enterprise Access Management platform including SSO, MFA, and passwordless authentication capabilities. Recurring annual or multi-year contracts with enterprise customers.
- Privileged Access Management: PAM solutions sold as subscription or perpetual license with annual maintenance. Includes vendor and customer privileged access management modules.
- Maintenance and Support Services: Annual maintenance and support contracts with tiered service levels (Standard, Premium). Fees based on list price with 12-month initial terms auto-renewing annually.
- Professional Services: Fee-based custom development, implementation services, and training including Imprivata Certified Engineer (ICE) training programs.
- Hardware Sales: Sale of Imprivata-branded hardware appliances with 12-month warranty. Replacement and upgrade hardware priced at current list price.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Standard Maintenance and Support |
| Subscription | Annual | Premium Maintenance and Support |
| Subscription | Multi-year contract | Enterprise Access Management Platform |
Go-to-market motion2 records
Distribution channels5 records
Marketing channels10 records
Imprivata product offering
Product offeringCore offering
Imprivata develops and sells a unified digital identity and access management platform for healthcare and other mission-critical industries. Its core offerings include Enterprise Access Management (EAM) with single sign-on, multifactor authentication, passwordless authentication, and mobile device access, complemented by Privileged Access Management, vendor/customer privileged access, patient biometric authentication, and AI-driven patient privacy and drug diversion monitoring.
Product overview
Imprivata offers a unified Enterprise Access Management platform for healthcare and mission-critical industries, combining core access management capabilities with specialized healthcare and security modules. The core Enterprise Access Management platform provides passwordless authentication, Single Sign-On, and Multifactor Authentication as foundational capabilities. Specialized healthcare modules include Patient Privacy Intelligence and Drug Diversion Intelligence for monitoring anomalous access behaviors, Medical Device Access Management, and Patient Access for biometric authentication. Third-party and privileged access is addressed through Vendor Privileged Access Management (from SecureLink acquisition) and Privileged Access Management (expanded through Xton Technologies acquisition). The 2026 Agentic Identity Management platform extends the portfolio to secure and govern AI agents. Identity Threat Detection and Response from Verosint provides AI-powered risk signaling. Access Compliance delivers AI-powered analytics for compliance monitoring. All capabilities are unified under a single platform approach designed to consolidate multiple access tools for improved security and reduced total cost of ownership.
Differentiator
Problem solved
Functional benefit
Brands
- Imprivata Enterprise Access Management: Unified access management platform providing passwordless authentication, SSO, and MFA for enterprise users
- Imprivata Patient Access
- Imprivata Agentic Identity Management
- Verosint
- FairWarning
- GroundControl
- OneSign
- ConfirmID
- Imprivata OGiTiX
Products and services
- Enterprise Access Management (EAM)
- Single Sign-On (SSO) Core SSO capability enabling frictionless, secure single sign-on for healthcare and enterprise applications, redirecting clinician hours from logging in to patient care.
- Multifactor Authentication (MFA) MFA solution providing additional security layer for enterprise access, supporting various authentication methods including biometrics, tokens, and mobile credentials, with DEA-EPCS compliance for electronic prescribing of controlled substances.
- Mobile Access End-to-end enterprise mobility solution helping organizations optimize use of shared iOS and Android mobile devices in healthcare and other regulated environments.
- Privileged Access Management (PAM) PAM solution providing access governance for highly privileged users, securing internal access to critical systems and data for healthcare and enterprise organizations.
- Vendor Privileged Access Management Third-party access control solution securing digital identities and remote access to control and monitor how vendors connect and use critical systems and data, originally from SecureLink acquisition.
- Customer Privileged Access Management (Remote Support) Remote support solution for privileged access management of customer environments, enabling secure vendor access and monitoring.
- Patient Access (Biometric Patient Authentication)
- Agentic Identity Management
- Identity Threat Detection and Response (ITDR / Verosint)
- Patient Privacy Intelligence
- Drug Diversion Intelligence
- Medical Device Access Management
- Professional Services
Quantifiable outcome
- 3.3 million clinician hours redirected annually from logging in to patient care across 55 UK and Ireland hospitals
- +2 more outcomes
Companies that use Imprivata
Customer profileNamed customers9 records
Segments6 records
Ideal customer profiles2 records
Imprivata technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration6 records
AI capability8 records
Feature7 records
Imprivata partnerships and signals
Strategic signalPartnerships
Eight partnerships are on record, tiered core.
- IGELcoreIntegration partner recognized as IGEL Ready Partner of the Year 2026. Imprivata integrated with IGEL Adaptive Secure Endpoint Platform for enterprise cloud solutions and secure digital workspaces.
- NetskopecoreSaaS integration combining Imprivata's passwordless authentication with Netskope's Zero Trust Engine for identity-aware security and HIPAA/HITECH compliance on shared clinical workstations.
- Epic SystemscoreImprivata Patient Access launched as native integration in Epic Toolbox using facial recognition and IAL2 standards to allow patients secure MyChart account creation without activation codes.
- VerosintcoreIdentity Threat Detection and Response (ITDR) firm specializing in continuous monitoring for anomalous access behavior. Acquisition completed to integrate AI-powered risk signaling into Imprivata's enterprise access management platform.
- SailPointcoreJoint solution combining SailPoint and Imprivata technologies to improve access management, reduce cyber risks, and enhance compliance for organizations with frontline workers.
- SailPointcoreStrategic partnership combining SailPoint's identity governance with Imprivata's access management to improve access management and reduce cyber risks in healthcare organizations. SailPoint named Best in KLAS 2025 in Identity Management.
- SecureLinkcoreCritical access management provider acquired by Imprivata with Thoma Bravo backing. Cove Hill Partners retained minority stake. SecureLink provided vendor privileged access management solutions.
- Xton TechnologiescorePrivileged access management solutions provider acquired to enhance Imprivata's digital identity platform for healthcare and enterprise organizations with access governance for highly privileged users.
Scale indicators9 records
Recent moves9 records
Expansion highlights6 records
Imprivata competitors and assessment
Company assessmentDirect peers
- Okta: Okta is a leading cloud-native identity and access management platform offering SSO, MFA, lifecycle management, and adaptive authentication. It directly competes with Imprivata in enterprise healthcare IAM and broader workforce identity use cases.
- Ping Identity: Ping Identity provides enterprise SSO, MFA, and identity federation with strong healthcare and regulated-industry penetration. It is a direct competitor to Imprivata's Enterprise Access Management platform in workforce and patient identity scenarios.
- CyberArk: CyberArk is a leader in privileged access management (PAM), competing directly with Imprivata's PAM module (built from Xton and SecureLink acquisitions). CyberArk's identity security platform overlaps significantly with Imprivata's privileged access offerings.
- SailPoint: SailPoint is a leading identity governance and administration (IGA) vendor and a strategic partner of Imprivata. It is also a competitor in identity lifecycle and access governance, named Best in KLAS 2025 in Identity Management for healthcare.
- BeyondTrust: BeyondTrust provides privileged access management and vulnerability management solutions, competing with Imprivata's PAM and vendor privileged access offerings in enterprise and healthcare markets.
- One Identity (OneLogin): One Identity (Quest) and OneLogin offer IAM, IGA, and PAM solutions that compete with Imprivata's portfolio in workforce identity, especially in mid-market and regulated industries.
Broad incumbents
- Microsoft Entra ID: Microsoft Entra ID (formerly Azure AD) is a broad incumbent identity platform bundled with Microsoft 365 and widely deployed in healthcare systems. It competes on price-bundled IAM and is a key threat to standalone IAM vendors like Imprivata.
Emerging players
- HID Global: HID Global provides identity and access management solutions including physical and logical access, biometric authentication, and credentialing. It overlaps with Imprivata's biometric authentication and identity verification capabilities.
- Verkada: Verkada is a security platform that has been expanding from physical security into identity and access controls; it represents an emerging player that could compete with Imprivata in shared device and facility access scenarios.
- Transmit Security: Transmit Security offers passwordless authentication, fraud prevention, and identity verification APIs. It is an emerging player in the broader passwordless and biometric authentication space where Imprivata is also active.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Imprivata social profiles
Digital presenceImprivata compliance and trust
Trust signalCompliance12 records
Imprivata financial estimates
Financial estimateRevenue estimate
Valuation estimate
Imprivata leadership team
Management profileNumber of profiles
Profiles11 records
Imprivata subsidiaries and ownership
Company hierarchySubsidiaries6 records
Imprivata funding detail
Funding detailFunding overview
Funding rounds6 records
Investors6 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Imprivata M&A and investment
M&A and investmentM&A9 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Imprivata
What does Imprivata do?
Imprivata develops and sells a unified digital identity and access management platform for healthcare and other mission-critical industries. Its core offerings include Enterprise Access Management (EAM) with single sign-on, multifactor authentication, passwordless authentication, and mobile device access, complemented by Privileged Access Management, vendor/customer privileged access, patient biometric authentication, and AI-driven patient privacy and drug diversion monitoring.
Is Imprivata a public or private company?
Imprivata is a private company. It is classified as private equity controlled and is currently operating.
When was Imprivata founded?
Imprivata was founded in 2002. It employs 501 to 1,000 people.
Where is Imprivata based?
Imprivata is headquartered in Waltham, United States, in the North America region.
How does Imprivata make money?
Five revenue lines are on record. Enterprise Access Management Subscription is the primary driver. The others are privileged Access Management, maintenance and Support Services, professional Services and hardware Sales.
Who are Imprivata's main competitors?
Direct peers on record are Okta, Ping Identity, CyberArk, SailPoint, BeyondTrust and One Identity (OneLogin). Microsoft Entra ID is listed as a broad incumbent. Emerging players are HID Global, Verkada and Transmit Security.
Does Imprivata have an API?
Yes. Imprivata offers a partner-facing API license through its Technology Partner Program. The API license grants partners a non-transferable, non-exclusive, royalty-free license to internally use and reproduce the Imprivata Products API and developer tools solely for creating Interface Software to achieve interoperability between Partner Products and Imprivata Products, testing and demonstrating interoperability, and providing end user customer support. This is a restricted partner API, not publicly available. No public developer portal or documentation URL identified in the source data.
What industry is Imprivata in?
Imprivata's product category is Identity and Access Management. Its primary akta.pro industry code is BPAMAEAE, Authentication (MFA/Passwordless/Biometrics) Platforms, with a secondary code of HDAEAJAB, Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers). Its NAICS code is 51821 and its SIC code is 7372.