Soffid
Soffid is a Spanish IAM software vendor offering a converged platform that unifies access management, identity governance, privileged access management, risk and compliance, and identity threat detection. It serves European public-sector and regulated enterprise customers, differentiated by ENS Nivel ALTO and Common Criteria certifications.
- Company typePrivate
- Founded2013
- HeadquartersPalma De Mallorca, Spain
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Soffid does
Soffid is a Spanish software company founded in 2013 and headquartered in Palma de Mallorca that builds a converged Identity and Access Management (IAM) platform. The platform unifies seven functional modules — Access Management (AM), Identity Governance Administration (IGA), Privileged Access Management (PAM), Identity Risk & Compliance (IRC), Password Manager, Identity Analytics, and Identity Threat Detection and Response (ITDR) — within a single architecture with a centralized control panel, plus supporting components including Identity Orchestration (for AI agent and non-human identity governance), Synchronisation Server, Enterprise Single Sign-On, Soffid Connectors (for SAP, Lotus Domino, domain controllers), and Desktop PAM.
The underlying technology is cloud-native and supports deployment across cloud, on-premises, and hybrid environments. Core differentiating capabilities include adaptive authentication with fuzzy logic, AI-driven behavioral anomaly detection in ITDR, Zero Trust enforcement, automated recertification, and real-time compliance monitoring for European regulatory frameworks including NIS2, DORA, ENS, ISO 27001, and GDPR. Soffid holds ENS Nivel ALTA (the highest level of Spain's National Security Scheme) and Common Criteria EAL2+ALC_CCL certification, positioning it as the only European IAM vendor with this dual certification stack and qualifying it for high-assurance public-sector and critical-infrastructure deployments.
Soffid operates a subscription-based revenue model with two pricing tiers: an enterprise subscription (quote-based annual contract covering full platform deployment, typically through direct enterprise sales or certified implementation partners) and a usage-based IDaaS offering with a free trial and pay-as-you-go billing. Go-to-market combines direct enterprise field sales targeting large organizations and regulated industries (government, financial services, healthcare, manufacturing, telco, retail, education, digital businesses) with a structured tiered channel program (Platinum, Gold) covering 100+ system integrators, MSPs, value-added distributors, and technology partners globally. Revenue is supplemented by consulting and implementation services delivered directly or through certified partners.
Soffid firmographics
Firmographics- Name
- Soffid
- Legal name
- SOFFID IAM S.L
- Website
- https://soffid.com
- Company type
- Private
- Founded year
- 2013
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Soffid is a Spanish IAM software vendor offering a converged platform that unifies access management, identity governance, privileged access management, risk and compliance, and identity threat detection. It serves European public-sector and regulated enterprise customers, differentiated by ENS Nivel ALTO and Common Criteria certifications.
- Ownership category
- akta.pro rank
Soffid industry classification
Industry- Product category
- Identity and Access Management (IAM) Software
- NAICS
- Software Publishers (5132), Computer Systems Design Services (541512)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA) (HDABAHAF)
- akta.pro secondary industries
- Identity Threat Detection & Response (ITDR) (HDAEAJAH), Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers) (HDAEAJAB)
Keywords
Where Soffid is headquartered
LocationHeadquarters
- HQ city
- Palma De Mallorca
- HQ country
- Spain
- HQ region
- Europe
Offices1 record
Markets served
Soffid business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- Subscription-based IAM Platform Licensing: Soffid operates on a subscription/licensing model for its IAM platform, offering Enterprise Subscription Services with flexible deployment options (cloud-native, on-premises, or hybrid). The platform is sold as a unified suite covering IGA, AM, PAM, IRC, and ITDR modules.
- Consulting and Implementation Services: Professional services for deployment, configuration, and onboarding of the Soffid IAM platform, delivered both directly and through certified implementation partners.
- Usage-based IDaaS (Pay-as-you-go): Soffid IDaaS (Identity as a Service) offers a pay-as-you-go model where customers pay only for the services they actually use, without unnecessary costs or long-term commitments.
- Enterprise Subscription Services: Full-featured enterprise tier providing all IAM capabilities locally and with full customization options under a subscription contract.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Pay-as-you-go | Free Trial - IDaaS platform access |
| Usage-based | Pay-as-you-go | IDaaS - Pay-as-you-go usage-based model |
| Subscription | Annual | Enterprise Subscription - Full-featured convergent IAM platform |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels8 records
Soffid product offering
Product offeringCore offering
Soffid sells a converged Identity and Access Management (IAM) platform that unifies Access Management, Identity Governance Administration, Privileged Access Management, Identity Risk and Compliance, Identity Analytics, and Identity Threat Detection and Response within a single architecture. It is delivered as on-premises software or as cloud-native IDaaS (Identity-as-a-Service) on a pay-per-use model, and is sold to enterprise and government customers via direct sales and certified partners. The company also provides enterprise subscription services and consulting and implementation services for deployment, configuration, and integration.
Product overview
Soffid offers a convergent Identity and Access Management (IAM) platform that unifies seven core modules—Access Management (AM), Identity Governance Administration (IGA), Privileged Access Management (PAM), Identity Risk & Compliance (IRC), Password Manager, Identity Analytics, and Identity Threat Detection and Response (ITDR)—into a single architecture managed from one centralized control panel. The platform also includes supporting modules such as Synchronisation Server, Enterprise Single Sign-On, Soffid Accessories, Soffid Connector (for domain controllers, SAP, and Lotus Domino), Identity Orchestration, and Desktop PAM. Soffid provides this as both an on-premise solution and cloud-native IDaaS (Identity as a Service) with a pay-per-use model. Professional services include enterprise subscription and consulting/implementation services.
Differentiator
Problem solved
Functional benefit
Products and services
- Soffid IAM Platform Cloud-native, convergent identity management platform that unifies Access Management (AM), Identity Governance Administration (IGA), Privileged Access Management (PAM), Identity Risk and Compliance (IRC), Identity Analytics, and Identity Threat Detection and Response (ITDR) within a single architecture with a centralized control panel. Targeted at enterprise and government customers requiring consolidated identity governance.
- Access Management (AM) Centralized and secure access control module providing authentication, Single Sign-On, access control policies, and real-time monitoring of access across hybrid environments and non-human entities.
- Identity Governance Administration (IGA) Streamlined identity and permissions management module that automates provisioning, recertification, and revocation processes while ensuring regulatory compliance through unified policy management.
- Privileged Access Management (PAM) Protection module for organizational critical assets through credential vaulting, session recording, just-in-time access, least privilege enforcement, and audit trails for privileged accounts.
- Identity Risk and Compliance (IRC) Proactive security and compliance module that adapts identity management to regulatory standards including NIS2, ENS, ISO 27001, GDPR, and DORA, with automated audits and real-time controls.
- Password Manager (PM) Advanced secure password management module with credential vault, automatic rotation, and recovery capabilities for enterprise environments.
- Identity Analytics Identity monitoring and analysis module that prevents risks and improves security through behavioral pattern detection and anomaly identification.
- Identity Threat Detection and Response (ITDR) Specialized security layer that monitors identity activity for anomalous behavior, detects and contains identity-based threats before escalation, and provides automated response capabilities.
- Soffid IDaaS Cloud-native Identity as a Service offering with adaptive authentication, pay-per-use billing, and full platform functionality including SSO, MFA, and access management, delivered as a self-serve trial and ongoing usage-based subscription.
- Soffid Identity Orchestration Automation module for dynamic access management workflows, ensuring permissions for AI agents and automation are granted only when necessary and under supervision.
- Soffid Desktop PAM Extends privileged access security to local environments and endpoints, mitigating risks on devices where service accounts or automated applications operate.
- Enterprise Subscription Services Enterprise-level subscription services providing ongoing platform access, support, and updates to enterprise customers on an annual subscription basis.
- Consulting and Implementation Services Professional services for deployment, configuration, and integration of the Soffid IAM platform in customer environments, delivered directly and through certified implementation partners.
Quantifiable outcome
- Automated recertification eliminates manual review cycles and reduces compliance audit preparation time
- +3 more outcomes
Companies that use Soffid
Customer profileNamed customers4 records
Segments8 records
Ideal customer profiles3 records
Soffid technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration3 records
AI capability6 records
Feature10 records
Soffid partnerships and signals
Strategic signalPartnerships
28 partnerships are on record, tiered flagship, core and minor.
- ICEX + INCIBEflagshipSoffid participates in the Spain Pavilion organized by ICEX (Spanish Institute for Foreign Trade) and INCIBE (Spanish National Cybersecurity Institute) at RSA Conference. This partnership enables Soffid's international visibility and positions Spanish cybersecurity excellence globally. Soffid has participated for two consecutive years (2025, 2026) as part of this national pavilion.
- ASLAN (Asociación de Empresas de Electrónica, Tecnologías de la Información y Telecomunicaciones de Madrid)flagshipSoffid is a partner of ASLAN and sponsor of the ASLAN Awards for Digital Transformation in Public Administration. Soffid's CTO Gabriel Buades gives presentations at ASLAN events on identity management and AI. The partnership supports Soffid's public sector go-to-market strategy in Spain.
- GetronicscoreGetronics is listed as a partner of Soffid, providing system integration and managed services leveraging the Soffid IAM platform for enterprise and government customers.
- FujitsucoreFujitsu is listed as a partner offering Soffid IAM solutions as part of its technology portfolio for enterprise customers.
- WiprocoreWipro is listed as a global partner providing Soffid IAM solutions integrated with its professional services offerings.
- Ernst & Young (EY)coreEY is listed as a partner providing consulting and implementation services for Soffid IAM deployments in enterprise and government environments.
- InetumcoreInetum is listed as a partner providing Soffid IAM solutions integrated with its digital services offerings for enterprise customers.
- BabelcoreBabel is listed as a technology partner and reseller of Soffid IAM solutions in Spain and Latin America.
- NTT DatacoreNTT Data is listed as a global partner integrating Soffid IAM into its technology services portfolio.
- AbastcoreAbast is listed as a technology partner providing Soffid IAM solutions as part of its digital transformation offerings.
- CGI SpaincoreCGI is listed as a partner providing consulting and implementation services for Soffid IAM solutions in Spain.
- HeadmindminorHeadmind is listed as a partner offering Soffid IAM solutions in the cybersecurity services market.
- DazzpersminorDazzpers is listed as a partner providing Soffid IAM solutions with a focus on specific market segments.
- 3Digitsminor3Digits is listed as a technology partner integrating and reselling Soffid IAM solutions.
- Cirion TechnologiesminorCirion Technologies is listed as a regional partner offering Soffid IAM in Latin America.
- Centric DataminorCentric Data is listed as a regional partner providing Soffid IAM solutions in specific geographic markets.
- CloudCorpminorCloudCorp is listed as a regional partner offering Soffid IAM solutions in Latin America.
- IXTtelminorIXTtel is listed as a regional partner providing Soffid IAM solutions.
- One It WorldminorOne It World is listed as a technology partner integrating Soffid IAM solutions.
- DebugITminorDebugIT is listed as a regional partner providing Soffid IAM solutions in Argentina.
- 9netminor9net is listed as a regional partner providing Soffid IAM solutions in Argentina.
- iSC (Innovative Secure Computing)minoriSC is listed as a regional partner offering Soffid IAM solutions in Chile.
- XpartansminorXpartans is listed as a regional partner providing Soffid IAM solutions in Peru.
- CortelcoprminorCortelcopr is listed as a regional partner providing Soffid IAM solutions.
- TambulilabsminorTambulilabs is listed as a regional partner providing Soffid IAM solutions.
- ElorbeminorElorbe is listed as a regional partner providing Soffid IAM solutions.
- CCSI (Consulting Computer Services Inc.)minorCCSI is listed as a regional partner providing Soffid IAM solutions.
- HubsecminorHubsec is listed as a regional partner providing Soffid IAM solutions in South Africa.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
Soffid competitors and assessment
Company assessmentEmerging players
- Keycloak: Open-source identity and access management by Red Hat/CNCF, used by organizations building self-managed IAM. Targets similar SSO, federation, and IGA use cases as Soffid's IDaaS platform, especially for cost-sensitive buyers.
- Transmit Security: Identity and fraud prevention platform for customer/employee identity. Adjacent competitor to Soffid on identity risk management and adaptive authentication for digital business segments.
Broad incumbents
- Microsoft Entra ID: Microsoft's cloud identity platform (formerly Azure AD) bundled with Microsoft 365 and Azure, covering SSO, MFA, IGA, and conditional access. Competes with Soffid across most IAM use cases especially in enterprises standardized on Microsoft.
- IBM Security Verify: IBM's broader identity and access management portfolio spanning workforce, customer, and CIAM. Overlaps with Soffid's IAM, IGA, and risk/compliance capabilities as part of a wider security portfolio.
Direct peers
- Okta: Cloud-native identity and access management leader offering SSO, MFA, lifecycle management, and identity governance. Directly competes with Soffid's Access Management and IGA modules in the same enterprise buyer evaluation.
- CyberArk: Privileged Access Management leader with adjacent identity security and ITDR capabilities. Directly competes with Soffid's PAM, ITDR, and converged identity security modules.
- Ping Identity: Enterprise identity security platform covering SSO, MFA, IGA, and identity intelligence. Competes with Soffid on SSO, federation, and access management for hybrid enterprise environments.
- Saviynt: Cloud-native identity governance and cloud entitlement management platform. Competes with Soffid's IGA, access governance, and cloud identity modules for enterprise and regulated industries.
- One Identity (Quest Software): Identity and access governance suite with IGA, AD account management, and PAM capabilities (OneLogin, Safeguard). Closely comparable to Soffid's convergent platform positioning.
- SailPoint: Identity governance specialist offering IGA, access insights, and cloud identity management. Directly overlaps with Soffid's IGA, Identity Analytics, and IRC modules for large enterprise and regulated buyers.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
Soffid social profiles
Digital presenceSoffid compliance and trust
Trust signalCompliance5 records
Soffid financial estimates
Financial estimateRevenue estimate
Valuation estimate
Soffid leadership team
Management profileNumber of profiles
Profiles5 records
Soffid funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Soffid M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Soffid
What does Soffid do?
Soffid sells a converged Identity and Access Management (IAM) platform that unifies Access Management, Identity Governance Administration, Privileged Access Management, Identity Risk and Compliance, Identity Analytics, and Identity Threat Detection and Response within a single architecture. It is delivered as on-premises software or as cloud-native IDaaS (Identity-as-a-Service) on a pay-per-use model, and is sold to enterprise and government customers via direct sales and certified partners. The company also provides enterprise subscription services and consulting and implementation services for deployment, configuration, and integration.
Is Soffid a public or private company?
Soffid is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Soffid founded?
Soffid was founded in 2013. It employs 51 to 100 people.
Where is Soffid based?
Soffid is headquartered in Palma De Mallorca, Spain, in the Europe region.
How does Soffid make money?
Four revenue lines are on record. Subscription-based IAM Platform Licensing is the primary driver. The others are consulting and Implementation Services, usage-based IDaaS (Pay-as-you-go) and enterprise Subscription Services.
Who are Soffid's main competitors?
Emerging players on record are Keycloak and Transmit Security. Broad incumbents are Microsoft Entra ID and IBM Security Verify. Direct peers are Okta, CyberArk, Ping Identity, Saviynt, One Identity (Quest Software) and SailPoint.
Does Soffid have an API?
No public API is recorded for Soffid.
What industry is Soffid in?
Soffid's product category is Identity and Access Management (IAM) Software. Its primary akta.pro industry code is HDABAHAF, Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA), with a secondary code of HDAEAJAH, Identity Threat Detection & Response (ITDR). Its NAICS code is 5132 and its SIC code is 7372.