Cross-site identity management
One record per person across every site, with the access, credentials and documents that belong to it - so a single screen answers who someone is and where they may go.
A new generation of PIAM
Physical identity and access management, rebuilt cloud-native
Citadel brings identity, physical access, credentials, contractors, documents and workflow onto one platform, with one record per person. Cloud-native. Configured by AI, optionally. Running on automated workflows instead of manual steps.
Platform at a glance
- Platform
- Cloud-native, containerised, one codebase
- Deployment
- Shared cloud, dedicated instance, dedicated infrastructure or self-hosted
- Interface languages
- EN / NL / DE / ES / FR
- Commercial model
- Subscription, every deployment
- Data residency
- EU and UK
Why Citadel
One platform for physical identities, access and compliance
Managing identity, physical access, credentials, contractors, documents and workflow has traditionally meant juggling several separate systems, each with its own interface and its own rules.
Citadel brings all of it together in one platform, with one record per person, so there is a single answer to the question that matters: who is this person, and what can they access?
It is built as a truly cloud-native platform from the ground up, and introduces two capabilities no ID-ware platform has offered before: it can optionally configure itself through AI, and it acts automatically through a built-in workflow engine.
Clear overviews at a glance
Live dashboards show identities, registrations, credentials and compliance status in one view.
One cloud-native platform
Optional
Configured by AI
Describe your organisation in plain language and Citadel proposes the identity model, roles and approval routes.
Built inWorkflow engine Cloud-native
Runs automatically
Every approval, request, joiner and leaver runs as a tracked, auditable process, taking effect across every connected system at once.
Built for the cloud, built to last
Cloud-native and fully containerised on one codebase, scaling as you grow without re-architecture or per-customer engineering.
Overview
Citadel at a glance
One platform, one record per person, and the freedom to run it the way your organisation needs it.
One record per person
Identity, access, credentials, contractors, documents and workflow in a single record instead of several separate systems.
Works with what you already have
Connects to your existing access-control system through its published interface - no new hardware and no site works.
Transparent, subscription-based costs
No on-premises server, database or licensing cost to plan for with the cloud service. On-premises deployments follow the same predictable, subscription-based pricing rather than perpetual licences.
Your processes, at your pace
Build and change your own processes without waiting on a release from ID-ware. Connectors speak one common language, so changing the underlying system changes only the connection.
Multilingual by design
A fully translated interface in English, Dutch, German, Spanish and French.
Faster and future-proof
Built cloud-native, so searches, records and dashboards stay responsive as you grow - from one site to many.
Choose your deployment
The same product, the same codebase
You choose the boundary, not the feature set.
Shared cloud service
Multi-tenant, fastest to start, lowest cost of ownership.
Dedicated instance
Your own instance, hosted and operated by ID-ware.
Dedicated infrastructure
Separate infrastructure where isolation must be highest.
Fully self-hosted
Run it entirely in your own environment.
One platform, every site.
Configuration without a project
Say it in plain language, and Citadel builds the workflow
Configuration that used to require a consulting engagement can now be done directly.
Citadel · Describe a processDrafted for review
Warn a contractor 30 days before their insurance certificate expires, and suspend their access if it lapses.
A request like this produces a working workflow, drafted for review before anything takes effect.
Describe it, and Citadel AI asks the right questions
The options offered are real roles and credential types from your own configuration - pick one, and the workflow is drafted for you.
Automatic access rules according to policies
Every rule shows which people and locations it applies to, and nothing takes effect until it is approved.
The evidence is already there
Compliance and audit-readiness
Every approval, change and removal is recorded as a tracked process: EU and UK data residency, role-based control and a full audit history.
Designed to support your obligations under
GDPR
NIS2
DORA
ID-ware is independently certified to ISO 9001 and ISO/IEC 27001, with Cyber Essentials Plus. Certification is held at the organisation level; no product-level certification is claimed for Citadel.
Less to run, more that runs itself
A traditional on-premises PIAM install
- Servers, databases and licences to plan for
- Upgrades, patching and availability carried by your own team
- A change request for every new process
With Citadel as a service
- A subscription service that stays current
- Build and change your own processes - no waiting on an ID-ware release
- Approved or removed access takes effect across every connected system at once
Citadel and the PIAM Suite
The ID-ware PIAM Suite is our established product family for physical identity and access management, in service today. Citadel is the new generation: the same discipline, rebuilt cloud-native on one codebase, with one record per person, optional AI configuration and a built-in workflow engine.
If you run the PIAM Suite today, nothing changes for you. If you are choosing a platform now, book a walkthrough and we will show you which one fits.
Interested to learn more?
Book a walkthrough
Contact us to see what Citadel brings for your organisation, in the deployment you choose.
Subscription pricing is quoted per organisation and deployment.