Identity and access management (IAM) services

Bare.ID

Keycloak-based identity management with German SaaS hosting

GermanyEUEU hosted Ownership reviewed, controller unresolved
Visit website bare.id

Scope verdict

Ownership reviewed, controller unresolved

Bare.ID GmbH, Wiesbaden HRB 33190, VAT DE349840819, is the operator at Kirchgasse 6, 65185 Wiesbaden. The current company history says the AOE founders acquired a majority in 2023 and Bare.ID left the AOE Group. That supersedes the 2022 wholly owned subsidiary statement. The official register lists a shareholder filing dated 22 March 2024, received 10 April and filed 12 April; its contents were not retrieved. Named holding interests, current voting rights and the ultimate control jurisdictions remain unresolved. The SaaS terms apply German law and Frankfurt am Main jurisdiction.

How we classify services

Bare.ID provides single sign-on, multi-factor authentication and identity management for employees, business partners and customers. It offers managed SaaS in Germany, plus on-premises and hybrid arrangements.

The platform extends the open-source Keycloak core with enterprise features under Bare.ID's own licence. A return to standard Keycloak is advertised, but the Bare.ID extensions are not established as open source. The service targets business customers.

Pricing

The live calculator for 50 B2B monthly active users shows Professional at 580 euro/month and Premium at 980 euro/month for 36 months, or 635 and 1,073 euro for 12 months. MFA methods are included; SMS has external charges. Enterprise and alternative deployments are quoted. A free trial is advertised. Confirm VAT, usage and service extras in the contract.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Core service hosting

SysEleven and Hetzner

European provider
Observed
The public subprocessor appendix dated 15 April 2024 names SysEleven and Hetzner for host and storage services. Current service pages claim German SaaS operation. Supplier control reviewed 25 September 2026: SysEleven is controlled through secunet and Giesecke+Devrient by the von Mitschke-Collande family; Hetzner's reviewed owner-managed family-company disclosure is retained. The exact customer region and provider split were not established.

Supporting services

Myra Security

Provider control not verified
Observed
The appendix names Myra for DDoS protection, TLS offloading and web application firewall services. app.bare.id resolves through app-bare-id.ax4z.com to 80.90.17.153; edge DNS does not establish the origin region.

Public website

Webflow / Cloudflare

Non-European provider
Observed
www.bare.id CNAME cdn.webflow.com, A 198.202.211.1. This is marketing-site delivery, separate from the IAM data store.

Why this matters

Public DNS routes website visits through Webflow / Cloudflare. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Incoming business email

NoSpamProxy Cloud

European provider
Observed
MX 10 bare-id.mail.cloud.nospamproxy.com

Authorised outbound email

NoSpamProxy, Microsoft 365, HubSpot and Flowmailer

Provider control not verified
Observed
SPF authorizes spf.bare-id.cloud.nospamproxy.com, spf.protection.outlook.com, 25739697.spf03.hubspotemail.net, spf.bareid.rocks, spf.flowmailer.net and MX. Authorization is not proof of every actual mail flow.
Evidence
Live SPF ↗

Customer email delivery

Flowmailer and rapidmail

Provider control not verified
Observed
The April 2024 appendix lists SMTP relay and email-address storage. Provider legal names and arrangements should be checked against the customer's current appendix.

Supporting services

Deskpro Ltd

Provider control not verified
Observed
The appendix lists the UK helpdesk company and states no third-country transfer. Corporate domicile alone does not prove payload location or support access; current hosting and access details remain to be confirmed.

Supporting services

E. M. Statuspal UG

Provider control not verified
Observed
The appendix lists status pages and maintenance notifications with stored email addresses.

Supporting services

Billwerk Plus, Payone, PayPal Europe and LOX24

Provider control not verified
Observed
The appendix separately lists billing, payments and SMS providers as additional partners, not customer-controlled GDPR subprocessors. It warns this additional list is not necessarily complete or current.

Supporting services

AWS, HubSpot, Matomo, rapidmail and payment providers

Provider control not verified
Observed
The website privacy notice updated 11 May 2026 names these services. This website/sales scope is distinct from IAM processing under the DPA.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More in Identity and access management (IAM) services

Keycloak

Open source identity and access management

Open sourceOpen source

Scaleway

Cloud computing platform from France

France♻EU controlled

Keycloak

Open source identity and access management

Open sourceOpen source

View all →

More from Germany

AlcerisalfaviewBosch Smart HomeCalligra SuiteCodebergdeSEC