Identity and access management (IAM) services
Managed customer and workforce identity from Germany
GermanyEU Ownership reviewed, controller unresolvedHigh non-EU dependencyScope verdict
The imprint names Widas ID GmbH, Mannheim HRB 731110, VAT DE321954508, Maybachstraße 2, 71299 Wimsheim, represented by Sadrick Widmann and Yael Pahl. A reproduced 2018 register notice records a domination/profit-transfer agreement with WidasConcepts GmbH, HRB 511442. Current parent shareholder percentages and voting rights were not obtained. Group and family-business statements do not establish ultimate control; status remains unresolved.
Operational dependency warning
Current public evidence shows 4 non-European infrastructure or email dependencies across 3 providers: Cloudflare, HubSpot, Microsoft. The reviewed operational path is therefore not entirely European.
cidaas is proprietary identity and access management from Widas ID GmbH in Wimsheim. It provides customer and workforce login, SSO, MFA, access rules and identity management. ID Validator is a related service for document checks, face matching and liveness verification with separate terms.
The company and Telekom describe German hosting, while the current processing annex also names Cloudflare with EU localisation and Nebius. These are distinct from website and mail providers. Dedicated cloud options do not establish a customer-operated or open-source core platform.
The page labels Free as a 30-day trial with 500 registered users. CIAM Essentials/Standard/Pro display €699/€1,399/€2,999 per month in yearly mode, or €839/€1,679/€3,599 in monthly mode, with 1,000/5,000/1,000,000 included users; Enterprise is custom. Workforce IAM shows €4.50/user in yearly mode and €5.40 in monthly mode. ID Validator lists €1.50 per document or €2.50 per identity check, plus base fees. VAT is extra; the offer determines the contract.
Data and operations
Verified operational dependencies, shown separately from ownership and from the service's core data hosting.
Core service hosting
Supporting services
App distribution
Why this matters
When this distribution channel is used, Cloudflare supplies the native app and can process store account, download and device data. Distribution alone does not establish access to content exchanged within the service.
Supporting services
Public website
Incoming business email
Why this matters
Published MX records route incoming business email through Microsoft 365. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.
Authorised outbound email
Why this matters
This domain authorises HubSpot, Brevo and Microsoft 365 to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.
Supporting services
Why this matters
The published disclosure lists HubSpot for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.
Open source
France
