SailPoint Technologies, Inc. Due Diligence

Run due diligence on SailPoint Technologies, Inc.: check compliance and get alerts when suppliers or ownership change.

United States · owned by Thoma Bravo (United States) · www.sailpoint.com · 36 vendors

SailPoint Technologies is a leading provider of identity security solutions, offering a unified platform to manage and secure access for human identities, machine identities, and AI agents. The company specializes in identity governance, access management, and least-privilege enforcement, helping organizations automate identity decisions and adapt to evolving threats. SailPoint serves enterprise customers globally and is headquartered in Austin, Texas, USA.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 36 sub-vendors.

Insights

Last updated 2026-05-04 · revision 4

36 direct vendors, 262 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

5 in-scope frameworks identified; showing 3.

GDPR (source) — Evidence found

Evidence: https://www.sailpoint.com/why-us/trust, https://www.sailpoint.com/legal/privacy, https://docs.sailpoint.com/pdf/SailPoint ISO 27001 Certificate_12.2.2024.pdf

HIPAA (source) — No public evidence

Evidence: https://www.sailpoint.com/solutions/industries/healthcare, https://www.sailpoint.com/why-us/trust

ISAE 3000 (source) — No public evidence

Evidence: https://www.sailpoint.com/why-us/trust

Financials

Three-year financials

Financial Resilience Score: 6/10

SailPoint Technologies operates in the identity security and governance market, a segment with strong secular tailwinds as enterprises increasingly prioritize cybersecurity and compliance. The company went private in 2022 following its acquisition by Thoma Bravo for approximately $6.9B, which limits the availability of detailed public financial disclosures. This reduces transparency and makes a full resilience assessment difficult based on publicly available data alone. Prior to going private, SailPoint demonstrated consistent revenue growth, transitioning from a perpetual license model to a SaaS/subscription-based model, which generally improves revenue predictability and customer retention. The shift to recurring revenue is a positive resilience indicator, as it reduces dependence on lumpy one-time license deals and provides more stable cash flow visibility. The company operates in a competitive landscape alongside CyberArk, Saviynt, and Microsoft, among others. Its focus on identity governance and administration (IGA) for large enterprises provides some defensibility through high switching costs and deep integration into customer IT environments. However, private equity ownership introduces leverage risk, as Thoma Bravo-led buyouts are typically accompanied by significant debt loads that can constrain financial flexibility during downturns. Overall, the underlying business model and market positioning are solid, but the leveraged capital structure post-buyout and limited financial transparency temper the resilience score. The company's return to public markets (IPO filed in 2024) may improve transparency going forward.

Key strengths: Recurring SaaS/subscription revenue model improving cash flow predictability, Strong market position in Identity Governance and Administration (IGA), High enterprise customer switching costs due to deep IT integration, Secular tailwinds from growing enterprise cybersecurity and compliance spending, Planned IPO in 2024 signals confidence in business trajectory

Risk factors: Significant leverage from Thoma Bravo leveraged buyout (~$6.9B, 2022) constraining financial flexibility, Limited public financial disclosure as a private company reduces transparency, Intense competition from CyberArk, Saviynt, Microsoft, and emerging IGA vendors, Ongoing SaaS transition may pressure near-term margins and profitability, Macroeconomic headwinds could slow enterprise IT security spending

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report