NIS2 and NEN 7510 (the Dutch standard for information security in healthcare) play a part in that. So does the debate about foreign laws that reach into European data centres. Where the data is stored and who can actually access it has become a selection criterion rather than a side issue.
For a procurement officer at a university or a hospital, this isn't a theoretical question. It decides which vendors stay on the longlist. And a contract clause won't make it go away, because the question isn't about encryption or certification. It's about who can get access and on what grounds.
That's why we went looking for a European identity governance platform and chose midPoint.
What is midPoint?
midPoint is an open source identity governance and administration (IGA) platform from Evolveum, an EU company based in Slovakia. It grants access rights, revokes them and records who had what and when. You run it on your own infrastructure, on-premises or in a cloud you choose yourself.
That last part is exactly what the question in these sectors comes down to. You can point to where the identity data is stored and who can technically access it. The source code is also public, so you don't have to take a vendor's word for it. Evolveum describes midPoint as "the leading open source complete IGA suite recognized by Gartner and KuppingerCole".
What does licence-free mean and what doesn't it mean?
You pay no licence fees for the platform itself. That doesn't make it free. Implementation and management cost money, and so does the infrastructure it runs on. And some features are only available with a support subscription. The most significant of these is clustering, meaning high availability.
Why did we become an Evolveum partner?
We were looking for a European governance platform that offers all of the functionality, not just part of it. Drawing on our years of IGA experience, we assessed what a European platform like this has to be able to do, and midPoint came out best.
Talking it through
If your organisation is facing this question, we'd be glad to sit down with you. We'll look at the requirement you need to meet and tell you what we'd tackle first.
Schedule a call
