The engine at the heart of the platform: every run compares what access should exist against what actually exists in your systems — and explains every difference.
Drift, explained
"Expected via policy X" — "not expected, flagged for review" — "expected but missing". Reconciliation runs continuously and each grant's verdict is recorded as evidence, not just counted.
The control room
Provisioning runs in batches you can approve manually until you release the gate. Failures never disappear into a void — they land in a triage queue, grouped by cause, and retry is gated on an actual config change.
A 30-minute kickoff connects your HR feed and one system — working POC the same day.