GOVERNATLAS / PRODUCT DOSSIER
tenfold describes role-based access, lifecycle workflows, self-service requests, permission reporting and periodic or event-based access reviews. tenfold states that it runs on premises rather than as SaaS, and distinguishes system coverage across its editions; it also distinguishes governance from providing SSO or MFA to connected applications.
01 / CONTEXT & SCOPE
Match the edition to the systems being governed before comparing feature lists.
Match the edition to the systems being governed before comparing feature lists. The published edition distinction is about integration coverage, while the operating model requires an on-premises deployment. Assign ownership for the database, server, backups and upgrades. Keep access governance separate from the identity provider that authenticates users to connected applications.
No claimed workload reduction, deployment duration, privilege-creep elimination or customer count is adopted as a measured outcome. Confirm current edition terms and infrastructure prerequisites in the proposal.
02 / YOUR EVALUATION
Choose one on-premises directory, one Microsoft cloud application and one business application from the proposed edition. Run a synthetic joiner, mover and leaver sequence, then compare group membership and application permissions at each target. Introduce one unsupported or unlicensed integration and retain the resulting scope gap. Restore a small test configuration backup and verify its policy version.
GovernAtlas editorial proposal. We have not performed this test.
THE OPERATING DETAIL
GovernAtlas analysis: practical review considerations, not findings from a product test.
03 / DOCUMENTED EVIDENCE
Each statement retains its classification and preserved source. A vendor assertion is not an independent test result.
tenfold states that it runs on premises rather than as SaaS, and distinguishes system coverage across its editions; it also distinguishes governance from providing SSO or MFA to connected applications.
Authority: vendor owned
Observed 2026-10-18 · Reviewed 2026-10-18 · current until 2026-11-17
Artifact SHA-256: 4e401ad9d746e9a1857cf3911abf608eae4e349bda60ad71d598316088da48b5
The hash identifies the preserved capture. The live source may have changed.
tenfold describes role-based access, lifecycle workflows, self-service requests, permission reporting and periodic or event-based access reviews.
Authority: vendor owned
Observed 2026-10-18 · Reviewed 2026-10-18 · current until 2026-11-17
Artifact SHA-256: 4e401ad9d746e9a1857cf3911abf608eae4e349bda60ad71d598316088da48b5
The hash identifies the preserved capture. The live source may have changed.
Organization identity asset from its official website; inclusion does not imply endorsement.
Official website ↗ · Original asset ↗04 / BEFORE YOU COMMIT
Resolve these with the provider and your own evaluation team.
Regulatory applicability requires a separate, current determination. Inclusion is not certification.
COMPLIANCE / CLAIMS, SCOPE & GAPS
These labels describe this dossier’s current evidence coverage. A published mention may be a framework mapping, a qualified assertion or a limitation; it is not a compliance finding.
Not established in this dossier
US healthcare privacy & securityNot established in this dossier
EU personal data protectionNot established in this dossier
Assurance report · not a lawNot established in this dossier
Information security management standardNot established in this dossier
EU artificial intelligence regulationFor HIPAA-regulated use, request service-specific BAA eligibility, processing scope and responsibility details. Missing evidence here does not establish noncompliance. Payment cannot alter these evidence labels.
KEEP THE RECORD USEFUL
Have a source that changes this picture? Submit it for editorial review.