GOVERNATLAS / PRODUCT DOSSIER
Veza describes an access graph connecting identities and entitlements across people, machines, third parties, applications and data. Veza describes access visibility, access intelligence, automated reviews and identity lifecycle management within its Access Platform.
01 / CONTEXT & SCOPE
Test whether the graph explains a permission path another engineer can verify.
Test whether the graph explains a permission path another engineer can verify. A visually complete graph may still omit an inherited grant, custom application or stale collector. Separate discovered access from inferred risk and from changes the platform can actually enforce. The comparison should use a known entitlement manifest, not the number of nodes the demonstration happens to display.
Vendor statements about complete visibility, least privilege or risk reduction do not establish measured coverage or successful remediation. Integration-specific collection depth, effective-permission semantics and write permissions remain buyer questions.
02 / YOUR EVALUATION
Seed a disposable environment with a direct grant, a nested group grant and an account deliberately absent from one collector. Ask a reviewer to explain who can perform one operation and why. Change the nested membership and observe collection freshness. Reject the access in a review, then inspect whether the native system changed or an action remains assigned elsewhere.
GovernAtlas editorial proposal. We have not performed this test.
THE OPERATING DETAIL
GovernAtlas analysis: practical review considerations, not findings from a product test.
03 / DOCUMENTED EVIDENCE
Each statement retains its classification and preserved source. A vendor assertion is not an independent test result.
Veza describes access visibility, access intelligence, automated reviews and identity lifecycle management within its Access Platform.
Authority: vendor owned
Observed 2026-10-18 · Reviewed 2026-10-18 · current until 2026-11-17
Artifact SHA-256: 221a8093da01f7b216c91c5e626c3d19207759d6cd812dc2fedf13da31ea0728
The hash identifies the preserved capture. The live source may have changed.
Veza describes an access graph connecting identities and entitlements across people, machines, third parties, applications and data.
Authority: vendor owned
Observed 2026-10-18 · Reviewed 2026-10-18 · current until 2026-11-17
Artifact SHA-256: 221a8093da01f7b216c91c5e626c3d19207759d6cd812dc2fedf13da31ea0728
The hash identifies the preserved capture. The live source may have changed.
Organization identity asset from its official website; inclusion does not imply endorsement.
Official website ↗ · Original asset ↗04 / BEFORE YOU COMMIT
Resolve these with the provider and your own evaluation team.
Regulatory applicability requires a separate, current determination. Inclusion is not certification.
COMPLIANCE / CLAIMS, SCOPE & GAPS
These labels describe this dossier’s current evidence coverage. A published mention may be a framework mapping, a qualified assertion or a limitation; it is not a compliance finding.
Not established in this dossier
US healthcare privacy & securityNot established in this dossier
EU personal data protectionNot established in this dossier
Assurance report · not a lawNot established in this dossier
Information security management standardNot established in this dossier
EU artificial intelligence regulationFor HIPAA-regulated use, request service-specific BAA eligibility, processing scope and responsibility details. Missing evidence here does not establish noncompliance. Payment cannot alter these evidence labels.
KEEP THE RECORD USEFUL
Have a source that changes this picture? Submit it for editorial review.