Key outcomes
Elimination of standing access to customer data
Comprehensive audit logs for customer data access
Significant reduction in time to resolve access requests
Tech stack:
Company
Elimination of standing access to customer data
Comprehensive audit logs for customer data access
Significant reduction in time to resolve access requests
Acme, a prominent email security company based in San Francisco, faced the challenge of managing granular permissions for their customer base, consisting of over a thousand clients, each using a variety of applications. Their primary goal was to control access to customer information through their custom app. Previously, they relied on a self-developed middleware that used mTLS certificates, resulting in excessively broad access to customer data. Moreover, there was a need for detailed audit logs to inform customers about who within Acme was accessing their data.
Aiming to bolster customer security, Acme sought to provide employees with short-lived access to specific apps for specific customers. Entitle emerged as the ideal solution, offering a much-appreciated blend of efficiency and security.
Acme commended Entitle for streamlining their previous, cumbersome process that required creating Jira tickets and waiting for security clearance. Entitle's implementation resolved these inefficiencies, significantly cutting down on delays and improving transparency in access control.
Centralized Access Control
99% of access requests are now efficiently managed through Entitle, with approval flows ensuring quick and authorized access.
JIT Access for AWS
Entitle is also used for Just-In-Time access to AWS resources, further securing access to customer data stores and administrative roles.
Zero Persistent Access
With Entitle, persistent access to customer data was completely eradicated
Collaborative Development
The feedback loop between Acme and Entitle's engineering team has been positive, with the latter being responsive, quick, and open to feedback.
Audit Transparency
The system logs and reports who accessed what data and for how long, information readily available to customers upon request.
“Internal feedback has been fantastic. Users love Entitle. No one’s waiting around for Jira tickets anymore, employees get what they need when they need it.”
Cloud Security Architect
Acme
Acme's partnership with Entitle has revolutionized its approach to data access management. The implementation of Entitle not only streamlined their access control processes but also significantly enhanced their security posture and customer trust, demonstrating a successful case of technology adaptation to meet evolving cybersecurity needs
