Zygon

The implementation of Zygon is designed to be exceptionally fast compared to traditional IGA solutions. Most organizations can achieve initial visibility in under 15 minutes by connecting their primary Identity Providers (IdPs) like Google Workspace, Microsoft Entra ID, or Okta. Once connected, Zygon's discovery engine begins scanning for associated SaaS accounts. Within approximately two hours, the platform typically generates a comprehensive inventory of all discovered applications and users. The final stage of implementation involves setting up automated workflows for lifecycle management and compliance reviews, which can be completed within a few days depending on the number of custom integrations required. Zygon provides dedicated onboarding support for all plans to ensure a smooth transition.

Zygon offers extensive customization capabilities to fit an organization's specific security policies and operational workflows. Users can create 'Custom Access Management' rules and tailor automation logic through Zygon’s flexible workflow engine. The platform provides an open API and CLI tools, allowing developers to build custom connectors for internal or niche applications. Furthermore, the 'Copilot' browser extension can be configured to interact with almost any web-based application, providing a layer of customization for tools that do not support standard integration protocols. Branding and notification templates for Slack, Teams, and email can also be customized to match the company's internal communication style.

Beyond the per-user subscription fees, Zygon's pricing is transparent, but there are potential additional costs to consider. According to their Terms of Service, one-time 'setup or onboarding fees' may be charged at the time of activation; these are typically non-refundable. For organizations requiring deep technical assistance or bespoke development, Zygon offers 'Professional Services' or consulting on a 'time and materials' or 'fixed fee' basis. Metered or usage-based fees might apply if an organization exceeds specific plan metrics (such as a high volume of API requests or storage), though these are generally billed monthly in arrears. It is recommended to discuss specific implementation needs with the sales team to get a full cost breakdown.

Zygon provides a comprehensive training ecosystem to ensure users can maximize the platform's value. New customers receive a dedicated onboarding session that covers the basics of discovery and workflow setup. The company maintains an extensive online 'Knowledge Base' and documentation portal featuring step-by-step guides, video tutorials, and best practices for identity governance. For enterprise clients, personalized training webinars and live workshops can be arranged for IT and security teams. Additionally, Zygon provides 'Success Management' to help organizations optimize their access review processes and ensure they are meeting their specific compliance goals (e.g., SOC 2 readiness).

Security is foundational to Zygon's platform. All customer data is encrypted at rest using industry-standard AES-256 encryption and in transit using TLS 1.3. The platform is hosted on Amazon Web Services (AWS) within the European Union (specifically leveraging trusted regions like Frankfurt), ensuring high availability and compliance with strict data residency requirements. Zygon enforces a 'Least-Privilege' principle for its own data access and only supports secure authentication methods like Google and Microsoft SSO for user login. The company also maintains a 'Vulnerability Disclosure' program and undergoes regular security audits to maintain its own compliance certifications.

Zygon follows a rapid release cadence, typically deploying updates and new features on a weekly or bi-weekly basis. As a cloud-native SaaS platform, updates are applied automatically without requiring manual intervention or downtime for the end-user. Major feature releases are accompanied by detailed release notes and announcements within the platform and via email. The company is highly responsive to user feedback, often prioritizing features requested by its community of IT and security professionals. Users are notified of significant changes to the interface or functionality well in advance to ensure minimal disruption to their established workflows.

Zygon maintains a clear policy that customers retain full ownership of their data at all times. In the event of contract termination, Zygon provides a 30-day window for users to export their data in standard formats (such as CSV or JSON) where available. Following this 30-day period, Zygon systematically deletes the customer's data from its active systems within another 30 days, unless longer retention is required by law. The platform is designed with data portability in mind, ensuring that organizations are not 'locked in' and can easily migrate their identity inventory and audit logs if they choose to move to a different solution.

Zygon is built on a modern, cloud-native architecture that scales seamlessly as an organization grows. It is designed to handle thousands of users and an unlimited number of SaaS applications without performance degradation. The 'Enterprise IGA' plan is specifically tailored for organizations with more than 1,000 users, offering dedicated infrastructure and advanced support to manage the increased complexity of large-scale identity footprints. The platform's automated workflows are optimized for high-volume tasks, such as bulk access reviews across hundreds of applications simultaneously, ensuring that security operations remain efficient even as the organization's SaaS stack expands.

Zygon's standard terms include an annual subscription commitment, though monthly billing may be available for certain tiers. Subscriptions auto-renew for successive terms unless a cancellation notice is provided (typically via the account dashboard or support email) before the current term ends. The company offers a '30-day money-back guarantee' for the first paid subscription term (excluding setup fees). Cancellation is effective at the end of the current billing cycle. Zygon also reserves the right to suspend or terminate services for material breaches of terms, such as non-payment or violations of their 'Acceptable Use Policy.' Detailed terms can be found at zygon.tech/terms.

Zygon is a compliance-centric tool designed to help organizations meet and maintain rigorous security standards. The platform is a critical component for companies seeking or maintaining SOC 2 (Type I and Type II) and ISO 27001 certifications, specifically addressing controls related to user access management, inventory, and periodic reviews. Zygon's own infrastructure is hosted on ISO 27001 and SOC 2 compliant AWS data centers. The platform's audit logging and reporting features are built to satisfy the 'evidence collection' requirements of modern auditors, making it significantly easier for organizations to demonstrate their adherence to security and privacy regulations like GDPR.