Customer Identity and Access Management (CIAM) has become a core capability in the digital economy because it combines secure identity handling, regulatory compliance, and the ability to deliver personalized experiences that sustain engagement and trust. Across financial services, CIAM supports strong authentication, helps meet requirements such as GDPR and anti-money laundering controls, and enables tailored banking services. In retail and e-commerce, CIAM underpins Single Sign-On (SSO), secure checkout, and personalized journeys that can improve conversion and loyalty. Healthcare uses CIAM to protect patient portals, meet privacy obligations, and strengthen patient engagement, while iGaming relies on identity verification, fraud prevention, and secure registration to maintain fair and compliant platforms.
Nevis Security, a private company owned by IHAG Holdings, is positioned as a leading CIAM provider in Switzerland, securing a large share of Swiss e-banking transactions. Headquartered in Zurich with offices including Berlin, Budapest, London, Vienna, and Wilmington (Delaware), it targets government, finance, insurance, and gaming with its Identity Suite and Authentication Cloud. With over 25 years of experience dating back to early Swiss e-banking systems, Nevis emphasizes flexible deployment options (on-premises Linux, private cloud on OpenShift, and Microsoft Azure). Its brandable Access App and SDK enable biometric authentication (Touch ID/Face ID and Android biometrics), passwordless MFA/authentication, transaction confirmation, multi-account support, username-less access, and device-local, hardware-backed PIN/passcodes across iOS, Android, Flutter, and React Native.
Strengths highlighted include PSD2 compliance, B2B CIAM support, diverse authenticators, strong transaction confirmation, encryption/audit capabilities, and out-of-band OTP via WhatsApp, Signal, and Threema. Challenges include concentration in the DACH region, pending ISO 27001 completion, no SOC 2 Type 2 initiative yet, planned compromised credential intelligence (2024), and incomplete consent management UI for consent and profile attributes.
See All Locations
See All Locations