Rising Star Key2XS

Key2XS is a Dutch startup headquartered in The Hague, founded in 2024 and formally incorporated in early 2025, operating in the emerging market segment of Physical Access Governance. The company offers a subscription-based governance control plane that links enterprise Identity and Access Management (IAM) and Identity Governance and Administration (IGA) systems to electronic keys and lock infrastructure used to protect critical field assets such as substations, pumping stations, telecommunications sites, and bridges. Its core premise is “identity-native” physical access: roles, approvals, and revocation decisions originating in a customer’s existing identity governance system are translated into physical access rights, avoiding parallel and disconnected workflows.

The platform imports identity attributes (job titles, departments, roles) to create access profiles, then maps these to specific locks through an access graph that visualizes connections from identity roles to individual cylinders. End users can view keys and locations, request access, and activate approved rights via mobile using Bluetooth or NFC. A major operational bottleneck—manually building structured access plans over many months—is targeted by an AI Key Plan component that uses LLMs hosted on Key2XS servers to propose access profiles and mappings from imported identity and key-system data.

Key2XS emphasizes multi-vendor neutrality across both identity systems (e.g., SailPoint, Microsoft Entra ID, Okta) and lock vendors (e.g., ASSA ABLOY, iLOQ), plus resilience-oriented requirements like offline operation, audit evidence, and Just-in-Time contractor access. Because many lock systems remain deliberately offline, revocation becomes near real time rather than instantaneous; the platform tracks delivery confirmation and highlights remaining gaps. Market momentum is driven by regulatory pressure (CER, NIS2) and a projected large-scale shift from mechanical to electronic locks, though adoption is still early and growth depends on external timelines, lock conversion rates, and funding capacity.

• Key2XS was founded in 2024 and formally incorporated in early 2025.
• The company is headquartered in The Hague, Netherlands, with a geographic focus on Europe and the US.
• Key2XS has fewer than 10 full-time employees.
• The business is seed-funded, backed by Control Alt Invest, with a follow-on round under discussion.
• The platform links enterprise IAM/IGA systems to electronic key and lock systems to apply roles, approvals, and revocation decisions to physical access.
• Approval workflows remain in the customer’s own IGA system rather than being executed inside Key2XS.
• A mobile app supports viewing assigned keys and locations, requesting access, and activating rights over Bluetooth or NFC after approval.
• The AI Key Plan component uses LLMs running on Key2XS servers to generate proposed access profiles and mappings.
• Integrations include lock vendors ASSA ABLOY and iLOQ and IAM systems such as SailPoint, Microsoft Entra ID, Okta, One Identity, and OpenText.
• Two patent filings cover the governance model and a method for authenticating physical keys through a paired mobile phone.

• “Physical Access Governance extends identity governance to the offline, mechanical, and electronic key systems protecting critical field assets such as substations, pumping stations, and bridges.”
• “Its core product is a governance control plane linking enterprise Identity and Access Management (IAM) systems to electronic key and lock systems.”
• “Approval workflows for physical access requests stay with the customer's own IGA system instead of Key2XS.”
• “Building this structured access plan is normally a manual exercise that can take a large team many months to complete.”
• “Key2XS's primary innovation is its identity-native model, in which physical access rights inherit directly from the governance model already running inside enterprise identity systems.”
• “Electronic keys and lock cylinders remain deliberately offline for resilience, meaning revocation across the estate is near real time rather than instantaneous.”
• “This ensures administrators always know whether physical access has actually been withdrawn.”
• “Tens of millions of mechanical locks across the EU are expected to convert to electronic systems over the next decade.”
• “Physical Access Governance is likely to grow steadily in the next two to three years, tracking the pace at which the CER Directive and NIS2 are transposed into national law and enforced.”
• “Vendors that combine identity-native design with true multi-vendor support are best placed to benefit as the mechanical-to-electronic lock conversion accelerates across Europe.”