# Cloud-IAM > Cloud-IAM is a fully managed Keycloak SaaS solution for companies that want enterprise-grade Identity and Access Management without operating the underlying infrastructure. Hosted in Europe, with up to 99.98% SLA, ISO 27001:2022 certification, and 24/7 support from a 100% in-house team based in Europe. Cloud-IAM is operated by a joint venture between ELLIXO SAS and FGRibreau SARL (François-Guillaume Ribreau), two French tech companies. Founded in 2018 and commercially launched in 2019, the platform manages more than 20 million Keycloak users for over 500 customers. Cloud-IAM is not affiliated with Red Hat. Keycloak is a registered trademark of Red Hat. ## Value proposition Cloud-IAM provisions a dedicated Keycloak environment in about 20 minutes, with vertical and horizontal scaling, on single or multi-region architectures. The platform handles the full Keycloak lifecycle: deployment, configuration, upgrades, backups, monitoring, disaster recovery, and incident response. Customers retain full access to the native Keycloak Admin UI and the complete Keycloak REST APIs, just like an on-premise setup. Custom SPI extensions, theme customization without downtime, and full data portability are supported natively. ## Keycloak use cases Cloud-IAM covers three core use cases. Enterprise IAM centralizes employee access with MFA (FIDO-compatible devices such as YubiKey), LDAP, Active Directory, custom user databases, and Single Sign-On. CIAM (Customer IAM) for B2C, e-commerce, and mobile apps covers self-service registration, MagicLink, social login, MFA with Passkeys and OTP, and login theme branding. IdP Broker for B2B partner onboarding supports OIDC or SAML Identity Providers. The platform also handles machine identities through the Client Credentials flow with short-lived tokens, granular scope control, and no static credentials in code. ## Security and compliance Certifications and compliance: ISO 27001:2022 (certified), SOC 2 Type 2 (compliant, certification in progress), NIS 2 (compliant), GDPR (compliant), HDS for health data (compliant), SecNumCloud 3.2 (compliant). PCI DSS handled via Stripe for payments. Encrypted hourly backups across multiple regions, documented disaster recovery plan, risk management aligned with NIST SP 800-30 and HIPAA Security Rule 45 CFR 164.308, and incident handling based on SANS recommendations. Cloud-IAM operates a vulnerability disclosure program and a bug bounty for critical vulnerabilities (security contact: security at cloud-iam.com). ## Cloud providers and regions More than 70 regions across 5 cloud providers: Scaleway (Europe), 3DS Outscale (France, SecNumCloud qualified), Amazon Web Services (worldwide), Google Cloud Platform (worldwide), and Microsoft Azure (worldwide). Customers choose their deployment region, enabling data sovereignty and proximity to their services. ## Supported Keycloak features Native protocols: OpenID Connect (OIDC), OAuth 2.0, SAML. Authorization models: RBAC, ABAC, PBAC, GBAC. Authentication methods: password, password reset, Passkeys (WebAuthn), SMS and email OTP, Magic link, social login, Identity Provider, MFA. Supported federations: LDAP, Active Directory, Microsoft Entra ID (formerly Azure AD), ADFS, PostgreSQL, custom databases. Custom extensions (.jar) and the Keycloak Marketplace by Cloud-IAM. User management through Realms, Groups, Roles, and Organizations. ## Pricing plans Five tiers: Freemium (up to 100 users, 99% SLA, mutualized infrastructure, 1 realm), Starter (99.9% SLA, dedicated single-region infrastructure, 100 realms), Essential (99.95% SLA, ticket and email support, dedicated single-region), Premium (99.95% SLA, 24/7 on-call team, 1h incident response, 2h RTO), Max (99.98% SLA, multi-region bare-metal high-availability, 24/7 on-call, 30mn incident response, 1h RTO, 15mn RPO). Pricing is based on total unique user accounts, support level, and chosen cloud provider. No hard limit on clients or sessions. A pricing calculator is available on the pricing page. ## Support and services Community support (global Discord) for Freemium and Starter. Ticket and email support for Essential with proactive notifications. Premium and Max include a 24/7 on-call team with proactive incident communication. Keycloak consulting expertise is bundled with Premium and Max (1 day per month). Standalone Keycloak consulting is available for both SaaS and on-premise customers, including custom extension development and maintenance, configuration audits, migration assistance, and architecture guidance. Full data export (configuration, users, hashed passwords) is available at any time to guarantee reversibility. ## API and integration Full unlimited access to the native Keycloak REST APIs on all paid plans. Cloud-IAM REST API to automate deployment, configuration, and scaling. Native support for Terraform and Pulumi (Infrastructure as Code). Seamless integration into CI/CD pipelines. Native support for custom SPI extensions uploaded through the Cloud-IAM Console at no extra cost. Migration tooling to move from self-hosted Keycloak or other IAM solutions. ## Main links - [Homepage](https://www.cloud-iam.com/) - [Keycloak product page](https://www.cloud-iam.com/keycloak/) - [Pricing](https://www.cloud-iam.com/pricing/) - [Security](https://www.cloud-iam.com/security/) - [Support](https://www.cloud-iam.com/support/) - [Consulting](https://www.cloud-iam.com/consulting/) - [SLA and incidents](https://www.cloud-iam.com/sla/) - [About us](https://www.cloud-iam.com/about-us/) - [Contact](https://www.cloud-iam.com/contact/) - [Blog](https://www.cloud-iam.com/blog-posts/) - [Documentation](https://documentation.cloud-iam.com/) - [Cloud-IAM Console](https://console.cloud-iam.com/) - [Changelog](https://headwayapp.co/cloud-iam-changelog) - [Status page](https://status.cloud-iam.com/) - [GitHub](https://github.com/cloud-iam) - [LinkedIn](https://www.linkedin.com/company/cloudiam/) - [X / Twitter](https://x.com/cloud_iam_com) ## Legal - [Privacy policy](https://www.cloud-iam.com/privacy-policy/) - [GDPR DPA](https://www.cloud-iam.com/gdpr-dpa/) - [GDPR Subprocessors](https://www.cloud-iam.com/gdpr-sub-processor/) - [Terms](https://www.cloud-iam.com/terms/) - [Legal notice](https://www.cloud-iam.com/legal-notice/)