Cloud IAM
Managed Keycloak for single sign-on, customer identity and identity provider federation.
Profile last updated: · View sources
About Cloud IAM
Cloud-IAM is a French managed Keycloak provider based in Rennes. Its service supports workforce and customer identity management, single sign-on and identity provider brokering using OpenID Connect, OAuth 2.0 and SAML. Cloud-IAM manages deployment, upgrades, monitoring and backups, while customers retain access to Keycloak’s administration console and APIs.
Paid deployments offer a choice of Scaleway, Outscale, AWS, Google Cloud or Microsoft Azure and selectable regions, including the EU. Customers can customize themes and extensions and export their Keycloak configuration and user data. Support levels range from community support to 24/7 incident response; availability commitments depend on the plan.
Features
- Single sign-on and identity provider brokering with OpenID Connect, OAuth 2.0 and SAML
- Multi-factor authentication, passkeys and integration with LDAP or Active Directory
- Managed Keycloak deployment, upgrades, monitoring and backups
- Full access to the native Keycloak administration console and REST APIs
- Custom domains, themes and extensions on paid plans
- Keycloak-compatible exports of configuration, realms, users, groups and roles
- Paid deployments on Scaleway, Outscale, AWS, Google Cloud or Microsoft Azure
- 24/7 on-call incident response on Premium and Max plans
Alternatives
Other European companies in the same category as Cloud IAM.
Sovereignty Scorecard
Procurement-grade signals on data sovereignty, ownership, and EU residency.
We score every European vendor against six sovereignty dimensions captured in the SHIELD acronym. Each card below maps to one letter — read them as a checklist when comparing providers.
Third parties that may touch customer data, such as processors, subprocessors, payment providers, KYC vendors, support chatbots, analytics, and independent controllers disclosed by the vendor.
Where the legal entity sits, who controls it, and which subsidiaries operate under the same group.
Where customer data is physically stored, who runs the hosting stack, which CDN sits in front.
Whether public sources indicate the vendor or its data-processing third parties may fall under the US CLOUD Act or other extraterritorial reach.
Public terms, privacy policy, DPA, subprocessor list, impressum, and security or trust pages.
Independent audits and certifications (ISO 27001, BSI C5, TISAX, SOC 2) plus open-source transparency.
Privately held
Cloud-IAM describes itself as a joint venture of ELLIXO SAS and FGRibreau SARL, two French technology companies. The cited page does not specify share percentages.
🇫🇷 Rennes, France
Cloud-IAM SAS
Region selectable
Paid deployments offer selectable regions across five cloud providers; listed countries are examples, not an exhaustive catalog. Scaleway offers Paris, Amsterdam and Warsaw; Outscale offers Paris. The DPA provides for France/EU storage and requires customer consent for transfers outside the EEA. Freemium runs on AWS eu-west-3 (Paris). The published subprocessor list separates tenant identity data from control-plane and business-service data.
Website: Webflow, as identified in the legal notice
Application: Keycloak deployments on customer-selected Scaleway, Outscale, AWS, Google Cloud or Microsoft Azure; Cloud-IAM’s main control-plane infrastructure is listed on Scaleway. Freemium uses shared AWS Paris infrastructure.
Email: Google Workspace (G Suite in the subprocessor disclosure; Google MX records observed)
CDN: Cloudflare observed on the public website; this is not evidence of the Keycloak deployment network path
| Name | Country | Role | Purpose |
|---|---|---|---|
| Outscale | Europe | Subprocessor | Optional hosting of customer Keycloak deployments. |
| Scaleway | Europe | Subprocessor | Optional Keycloak deployment hosting; Cloud-IAM main infrastructure, REST API, own-user database, logs and metrics stated to exclude PII, and data exports. |
| Google Cloud | USA, Europe, Asia | Subprocessor | Optional hosting of customer Keycloak deployments; listed as Google Inc. |
| Amazon Web Services | USA, Europe, Asia | Subprocessor | Hosting of customer Keycloak deployments; Freemium uses AWS Paris. |
| Microsoft Azure | USA, Europe, Asia | Subprocessor | Optional hosting of customer Keycloak deployments. |
| Brevo | Europe | Subprocessor | Automated mailing for Cloud-IAM’s control plane. |
| BetterUptime | Europe, Czech Republic | Subprocessor | Uptime monitoring, status page and on-call management. |
| Crisp | Europe, France | Subprocessor | Customer relationship management. |
| G Suite | 🇺🇸 United States | Subprocessor | Internal company infrastructure. |
| Matomo | Paris, Europe | Subprocessor | User experience analysis on Cloud-IAM websites and products. |
| HubSpot | 🇺🇸 United States | Subprocessor | User experience analysis on Cloud-IAM websites and products. |
| Netlify | 🇺🇸 United States | Subprocessor | Hosting of Cloud-IAM dashboard static files. |
| Sentry | 🇺🇸 United States | Subprocessor | Application monitoring and error management. |
| Stripe | 🇺🇸 United States | Subprocessor | Online payment processing. |
| YouSign | France, Europe | Subprocessor | Electronic signatures for quotes. |
ISO/IEC 27001:2022: developing, maintaining and operating an identity and access management platform. Vendor-published IQNET certificate IL-1123679, issued 2024-11-11. The vendor documentation describes managed-service coverage from the 250-user plan.
Pricing
Free
- Up to 100 users and 1 realm
- Shared infrastructure on AWS in Paris
- Community support; no uptime SLA
From €99
- Up to 100 realms
- Dedicated deployment
- 99% uptime SLA
From €249
- Dedicated deployment with 99.9% uptime SLA
- Email and ticket support
- 12-hour incident response target
From €1,299
- 99.95% uptime SLA
- 24/7 on-call team; 1-hour incident response target
- One day of Keycloak consulting per month
Contact sales
- Multi-region deployment
- 99.98% uptime SLA
- 24/7 on-call team; 30-minute incident response target
Questions & Answers
4 questions
Where can Cloud-IAM host identity data?
Paid deployments let customers select a cloud provider and region, including EU locations on Scaleway, Outscale, AWS, Google Cloud and Azure. The published DPA provides for storage in France or the EU and requires customer consent for transfers outside the EEA. The free plan runs on shared AWS infrastructure in Paris. Non-European regions are also available for paid deployments.
How is Cloud-IAM priced?
Pricing depends on total unique user accounts, support level and cloud provider, rather than monthly active users. The free plan includes 100 users and one realm. The public pricing API lists Starter from €99 per month excluding VAT for 250 users on Scaleway; larger deployments and other providers cost more. User quotas are soft limits, with plan adjustments agreed as usage grows.
Can I customize Keycloak and move my data elsewhere?
Customers retain access to Keycloak’s native administration console and APIs. Paid plans support custom themes and extensions. Cloud-IAM provides Keycloak-compatible exports of configuration, realms, users, groups and roles so deployments can be moved or restored elsewhere. Keycloak is open source; this does not mean the entire Cloud-IAM service is open source.
Does choosing an EU region mean every service provider is European?
No. Cloud-IAM offers Scaleway and Outscale for tenant hosting, alongside US cloud providers with EU regions. Its subprocessor disclosure separately lists US providers for functions such as internal company infrastructure, application monitoring and payments. Cloud-IAM states that these control-plane providers do not handle its customers’ end-user content; their scope differs from the providers hosting Keycloak deployments.
Quick facts
Sources & provenance
This profile is compiled from cited public sources. Source URLs and latest source-check dates are listed below. Most recent source check: September 22, 2026.
Profiles use AI-assisted research with editorial review. Companies can request corrections at any time.
Found an error? Report it
Profile content
- primary · about-pagewww.cloud-iam.com/keycloak
- primary · impressumwww.cloud-iam.com/legal-notice
- primary · about-pagewww.cloud-iam.com/keycloak
- primary · about-pagewww.cloud-iam.com/managed-keycloak-features-for-production
- primary · pricing-pagewww.cloud-iam.com/pricing
- primary · otherwww.cloud-iam.comPublic website language switcher offers English and French; this is not a claim about all supported Keycloak interface languages.
- primary · pricing-pageapi.cloud-iam.com/plansLive public plan API, linked as source of truth by the pricing.txt document linked from the official pricing page. API integer amounts are euro cents; minimum paid examples use the 250-user tier.
- primary · pricing-pagecdn.prod.website-files.com/6a049a1ce289dbe19e90a343/6a4629cef38bfb12c9325c8e_pricing.txtVendor-published pricing document dated 2026-06-30 specifies EUR excluding VAT and plan terms; accessed through the link on the official pricing page.
- primary · pricing-pagewww.cloud-iam.com/pricingStatic pricing-card placeholders differ from the live API; quoted amounts use the API and matching vendor pricing.txt, not the static placeholders.
- primary · about-pagewww.cloud-iam.com/keycloak
- primary · about-pagewww.cloud-iam.com/managed-keycloak-features-for-production
- primary · pricing-pagewww.cloud-iam.com/pricing
- primary · otherdocumentation.cloud-iam.com/references/cloud-providers.html
- primary · dpashared.cloud-iam.com/doc/%5BEN%5D%20Data%20Processing%20Agreement%20%28DPA%29%202023-1.pdfArticle 6 covers France/EU storage and consent for transfers outside the EEA.
- primary · pricing-pageapi.cloud-iam.com/plans
- primary · pricing-pagecdn.prod.website-files.com/6a049a1ce289dbe19e90a343/6a4629cef38bfb12c9325c8e_pricing.txt
- primary · pricing-pagewww.cloud-iam.com/pricing
- primary · about-pagewww.cloud-iam.com/managed-keycloak-features-for-production
- primary · about-pagewww.cloud-iam.com/keycloak
- primary · subprocessor-listwww.cloud-iam.com/gdpr-sub-processor
Sovereignty (SHIELD)
- primary · subprocessor-listwww.cloud-iam.com/gdpr-sub-processorThe source labels entries as subprocessors and reports processing locations, not corporate headquarters; country values preserve that distinction. Deployment providers are selected per customer. The control-plane/business-service list is stated not to process customers’ end-user content.
- primary · pricing-pageapi.cloud-iam.com/plansFreemium deployment location is AWS eu-west-3.
- primary · impressumwww.cloud-iam.com/legal-notice
- primary · about-pagewww.cloud-iam.com/about-usCompany-stated joint venture; no ownership percentages or ultimate-control conclusion inferred.
- primary · otherdocumentation.cloud-iam.com/references/cloud-providers.htmlPaid plans offer selectable EU and non-EU locations. Region list in the profile is non-exhaustive.
- primary · dpashared.cloud-iam.com/doc/%5BEN%5D%20Data%20Processing%20Agreement%20%28DPA%29%202023-1.pdf
- primary · pricing-pageapi.cloud-iam.com/plans
- primary · subprocessor-listwww.cloud-iam.com/gdpr-sub-processor
- primary · impressumwww.cloud-iam.com/legal-notice
- primary · subprocessor-listwww.cloud-iam.com/gdpr-sub-processor
- primary · pricing-pageapi.cloud-iam.com/plans
- primary · dns-recordswww.cloud-iam.comObserved www.cloud-iam.com CNAME cdn.webflow.com and cloud-iam.com Google MX records on 2026-09-22.
- primary · http-headerswww.cloud-iam.comObserved server: cloudflare and cf-ray on the public website on 2026-09-22; no inference about Keycloak tenant traffic.
- primary · subprocessor-listwww.cloud-iam.com/gdpr-sub-processorPotential exposure via listed US providers. Tenant hosting depends on the provider selected; the disclosure distinguishes control-plane/business-service data from tenant end-user content. This is an editorial dependency classification, not a legal determination of access to a particular customer’s data.
- primary · termswww.cloud-iam.com/terms
- primary · privacy-policywww.cloud-iam.com/privacy-policyPublic policy is dated 2020 and uses a different legacy entity label; legal entity is sourced from the current legal notice.
- primary · dpawww.cloud-iam.com/gdpr-dpa
- primary · subprocessor-listwww.cloud-iam.com/gdpr-sub-processor
- primary · impressumwww.cloud-iam.com/legal-notice
- primary · security-pagewww.cloud-iam.com/security
- primary · cert-pageshared.cloud-iam.com/doc/%5BCloud-IAM%5D%20-%20Certificate%20of%20ISO%2027001.pdfVendor-published IQNET attestation: ISO/IEC 27001:2022, registration IL-1123679, issued 2024-11-11, expires 2027-11-11. It states it is linked to the IQNET member’s original certificate and is not a standalone document.
- primary · cert-pagedocumentation.cloud-iam.com/references/iso27001.htmlDocumentation describes managed-service certification from the 250-user plan. SOC 2, HDS and SecNumCloud are not asserted as Cloud-IAM certifications here.
- primary · about-pagewww.cloud-iam.com/keycloakManaged service is based on open-source Keycloak; this does not establish that the entire hosted service is open source.
- primary · othergithub.com/cloud-iamVerified public organization repositories include MIT- and Apache-licensed Keycloak utilities and extensions.
Other
- primary · otherwww.cloud-iam.comApple-touch icon linked in the official site header; replaces a legacy marketing screenshot used as the logo.