Built and hosted in the EU, for people and AI agents.
All your identities, fully sovereign.*
The sovereign European platform that authenticates your users, secures their access and governs your AI agents.
* GDPR compliant, ready for the EU AI Act, with no dependency outside the EU.
One complete identity platform.
From authenticating your users to governing your AI agents, all sovereign and compliant.
A secure, governed identity.
Every agent needs a verifiable identity.
Your AI agents access your systems just like your people. Obexal gives each one a verifiable identity, permissions limited in time and scope, real-time monitoring and an audit log. Suspend or revoke an agent in one click.
- Attributable delegation via Token Exchange (RFC 8693)
- Scope, lifetime and audience capped per agent
- Anomaly detection: dormant wake-up, off-hours, volume spikes
- Fail-closed kill switch and a forensic audit trail
Secure every identity, across all your apps.
One login for all your apps, cloud and internal: dozens of ready-to-use connectors, plus any app that supports OIDC, OAuth 2.1 or SAML. Automatic account provisioning (SCIM) and access cut in one click when someone leaves.
Take back control of accessDeliver an exceptional sign-in experience.
Passkeys, social login, magic links and one-time codes: your users sign in without friction and without passwords. On a white-label login, or embedded in your apps via OIDC and our SDK.
Reinvent sign-inYour identities stay under European jurisdiction.
Sovereignty is not a promise on a slide: it is how Obexal is built, hosted and operated. Every claim on this page is verifiable.
- Hosting
- Built and hosted in France, datacenter in the Paris region.
- Data residency
- European Union, with no non-EU dependency in the request path and no external CDN.
- GDPR
- Self-service data export and deletion, audit log, data processing agreement available.
- Reversibility
- Open standards end to end: leave with your data, without rewriting your applications.
Frequently asked questions.
Where is our data hosted?
In France, in a datacenter in the Paris region, with data residency in the European Union. There is no non-EU dependency in the request path: even fonts are self-hosted. More on sovereignty
Can we migrate from Okta, Auth0 or Microsoft Entra?
Yes. Because Obexal speaks the same open standards, applications move one by one, with both identity providers running side by side during the transition. No big-bang cutover. See the migration path
Which standards does Obexal support?
OpenID Connect and OAuth 2.1 (PKCE, PAR, DPoP), SAML 2.0 in both directions, SCIM 2.0 in both directions, WebAuthn passkeys, and Token Exchange (RFC 8693) for agent delegation. Protocol details
What is AI agent identity?
Each AI agent gets its own identity, with a human owner, an expiry date, capped permissions and a kill switch. Every token it receives is attributable and audited: you always know which agent acted, for whom, and with what rights. Discover agent identity
How much does it cost?
Starter is 2 euros and Team is 5 euros per user per month. Business and Enterprise are quoted to your context. Every plan starts with a 30-day free trial, no credit card required. See plans and pricing
Does Obexal make us compliant with the EU AI Act?
No tool makes you compliant by itself, and we will not claim otherwise. Obexal contributes what the AI Act expects from you on agent oversight: traceability, human ownership, immediate revocation and an audit trail. Agent governance in detail
Ready to take back control of your identities?
Spin up your Obexal workspace in minutes, or let's talk about your project.