Apex Steward — AI-Augmented IAM Governance

What needed to be fixed.

Mid-market security teams (roughly 250 to 2,500 employees) are stuck in the IAM governance gap. Spreadsheets and Confluence pages don't scale, but enterprise IGA platforms like SailPoint and Saviynt routinely run $150,000 to $500,000 in implementation fees with six- to nine-month rollouts. The manual work itself is the bottleneck — an IAM analyst typically spends around 8 hours transcribing a single vendor doc or policy PDF into a structured role matrix, and a typical mid-market org has 30 to 50 of those documents. The result: governance projects stall, audits slip, and access reviews happen in spreadsheets that nobody trusts.

How we tackled it.

We built Apex Steward as a multi-tenant SaaS platform purpose-built for that gap. The core differentiator is an AI ingestion pipeline — Voyage AI for embeddings, Anthropic Claude for extraction, and a custom blend-diff algorithm that reconciles AI output with anything an analyst has already authored. Upload a PDF or DOCX and roles, applications, entitlements, and policy statements land in the workspace already structured. A live NIST CSF-aligned maturity dashboard scores the program across identity lifecycle, access governance, privileged access, monitoring, and compliance, and the phased implementation plan reorders itself based on what the data actually says.

Tools and platforms we used.

What this created for the business.

• Document ingestion compressed from roughly 8 hours of manual transcription per policy to about 30 minutes of analyst review — a ~94% reduction in per-document effort.
• At a blended IAM analyst rate of $100/hr, that's roughly $750 saved per document. For a mid-market org ingesting 40 vendor docs and policies, the ingestion phase alone saves on the order of $30,000 in labor.
• Replaces $150,000 to $500,000 enterprise IGA implementations with a packaged platform priced for mid-market budgets — typical total cost of ownership is reduced by 70% or more in year one.
• First-pass maturity assessment lands in week one instead of month six, shrinking time-to-value from a 6–9 month consulting engagement to a matter of days.
• Single source of truth for audits — internal audit teams stop assembling binders of screenshots and pull a live, exportable role matrix and maturity report instead.