Saviynt

1.1 Identity, product, and reported scale

Saviynt was founded in 2010 and is headquartered in El Segundo, California. It sells a cloud identity-security platform spanning identity governance, privileged access, application access governance, identity-security posture management, external identity, and human, non-human, and AI-agent access. The official marketplace also shows an integration-led extension model through Saviynt, partner, and community applications. Saviynt says it secures more than 100 million identities, while a company-sourced January 2026 article reported more than 600 global enterprise customers and penetration of more than 20% of the Fortune 100. Those measures describe identities and accounts rather than revenue, and neither establishes active-customer retention or audited financial scale.[CO001, CO002, CO003, CO011, CO013]

1.2 Leadership and governance concentration

The official leadership page places founder Sachin Nayyar in the combined roles of chief executive and board chair, with Paul Zolfaghari as president and Shankar Ganapathy as chief operating officer. The role combination gives Saviynt a clear strategic center but also concentrates operating and board leadership in one founder. The public material does not provide committee charters, voting rights, succession plans, or a complete ownership schedule, so governance independence cannot be inferred from the displayed board roster. The decision-relevant leadership table is therefore a selected map rather than a complete executive or director census, and investor diligence should test succession depth and the practical authority of investor-appointed directors.[CO004, CO005]

1.3 Capital history and stakeholder alignment

Public databases describe a financing path from a $40 million 2018 round through $130 million of 2021 financing and $205 million of 2023 venture debt, followed by the announced $700 million Series B growth-equity financing in December 2025 at approximately a $3 billion valuation. KKR led the latest announced round, with Sixth Street Growth, TenEleven, and existing investor Carrick participating. This is funding raised, not cash available: debt repayment, primary-versus-secondary proceeds, fees, and deployed capital are not disclosed. Provider totals also diverge, so the capitalization table and round documents are necessary before treating any lifetime-funding figure as definitive.[CO006, CO007, CO008, CO009, CO010]

1.4 Disclosure limits and investability

March 2025 reporting quoted Saviynt's COO saying annual recurring revenue exceeded $200 million and customer count exceeded 500. A separate company-data provider lists 2026 revenue of $183.4 million and 1,743 employees, but it does not provide audited statements, methodology, or a comparable ARR definition. Revenue is not ARR, and the figures should not be reconciled into a synthetic growth rate. Forge reports no available price and limited market activity, which is an adverse liquidity signal rather than proof of an IPO timetable or fair value. Current audited revenue, margins, cash balance, burn, runway, customer concentration, employee denominator, legal exposure, and outage history remain concrete diligence gaps.[CO012, CO014, CO015, CO016]

1.5 Exhibits

2.1 Market Boundary and Substitutes

Saviynt's core market is cloud-delivered enterprise identity governance and administration: lifecycle provisioning, access certification, entitlement-risk review, policy enforcement, and governance across many applications and identities. Privileged access, posture management, application access governance, non-human identity, and AI-agent controls are adjacent expansion pools rather than a license to count all identity or cybersecurity spend as TAM. General SSO, MFA, network security, endpoint security, and generic CASB spend should therefore be excluded unless a buyer explicitly reallocates those budgets to a converged identity platform. Status-quo substitutes include manual certifications, scripts, fragmented point tools, and legacy IGA deployments; each can defer a platform purchase even when it does not provide equivalent control depth.[CM001, CM002, CM003, CM015]

2.2 Sizing Lenses and Evidence Quality

The only allocated source that aggregates global IGA forecasts reports a 2024 range of $7.29B-$8.85B and an approximate 14%-15% CAGR through the end of the decade. That range is useful as a broad category reference, not as a precise investment-grade TAM: the fetched document is an autonomous secondary synthesis, and the underlying analyst reports and methodologies were not part of this chapter's evidence pool. Other scale indicators use incompatible denominators. Saviynt says it secures more than 100 million identities, while 6sense reports more than 1,303 companies under a CASB taxonomy and Tracxn counts 318 active competitors in a broader identity market. None is revenue, SAM, SOM, or verified customer count, so these measures cannot be converted into market share.[CM004, CM005, CM006, CM007, CM008, CM009, CM010]

2.3 Buyers, Users, Payers, and Adoption Path

The best-supported buyer is a large enterprise with compliance-heavy processes, rapid cloud adoption, or fragmented legacy IAM. The economic sponsor is generally the CISO, CIO, or enterprise security and IT organization; IAM teams administer the platform, while application owners, managers, auditors, and risk teams participate in access reviews and exceptions. Adoption commonly starts with high-risk applications or lifecycle workflows, then expands through connectors, certifications, privileged workflows, and posture remediation. The Exchange illustrates a partner and community ecosystem around migration, testing, and application onboarding, but those listings remain company-issued evidence rather than independent proof of deployment outcomes. Current contract pricing, packaging, and the budget split between software and implementation remain undisclosed in the assigned evidence.[CM011, CM014, CM015, CM016]

2.4 Drivers, Constraints, and Valuation Relevance

Demand is supported by cloud and hybrid complexity, recurring certification and audit work, least-privilege programs, and the extension of governance from people to privileged, machine, and AI-agent identities. The same evidence also points to a long adoption curve. Saviynt's Zero Trust guidance says transition requires significant investment and describes a three-to-five-year journey, while an independent procurement guide flags planning overhead, integration sequencing, data quality, policy ownership, and sustained operational tuning. These constraints make implementation capacity and time-to-value as important as category growth. For valuation, the broad market CAGR supports demand durability, but no public Saviynt-specific SAM, pricing schedule, win rate, or spend capture was available; underwriting should therefore use verified contracts and cohort economics rather than apply the broad market range directly to company revenue.[CM003, CM004, CM012, CM013, CM014, CM016]

2.5 Exhibits

3.1 Landscape and buyer alternatives

The buyer set is broader than a single Saviynt-versus-SailPoint contest. SailPoint is the closest like-for-like enterprise IGA peer, while Microsoft Entra ID Governance and Okta Identity Governance are incumbent-stack extensions that can displace a separate platform in Microsoft- or Okta-centric estates. Linx, Lumos, Omada, Veza, Zluri, and other specialists attack narrower jobs such as fast cloud governance, permissions visibility, or SaaS lifecycle management. Aggregator results also mix password management, authentication, PAM, and identity verification with IGA, so apparent competitor counts overstate direct substitutability. The status quo remains internal scripts, static roles, and spreadsheet-led reviews; it avoids a new vendor but preserves labor, control, and audit risk.[CP003, CP004, CP005, CP008, CP013, CP014]

3.2 Capability breadth and distribution power

Saviynt's defensible position is breadth: its company materials present a cloud-first identity governance platform, while its exchange shows an ecosystem of application connectors, migration accelerators, testing tools, onboarding services, and partner-built solutions. That supports complex enterprise programs but does not by itself prove faster deployment or lower operating cost. SailPoint retains an edge in legacy and mainframe connector depth according to the reviewed comparisons. Microsoft and Okta trade some cross-estate governance depth for native distribution into their installed identity stacks. Smaller challengers frame agentless deployment, usability, and unified human/non-human identity coverage as their wedge, but those comparisons are competitor-issued and require buyer validation.[CP001, CP002, CP004, CP005, CP011, CP016]

3.3 Pricing, implementation, and switching costs

Commercial transparency is a competitive weakness. The reviewed comparison reports that Saviynt and SailPoint require custom quotes, while Microsoft publishes a $7-per-user-per-month Entra ID Governance add-on that requires Entra ID P1 or P2; the broader Entra Suite is reported at $12 per user per month. Third-party Saviynt estimates span too widely to underwrite, and realized pricing, modules, discounts, services, and renewal terms remain private. Competitor pages repeatedly allege multi-month implementations and substantial professional-services dependency, but they are not independent benchmarks. Conversely, switching away is also costly: certification history, role models, segregation-of-duties policies, connector rebuilds, and parallel operation through a certification cycle can make an enterprise IGA migration a multi-quarter program.[CP006, CP007, CP009, CP010, CP015]

3.4 Moat durability and displacement risk

Saviynt's moat appears strongest when a buyer values one broad identity-security suite, a partner ecosystem, and cloud-oriented enterprise governance more than procurement simplicity. The reported $700 million financing can fund product, partner, and international expansion, but funding raised is not cash available and does not prove product execution. Durability is weaker at two edges: SailPoint can win heterogeneous estates through legacy depth, and Microsoft or Okta can bundle governance into an existing control plane. Newer vendors can also pressure implementation economics. The underwriting test is therefore not feature availability alone; it is whether Saviynt can demonstrate faster deployment, transparent all-in cost, and sustained governance quality against both suite incumbents and focused challengers.[CP002, CP004, CP011, CP012, CP015, CP016]

3.5 Exhibits

4.1 Revenue model and pricing remain only partially observable

Saviynt appears to monetize a broad enterprise identity-security platform, with modules, integrations, and partner-delivered implementation around the core software. A derivative profile reports that subscriptions represented 88% of FY2024 revenue and describes quote-based pricing tied to identities, connected applications, and enabled modules, but the assigned evidence contains no Saviynt list-price schedule, realized contract data, discount curve, or revenue recognition policy. The Exchange shows that migration and application onboarding can require specialized partner services, making the split between software revenue, Saviynt services, and partner economics an important unknown. Consequently, the apparent recurring model is plausible but cannot yet be converted into dependable ACV, revenue-mix, or gross-profit assumptions.[CI007, CI009, CI013, CI015]

4.2 Usage scale is visible; audited unit economics are not

Saviynt says it secures more than 100 million identities, while a third-party funding article reports more than 600 enterprise customers globally. Those figures indicate material deployment scale but are not revenue, ARR, billings, or active paid-seat measures and cannot establish monetization per identity. A low-reputation derivative profile reports FY2024 ARR above $200 million, growth above 35%, retention above 100%, subscription gross margin near 80%, and positive cash EBITDA. RFP.wiki separately repeats the positive cash EBITDA signal but explicitly describes the detail as self-reported and unaudited. These metrics are useful diligence leads, not an audited basis for forecasting revenue quality, gross-margin durability, free cash flow, or CAC payback.[CI005, CI006, CI008, CI010, CI011, CI012, CI013, CI014]

4.3 Large financing capacity does not establish runway

Independent coverage reports a $700 million December 2025 growth-equity round at an approximately $3 billion valuation, with proceeds intended for product development, AI capabilities, integrations, and international commercial expansion. That financing likely increases strategic capacity, but funding raised is not cash available: the public evidence does not disclose primary versus secondary proceeds, closing cash, restricted cash, burn, debt balances, covenants, or planned annual deployment. The aggregate history is also internally inconsistent. Tracxn states $870 million raised across four rounds, while its own listed round amounts total $1.075 billion. Until management reconciles the scope and financing types, neither total capital raised nor runway should be used as a precise underwriting input.[CI001, CI002, CI003, CI004]

4.4 Financial verdict: promising signals, insufficient underwriting inputs

The available record is directionally consistent with an enterprise SaaS company that has meaningful usage, a partner-supported delivery model, and substantial recent financing. It does not support a defensible valuation model or capital-adequacy conclusion. Pricing architecture is uncorroborated, customer counts and identity counts lack contract-value denominators, and reported ARR, retention, margin, and cash EBITDA lack audited statements or cohort schedules. BreachHistory currently catalogs no public incident for Saviynt, but its disclosure-dependent catalog cannot prove the absence of an incident or quantify contingent exposure. Investment underwriting should therefore condition any revenue-quality or margin-path conclusion on audited financials, a revenue bridge, contract cohorts, cash and debt schedules, and a primary-secondary reconciliation for the latest round.[CI005, CI006, CI009, CI010, CI011, CI012, CI013, CI014, CI015, CI016]

4.5 Exhibits

5.1 Product Footprint and Customer Workflow

Saviynt describes its product as cloud-first identity governance and access management, while its current public pages and customer-side implementation signals show a broader control plane for identity lifecycle, access requests, certifications, entitlement governance, and cloud access. Saviynt says it secures more than 100 million identities, but that figure is a company claim without a disclosed customer, tenant, or active-identity denominator. The Exchange solutions collection displayed 479 entries when reviewed; this is a catalog listing count, not a count of production-certified connectors or customers. A company-hosted Hertz testimonial also describes real-time discovery and automated onboarding of AI agents, which demonstrates the intended workflow but does not independently validate performance at scale.[CE001, CE002, CE003, CE004, CE015]

5.2 Integration and Operating Architecture

The observable architecture is integration-led rather than a self-contained identity system. Public catalog entries describe REST-based visibility, provisioning, and governance, while customer and implementer job specifications add SCIM, JDBC, directories, HR systems, cloud IAM, SAP, ServiceNow, CyberArk, and custom applications. Those sources support a layered operating model: authoritative identity and entitlement sources feed connectors; Saviynt applies lifecycle, request, certification, role, and policy workflows; downstream systems receive provisioning or remediation actions; and implementation teams produce audit evidence and operational documentation. The sources do not expose Saviynt's internal multi-tenant data model or deployment topology, so the architecture map is a sourced operating abstraction, not a claim about proprietary internals.[CE005, CE008, CE009, CE010, CE011, CE012]

5.3 Deployment Maturity and Differentiation

The strongest external maturity signal is not a benchmark but the specificity of live enterprise implementation roles. Wells Fargo describes expansion of Enterprise Identity Cloud and migration from legacy governance platforms; Avantor seeks architecture spanning HRMS, Active Directory, Azure AD, SAP, cloud systems, and custom applications; and Arkhya describes GCP, Delinea, service-account, and non-human-identity governance. Together these sources indicate production-oriented demand for Saviynt skills, but they also show that value realization depends on requirements mapping, custom workflows, integration design, testing, production readiness, and documentation. Saviynt's differentiation is therefore ecosystem and governance breadth, offset by an implementation burden that remains material for complex or disconnected estates.[CE006, CE007, CE010, CE011, CE012, CE013]

5.4 Trust Controls and Diligence Gaps

Customer and practitioner sources show that Saviynt deployments are expected to support segregation of duties, access reviews, least privilege, audit evidence, regulatory workflows, rollback planning, and operational runbooks. That is evidence of control requirements around the platform, not proof that Saviynt itself meets a particular uptime, throughput, privacy, or security-certification threshold. The retained source set contains no vendor-owned service level history, independent performance benchmark, public incident chronology, penetration-test result, or current certification artifact. Technical underwriting should therefore treat reliability and assurance as open evidence requests and should separately test the support and maintenance boundaries among Saviynt-authored, community-authored, and partner-authored Exchange assets.[CE013, CE014, CE015]

5.5 Exhibits

6.1 Enterprise customer shape and buying center

The observable customer footprint is enterprise-weighted. Bloomberry's analyzed set of 400 companies is concentrated in organizations above 1,000 employees, while Apps Run The World's disclosed 14-entry sample is entirely above that threshold and mostly above 10,000 employees. The two datasets are not population-equivalent and should not be blended, but both point toward complex organizations rather than a broad small-business motion. Job-posting analysis places IAM analysts in the daily-user role and information-security or IT directors in the buying center. Landbase identifies the United States as the largest geography and names business services, software/IT, manufacturing, software, and finance as common sectors; this is directional technographic evidence, not audited customer segmentation.[CU003, CU004, CU005, CU006, CU015]

6.2 Adoption scale and named reference proof

Saviynt says its platform secures more than 100 million identities, but the statement provides neither a customer denominator nor a disclosed measurement date. Third-party estimates also differ: Landbase reports 607 verified companies on a page last updated in August 2025, whereas Bloomberry describes analysis of 400 detected companies. These values measure vendor-specific datasets rather than a reconciled active-customer population. Named evidence is more useful: McKesson and Shell appear in both Landbase and Apps Run The World, and the latter describes implementations at AutoNation, Cross Country Healthcare, and Diageo India. Those records support real deployment activity, but most lack customer-authored confirmation, current deployment status, or quantified business outcomes.[CU001, CU002, CU007, CU008, CU009, CU010, CU011, CU012]

6.3 Durability, outcomes, and concentration remain unproven

The reviewed public sources do not disclose net or gross revenue retention, renewal rates, cohort churn, average contract length, customer concentration, or revenue by segment. That absence prevents a defensible conclusion about whether the large-enterprise footprint converts into durable recurring economics. Even detailed implementation descriptions tend to emphasize configured workflows rather than measured results; the Diageo India record explicitly avoids a quantified business outcome. The official customer page presents a VF Corporation modernization story but the fetched page does not expose the case-study details needed to classify it as a production deployment or assess realized value. Data-room evidence should therefore control any retention or concentration underwriting.[CU008, CU012, CU016]

6.4 Expansion surfaces exist, but implementation effort is visible

Saviynt's Exchange shows a plausible expansion path from an initial governance deployment into more applications, risk rules, privileged-access connectors, testing, migration, and managed implementation services. The same catalog also reveals friction: partners market accelerators for legacy migration, application onboarding, reconciliation, and testing because these are operationally demanding programs. A third-party case-study index says Saviynt built a one-stop customer portal and improved its own account-matching and pipeline operations, which indicates investment in enterprise customer operations but does not prove customer retention. The likely journey is sponsor-led modernization, practitioner adoption, application expansion, and recurring governance workflows; renewal evidence remains private.[CU006, CU013, CU014, CU015, CU016]

6.5 Exhibits

7.1 Regulatory Compliance, Federal Certifications, and Data Exposure Posture

Enterprise identity governance operates at the nexus of strict regulatory frameworks and security compliance mandates. Saviynt positions its Enterprise Identity Cloud (EIC) platform as a compliance accelerator, maintaining major independent certifications including ISO 27001:2022, ISO 27017 for cloud security, PCI-DSS v4.0 AOC, and SOC 1 Type II and SOC 2 Type II reports across its tenant infrastructure [CR001]. A key competitive and operational differentiator has been its FedRAMP Moderate authorization for controlled unclassified information (CUI) in federal agencies, where it has historically positioned itself as a pioneer among cloud-native IGA and PAM providers [CR002]. Furthermore, Saviynt voluntarily joined the Cybersecurity and Infrastructure Security Agency (CISA) Secure by Design pledge in May 2024, committing to enhanced product security practices alongside major technology peers [CR003]. Despite this compliance baseline, operating in highly regulated customer environments presents persistent legal and exposure liabilities. In enterprise software operations, third-party ecosystem incidents can propagate exposure even when core SaaS infrastructure remains uncompromised. For example, Saviynt acknowledged impact from the Klue third-party cybersecurity incident, wherein an unauthorized party compromised multiple customer Salesforce instances; while Saviynt confirmed no impact to its production software, core services, or customer data, internal sales data within its Salesforce instance was exposed [CR004]. Independent academic analyses highlight that transitioning enterprise environments to Saviynt requires extensive identity and access privilege migrations that demand rigorous continuous audit and role governance to avoid compliance missteps or inadvertent over-provisioning [CR005]. As regulatory bodies escalate penalties around access controls under SOX, HIPAA, GDPR, and NIS2, any failure in tenant isolation or policy enforcement remains a material legal risk.

7.2 Operational Complexity, Implementation Drag, and Cloud Infrastructure Resilience

The core operational challenge confronting Saviynt and its enterprise customers is implementation friction and administrative complexity inherent in converged identity platforms. Independent evaluations and market analyses indicate that Saviynt alternatives in 2026 are increasingly judged on deployment friction, governance depth, and operating model rather than purely checklist feature breadth [CR006]. While bundling identity lifecycle management, access certifications, privileged access management (PAM), and application access governance into a unified control plane reduces multi-vendor tool sprawl, it significantly expands initial implementation scope, systems integrator (SI) dependency, and ongoing operational overhead [CR007]. When deployment cycles extend across multiple quarters, audit deadlines and customer engineering constraints transform software architecture decisions into severe delivery risks [CR007]. Practitioners frequently encounter operational hurdles during data modeling, connector configuration, and analytics querying. Technical practitioner feedback reflects steep learning curves and frustrating reporting interfaces, particularly when writing custom SQL analytics queries in complex data environments where error diagnostics are unhelpful [CR008]. On the resilience side, Saviynt's cloud-native architecture mitigates single-tenant hardware failures; during the July 2024 global Windows outage caused by a flawed CrowdStrike sensor update, Saviynt's production systems were unaffected and experienced zero downtime [CR009]. However, because enterprise identity operations depend on continuous synchronization across hybrid directories, on-premises legacy systems, and SaaS targets, integration misconfigurations and identity data hygiene deficiencies represent ongoing operational hazards [CR010].

7.3 Ecosystem Dependencies, Enterprise Migration Friction, and Governance Gaps

Saviynt's operational model relies heavily on third-party application ecosystems, cloud hosting providers, and systems integration partners. Through the Saviynt Exchange, the company offers over 400 pre-built integrations, connectors, and partner-developed accelerators—such as the ezyMigrate accelerator by Fortuna Identity and posture remediation tools by Twine Security—to facilitate application onboarding and legacy migrations [CR011]. Large enterprise deployments, such as modernizations across Tier-1 financial institutions like Wells Fargo, require deep technical integrations with external platforms including ServiceNow, CyberArk, and hybrid Active Directory/Entra ID environments [CR012]. Any disruption or API deprecation by foundational enterprise platforms poses integration breakage risks. Furthermore, the explosive growth of non-human identities (NHIs)—such as service accounts, API keys, and machine tokens, which outnumber human identities by 25x to 50x in modern enterprises—presents an acute governance risk [CR013]. Industry research reveals that only 20% of organizations maintain formal processes for offboarding and revoking API keys, creating massive shadow access paths and persistent standing privilege risks if not continuously audited [CR013]. While Saviynt has introduced automated migration tooling and AI-driven governance assistants (SaviAI) to alleviate reviewer fatigue, enterprise customers remain vulnerable to toxic entitlement combinations and configuration drift across complex ERP systems if integration governance breaks down [CR014].

7.4 Capital Structure, Growth Valuation Defense, and Thesis-Break Triggers

Following its December 2025 $700 million Series B growth equity financing led by KKR, Sixth Street Growth, TenEleven, and Carrick Capital Partners, Saviynt achieved a post-money valuation of approximately $3.0 billion, bringing cumulative funding to $870 million to $1.075 billion depending on secondary and debt inclusion [CR015]. While the company reported fiscal year 2024 annual recurring revenue (ARR) exceeding $200 million (up >35% year-over-year) and achieved positive cash EBITDA, defending a $3 billion private mark requires sustaining high net revenue retention (reported at 111%) and expanding gross margins near 80% amidst fierce competition from legacy incumbents and agile challengers [CR015]. Key thesis-break triggers for investors include: (1) multi-quarter implementation stalls leading to customer reference deterioration or contracted retention decay; (2) failure of non-human identity (NHI) and AI-agent governance modules to establish enterprise traction, leaving core IGA vulnerable to bundled competition from Microsoft Entra ID; (3) critical cloud service outages or direct tenant data compromise violating enterprise trust; and (4) escalation of customer acquisition and deployment costs that compress EBITDA margins and force dilutive follow-on financing. Diligence must confirm audited GAAP revenue, cash burn dynamics, and liquidation preference structures [CR016].

7.5 Exhibits

8.1 Recommendation and Price Discipline

The recommendation is research-more with medium confidence, high information risk, and a stretched-to-unsubstantiated valuation stance at the approximately $3 billion mark. The financing itself is well supported: Saviynt announced a $700 million Series B Growth Equity Financing led by KKR at that valuation, and independent databases repeat the mark. The underwriting bridge is much weaker. Multiples reports a $200 million figure and a 15.0x revenue multiple, while explicitly warning that round-linked figures may represent run-rate revenue, reported LTM revenue, or ARR. Without audited revenue, retention, cash-flow data, and transaction preferences, neither entry returns nor downside protection can be quantified responsibly.[CV001, CV002, CV005, CV006, CV016]

8.2 Financing Record and Data Quality

Public records do not reconcile into a dependable capitalization history. Tracxn reports $870 million raised across four rounds, including a $205 million venture-debt transaction in January 2023, whereas FundedIQ reports $149 million across two rounds and identifies a $19.3 million Series B in August 2026. The latter record conflicts with both Saviynt's own December 2025 announcement and other independent trackers. That conflict is not evidence of new cash, a down round, or an amended financing; it is evidence that aggregator data cannot substitute for signed closing documents. The primary-secondary split, outstanding debt, liquidation preferences, participation rights, and fully diluted ownership remain material diligence gaps.[CV001, CV007, CV008, CV009, CV010, CV011]

8.3 Thesis, Anti-Thesis, and Scenario Logic

The investable thesis is scale plus platform breadth: Saviynt reported more than 600 global enterprise customers, over 20% of the Fortune 100, and more than 100 million identities secured; its Exchange also shows company, community, and implementation-partner solutions spanning migration, testing, governance, and application connectors. The anti-thesis is that these adoption signals do not establish recurring revenue quality, margin durability, or cash generation. Bull, base, and bear cases therefore remain conditional rather than numerical. A bull case requires verified durable growth and clean terms; the base case preserves optionality but does not underwrite the current mark; the bear case is triggered if the $200 million metric or customer economics fail verification.[CV003, CV004, CV005, CV006, CV012, CV013, CV014, CV016]

8.4 Exit Readiness and Diligence Gates

The assigned evidence supports neither an IPO timetable nor a model-ready exit valuation. LinkedIn displays 1,743 associated employees and a company size band of 1,001-5,000, which suggests organizational scale but is not a verified payroll count. UpGuard describes continuous external monitoring through more than 330 checks, yet the fetched public page does not disclose Saviynt's actual rating; this cannot prove either the presence or absence of a security incident. Final diligence should require audited financials, cohort retention, customer concentration, the complete capitalization and debt schedule, preference terms, primary-secondary proceeds, security findings, and management's credible exit path. Failure to reconcile these items is a thesis-break condition.[CV014, CV015, CV016]

8.5 Exhibits