// tool profile

Pathlock

Founded
2004
HQ
Denver, Colorado
Frameworks
5+

Identity governance and SOX access controls platform with automated SoD analysis for enterprise ERP environments.

// overview

What Pathlock Does

Pathlock focuses on the access control and identity governance side of SOX compliance. The platform automates segregation of duties (SoD) analysis, access risk management, user provisioning, access reviews, and continuous controls monitoring across enterprise applications like SAP, Oracle, Workday, and Dynamics 365. It has 100+ application connectors. Pathlock is particularly strong for the IT General Controls (ITGC) component of SOX, specifically access management and change monitoring. The company has raised $220M in funding (including a $200M PE round from Vertica Capital Partners in 2022) and serves 1,300+ organizations worldwide.

best for
  • Large enterprises running SAP, Oracle, or other complex ERP environments that need deep SOX ITGC access controls. Strong for companies where segregation of duties and access reviews are the primary compliance pain point.
not ideal for
  • Startups or SaaS companies needing SOC 2 or ISO 27001. Pathlock is purpose-built for ERP access governance, not general compliance automation. If you do not run SAP or Oracle, most of Pathlock's value doesn't apply.
// pricing

Pricing

Starting price Contact sales
Pricing model Custom quote
Free trial Yes
Free tier No
Pricing disclosed No

No public pricing. Enterprise sales model. The $220M in funding and 1,300+ customer base suggest established enterprise pricing.

Full Pricing Breakdown →
// at a glance

Frameworks, Features & Integrations

Frameworks
SOC 2
ISO 27001
HIPAA
PCI DSS
GDPR
FedRAMP
CCPA
NIST
DORA
Total 5+
Features
Evidence collection Manual
Continuous monitoring
Auditor portal
Vendor risk mgmt
Pen testing
Trust center
Security Q&A
API access
Policy mgmt
Employee training
Integrations
AWS
GCP
Azure
GitHub
Jira
Slack
// ratings

Ratings & User Sentiment

G2
4.3 ★★★★☆
15 reviews
Read G2 Reviews →
what users praise
  • Users praise the SoD analysis depth and how it handles access risk across complex ERP environments. Good consultant support and fast ticket response times.
what users criticize
  • Narrow focus on access governance means it does not cover the full scope of compliance automation. Thin G2 review base (15 reviews). Not useful for companies outside the ERP ecosystem.
👤
Typical Customer

Large enterprises with SAP, Oracle, or Dynamics environments managing SOX ITGC access controls, segregation of duties, and user access reviews.

Ready to evaluate Pathlock?

Visit their site to request a demo and get current pricing for your team size.

Visit Pathlock →
Data sources: Pricing and features from vendor website, G2, and Capterra. Re-verified every 90 days. Last check: Mar 2026. Next re-check: June 2026. Spot an error? Report it.