Axiomatics

Axiomatics

Founded in 2006 in Stockholm, Axiomatics emerged from the research of co-founders Babak Sadighi and Erik Rissanen, who contributed directly to the OASIS XACML standard that defines the firm's technical foundation. The company operates as an independent software vendor, not a single-family wealth vehicle — it originated with technology grants and venture backing from Swedish state-linked funds including Almi Invest and STOAF. Rissanen has since stepped back from daily operations while Sadighi serves as Chief Technology Officer. The firm sells attribute-based access control (ABAC) software, a departure from traditional role-based models. Its primary product, the Axiomatics Policy Server, evaluates real-time authorization requests against attributes of the user, the environment, and the resource. This translates to fine-grained controls like blocking a contractor from reading documents outside business hours from an unmanaged device. The software targets heavily regulated industries where security clearance and data segmentation converge — notably financial services and government defense. Confirmed deployments include a US intelligence agency and a top-five global bank, where the software handles billions of authorization decisions monthly. In 2024, the firm acquired the PlainID Authorizer policy engine to broaden its cloud-native offering for identity-defined security, extending its reach into DevOps pipelines and Kubernetes environments. The corporate headquarters remains in Stockholm, with a commercial office in Chicago, Illinois, reflecting the firm's dependence on North American government and financial services sales. Axiomatics has not publicly disclosed total headcount or recurring revenue. February 2025: Appointed industry veteran Gerry Gebel as President and CEO, succeeding a decade-long tenure of prior leadership, signaling a product expansion phase that moves the firm into runtime API security — a market adjacent to traditional access governance (per the firm, February 2025). Axiomatics' structural singularity lies in its runtime posture: unlike most identity and access management tools, which provision roles in advance, its software evaluates access requests at the moment of transaction. This makes it a piece of active infrastructure rather than a periodic compliance tool. The company operates without any family office overlay or co-investment structure, functioning instead as a pure-play enterprise software vendor funded by grants and venture capital.