Companies / Authgear
Authgear provides open-source authentication and user management, including passkeys, SMS and WhatsApp OTP, SAML SSO and RBAC, run on its cloud, a private cloud in a chosen region, or self-hosted. It serves consumer and frontline identity use cases for teams such as those in transit, healthcare, property and food service.
Summarized from its homepage on 7 Nov 2026.
Vendors of Authgear and the evidence for each
Authgear declares 6 subprocessors.
Google CloudCloud and infrastructureConfirmed
Google Analytics / Google Tag ManagerConfirmed
PostHogAnalyticsConfirmed
PostmarkEmail and communicationsConfirmed
SentryObservabilityConfirmed
StripePaymentsConfirmed
CloudflareCloud and infrastructureLikely
Google Tag ManagerAnalyticsLikely
script: ;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f7 Nov 2026Source
Google WorkspaceProductivityLikely
NetlifyCloud and infrastructureLikely
2 more vendors
See Authgear's full stack and the source for every claim.
Create a free accountWork email, no card. Already have one? Log inCertifications
| Standard | What the source says | Checked |
|---|---|---|
| ISO 27001Company's statement | “Authgear is both ISO 27001 and SoC 2 Type II compliant.”The company's own statement. We have not checked an accreditation registry. | 9 Nov 2026Source |
| SOC 2 Type IICompany's statement | “Authgear is both ISO 27001 and SoC 2 Type II compliant.”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 9 Nov 2026Source |
We last read its homepage on 9 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Authgear lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Authgear's full stack
Every vendor with its source and date, and an alert when Authgear adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call