Identity and access
Enforce SSO with SAML or OIDC, provision and deprovision with SCIM, and require MFA across every workspace.
For enterprise
One passport standard across every brand, region and business unit.
Connect the systems that already hold your product data, govern who can change what, and keep a trail your auditors can follow. Identity, roles and audit are part of the platform, not add-ons.
- Identity
- SSO with SAML or OIDC, SCIM provisioning
- Access
- Roles and policy scoped by brand, region and product line
- Audit trail
- Every change recorded, and the database is in the EU.
Architecture
Your systems in. Governed passports out. Every record passes through the same identity, policy and audit layer, whichever system it came from.
Why Norruva
Governance your security team will sign off on. Bring Norruva into your existing security model without standing up parallel infrastructure.
Roles and policy
Scope who can see and change what with role and attribute based access, down to brand, region and product line.
Audit you can export
Every change is captured in an audit trail you can export, with the actor, the time and the value before and after.
How it works
A phased rollout, not a big bang. Start with one product group, prove it, then extend across the catalog.
Connect identity
Wire SSO and SCIM so access follows the directory you already manage.
Map your sources
Connect ERP, PLM and PIM fields to the passport model for the first product group.
Pilot one group
Run checks and publish for one group, with the audit trail on from day one.
Extend the catalog
Add brands, regions and product groups under the same roles and policy.
See it on your own products. Run the whole journey on sample data first. Nothing leaves the Sandbox.
Enterprise entitlements
Contracted, not capped. Enterprise plans replace tier limits with terms your procurement and security teams can review.
Workspaces and seats
Sized to your organisation in the contract, not to a self-serve tier.
Included volumes
Product records, passports and supplier requests agreed up front.
Audit data retention
Kept for 7 years by default.
API access
The full API and webhooks, with keys scoped per environment.
Rule packs
Automated checks with rule packs run across your catalog, so compliance keeps pace as regulations change.
Data location
Every change is captured in an exportable audit trail, and the database is in the EU.
The platform
The products behind it. One platform, assembled for where you are now.
Enterprise Governance
Identity, roles, policy and audit across every brand, region and product group.
Explore ›Evidence Vault
Test reports, declarations and certificates, each attached to the field it supports.
Explore ›Compliance Automation
Checks every required field against the template and names the gaps it finds.
Explore ›APIs and Integrations
The same operations over an API, with webhooks, so passports follow the pipeline you run.
Explore ›Supplier Data Collection
Requests the fields you do not hold from the party that holds them, and keeps the answer.
Explore ›Digital Twin
The product model the passport reads from, kept in step across the whole lifecycle.
Explore ›Questions
Questions, answered. What teams ask before they start.
Anything else, ask us directly through Contact sales.
Yes. Sign-in runs through SSO with SAML or OIDC, and SCIM provisions and removes users as your directory changes.
Roles and attribute based policy scope every permission. A user can be limited to a brand, a region or a product line, and the audit trail records every change they make.
The platform runs on managed cloud infrastructure, and the database is in the EU. We do not offer a choice of region today.
No. Norruva reads from the systems that already hold your product data and adds the passport, the evidence and the governance on top.
Get started
Give every business unit one passport standard.
Talk to us about identity, governance and a phased rollout plan across your catalog.
Try it without an account
Run the whole journey on sample data. Nothing leaves the sandbox.
Open the sandbox ›Build it into your stack
Every endpoint, in HTTP, cURL, JavaScript, Python and Go.
Read the docs ›