Book a demo

Identity Governance Shouldn't Stop at Digital Access.

Comply with CER & NIS2 legislation Full audit trail in minutes, not days Make your workplace safe Save costs on incidents and manual processes

Extend your Identity Control Plane to Critical Infrastructure.

✓ CER & NIS2 Compliance ✓ Full Audit Trail ✓ Workplace Safety ✓ Reduce Costs
Book a 30-minute demo See how it works
IMG_0126_compressed
Scherm­afbeelding 2026-02-11 om 10.03.25
Scherm­afbeelding 2026-02-01 om 22.54.52

From Physical Blind Spots to Digital Governance.

Digital Governance

  • Joiner
  • Mover
  • Leaver
  • Certification
  • Policy
  • Audit

Physical Access Rights

  • Manual key handover
  • Rights tracked in spreadsheets
  • Keys never returned
  • Never re-certified
  • Access granted locally
  • Paper logs

Hover to extend the control planeTap Key2XS to extend the control plane

Extending the Identity Control Plane

Policy

Enforcing access through policy and approval flows

Identity

Linking physical keys to digital identities

Traceability

Complete audit trails for every physical access event

Why now

The market has changed.

Seven forces, one direction: physical access is becoming an identity governance problem. Regulators, auditors and your own IAM programme are all arriving at the same door.

NIS2

Who can open the server room is now a supervisory question.

In force since October 2024, transposed country by country. Supervision, audits and management liability are live.

Where each member state stands

CER

Key control is resilience evidence, and the clock is per entity.

In force since October 2024. Member states designated their critical entities by 17 July 2026; each one now has ten months to comply.

Where each member state stands

Contractors

Their access has to end when the contract does.

More of the work on critical sites is done by people who are not employees, and CER puts the supply chain explicitly in scope.

Critical Infrastructure

One question across all of them: who holds access, right now?

Energy, water, transport and government run on thousands of dispersed, unmanned sites.

Offline Assets

Offline cannot mean ungoverned.

Substations, cabinets, pumping stations: no network, no reader, no badge. A programmable key is the only control there is.

Operational Resilience

Evidence, not intent.

Supervisors no longer ask whether you keep people out. They ask whether you can prove who was where, and revoke access in minutes.

Identity Security

Physical access is the last domain outside it.

IAM has become the control plane for digital access: lifecycle, policy, certification, audit.

Six forces describe the problem. This one names the answer. Key2XS extends the identity control plane to physical access.

See how it works

Evidence

Where enforcement stands

NIS2 and CER are law across the EU. Transposition and supervision differ by member state. See where each one is, from EUR-Lex, updated daily.

Loading implementation data...

Measures notified None notified

How it works

How Key2XS governs physical access

From identity and policy to physical keys and audit evidence, in one controlled flow.

Identity & Access Management

  • Joiner
  • Mover
  • Leaver

SailPoint ISC, Microsoft Entra ID, Okta, One Identity, OpenText NetIQ/ILM

Real-time events
Status updates

Key2XS Intelligence

Automated Physical Access Management

IAM Synchronization

Keeps IAM updated with current key assignments and access status

AI Key Plan

Automatically determines who needs access to what based on their role

Security & Compliance

Complete audit trails and instant access revocation

Multi-System Bridge

Connects any identity system to any key system

Automated control
Audit & sync data

Key Management

Electronic access control systems

iLOQ, ASSA ABLOY (eCLIQ, PROTEC² CLIQ)

Smart Keys

Time-based access
Bluetooth enabled
NFC supported

Designed for critical organisations.

Key2XS is used in environments where physical access impacts public safety, service continuity or regulatory compliance. Typical organisations include:

Serving organisations where physical access directly impacts safety, continuity and compliance.

See how this works in practice

From governed access to measurable impact.

How structured access governance directly translates into compliance, efficiency and risk reduction.

20+ Years of IAM Expertise

Governance drivers

Single Source of Truth (IGA-linked)
Identity-based access Control
Policy & Approval Workflows
Controlled Key Lifecycle
Central Access Oversight
20+ Years of IAM Expertise

Our metrics

100% Traceability of Key Issuance & Return
Real-time Access Visibility
Audit-ready at any time
↓ Lower operational risk
↓ Lower Audit effort
Months → days for Key Planning
95% Less Manual Key System Management
↓ Fewer Wall PD's
↓ Reduced Infrastructure Complexity

Why Key2XS was built

We were looking for a single solution for key management - It didn't exist yet

Traditional key systems and IAM solutions operated as isolated islands. Key2XS unites these worlds into one integrated platform.

Discover our solution
1587550138006

Co-Founder Key2XS

Niels Bakker, co-founder and CTO of Key2XS

Co-Founder Key2XS

1746630921693

Co-Founder Key2XS

1696359051569

Co-Founder Key2XS

News
Cost & Governance

The Most Expensive Key Is the One You Don’t Govern

Read more
Market

Impact of CER on the transition from mechanical to electronic locks

Read more
CRA implementation

Practical guidance on the application of the Cyber Resilience Act

Read more
AI at the Key2XS core

Physical access is generating data. AI turns that data into intelligence.

Read more
Inside the Key2XS platform

Inside the Key2XS Platform: How Digital Identity Becomes Governed Physical Access

Read more
More articles
Events
CyberSec Netherlands 2026 Upcoming
Trade Show

CyberSec Netherlands 2026

Dynamic platform uniting cybersecurity professionals and innovative start-ups. We’ll be showcasing how the Key2XS platform connects ASSA ABLOY Opening Solutions CLIQ electronic key system with leading Identity & Access Management (IAM) platforms.

September 09 - September 10, 2026
Utrecht, Netherlands Jaarbeurs
Learn More
Upcoming Trade Show

Cyber mission to Georgia (Atlanta) and Texas (Dallas & Austin)

September 13 - September 18
Atlanta, Dallas, Austin, US
Upcoming Conference

SailPoint Navigate Austin

October 05 - October 08
Austin, US
Upcoming Conference

One Conference 2026

October 06 - October 07
Den Haag, Netherlands
View all events

See Key2XS in action

What will be included in your guided walkthrough;

  • Identity-linked access control
  • Policy-driven approvals
  • Real-time access visibility
  • Audit-ready evidence

Get started with Key2XS today

Get a guided walkthrough of how identity, policy and physical access come together in one auditable system.

FAQ

Everything you need to know before getting started: from integrations and security to compliance and deployment.