IDIOOne identity. Every entity you act for. Every agent acting for you.
SSO, verified identity, entity context, fine-grained policy, scoped agent identities, and consent for model training — the identity plane under every Colossal Capital product, and yours.
IDI0000001<3ENT<4AGT<<SCOPED<REVOCABLE<<06
Identity that understands organizations — and agents.
Most identity providers stop at the person. Idio models the entity they act for and the agents acting beside them.
Authentication your users already trust
Passkeys, MFA, social and wallet sign-in, and enterprise SSO through SAML and OIDC — behind one integration.
Entity context
One person can belong to many companies, funds, and teams. Idio carries the active entity into every request.
Agent provisioning
Every product persona is minted as its own identity: named, scoped to tools and data, time-bounded, and revocable.
Fine-grained policy
Role, attribute, and resource policy in one decision point — allow and deny lists for people and agents alike.
Verified identity
KYC, contact verification, and custom attestations bound to the person, not a phone number or mailbox.
Consent and audit
Training preferences, delegated credentials, and every privileged action recorded to an exportable audit trail.
Token exchange
One request, four decisions.
Choose the entity a person is acting for and the scopes an agent asks for. Idio resolves each step and shows the token it would issue.
- Person
- Entity
- Policy
- Agent token
Add Idio to a product in four moves.
Idio does not replace your product's work model. It answers who is asking, for which entity, with what authority.
Connect
Point your app at Idio's OIDC endpoints or SAML metadata.
Model
Declare entities, roles, and the scopes your product understands.
Provision
Register agent personas; Idio mints scoped identities per entity.
Enforce
Ask the policy decision point before any privileged action.
Idio issues every persona — and holds none.
Each product's named agents are provisioned here, scoped to one entity, and revocable in one action. Idio itself runs no persona roster.
Named and scoped
Every persona gets its own identity, tools, data scope, and time bound.
Acts for a person
Tokens carry both the agent and the human it acts for — never more authority than that person has.
One action
Revoke a persona, a delegation, or a training consent, and every product honors it on the next request.
Where consent and authority live.
Idio is where training consent lives: each user and entity chooses which scopes may inform a model, and revoking consent removes the path.
- AI provenanceEvery AI-assisted result in Idio is disclosed and traceable — which persona acted, which model ran, on whose authority, from which sources.
- Built for AI regulationTransparency notices, human oversight, risk documentation, and audit logs designed to support EU AI Act, Colorado AI Act, and NIST AI RMF / ISO/IEC 42001 programs.
- Private by designEntity-scoped storage, data minimization, encryption in transit and at rest, and GDPR / CCPA-CPRA request handling. Customer data never trains a shared model without opt-in.
- Fine-grained provisioningIdio SSO over SAML and OIDC, entity context, role and attribute policy, and a named, scoped, revocable identity for every agent.
- Humans at the gateConsequential actions wait for an eligible approver, and every decision lands in an exportable audit trail.
Private models, at the scope you choose — nothing rolls up on its own.
- UserA person's own preferences and private adapter
- ContentOne credential, document, or granted resource
- EntityOne entity's identity and policy history
- OrganizationAn organization's approved, consented corpus
Idio is where training consent lives: each user and entity chooses which scopes may inform a model, and revoking consent removes the path. Shared ecosystem learning is a separate, sanitized, opt-in path. AI transparency notice.
SEAL OF
AUTHORITY
Give your product an identity plane that scales to agents.
Idio is live. Apply for beta access to provision your first entity and agent personas.