Security & scale
SSO/SAML, SCIM, role-based access, audit logging and the reliability to run thousands of creators and millions in attributed revenue.
Hermes is built to sit inside your existing security and identity stack, not alongside it. Access is governed by your identity provider, every action is logged, and your data stays yours. The same platform that runs a single gifting drop is engineered to handle thousands of creators and millions in attributed revenue without changing how it behaves.
Security pillars
SSO / SAML
Sign in through your existing identity provider. Enforce your own password, MFA, and session policies, and cut off access centrally when someone leaves.
SCIM provisioning
Users and groups sync automatically from your directory. Onboarding and offboarding happen where you already manage identity, with no manual seat juggling.
Role-based access control
Grant least-privilege access by role. Finance sees ROI, managers run campaigns, and budgets and sensitive data stay scoped to the people who need them.
Full audit log
Every meaningful action is recorded with who, what, and when. Export the trail for compliance reviews or investigate changes without guesswork.
Regional data residency
Keep data in the region you require to meet local and contractual obligations. Residency is selected to match your compliance footprint.
Data ownership & export
Your creators, campaigns, and attribution are yours. Export complete records on demand, with no lock-in on the data that drives your decisions.
Reliability and scale
uptime SLA
creators per workspace
in attributed revenue
A 99.9% uptime commitment means the platform is there when a launch goes live and orders start landing. Attribution, gifting, and reporting are built to hold their performance as your roster and order volume grow, so scaling up a program never means rebuilding it.
Governance you can hand to security review
SSO, SCIM, role-based access, and a complete audit log give your security team the controls they expect to see in a vendor review. Data residency and export rights cover the contractual side, so adopting Hermes is a question of configuration rather than exception.
Run Hermes against a real program with your controls in place. Talk to sales to scope a guided pilot, or see how the pieces connect on the Integrations page.