LOUISVILLE, Colo. – October 29, 2026 -- JumpCloud Inc. added automated compliance reporting, agent identity tracking and real-time risk detection to its platform. The update extends security policies from human users to AI agents, and privileged access management is due in December 2026.
Only 21% of organizations govern non-human identities
JumpCloud's Q3 2026 IT Trends Report found that only 21% of organizations have implemented governance controls for non-human identities. Organizations often run separate tools for identity, device management and compliance, which leaves gaps between systems and forces IT teams to collect audit evidence manually, according to the company.
Rahul Kamdar, senior vice president of product at JumpCloud, said an agent's compliance depends on the person behind it and the device it runs on, so all three need joint governance. He said that "not everyone doing the work shows up on the org chart anymore." Agent access should update automatically when an employee changes roles or leaves, and the change should leave a record.
Seven new capabilities target audit evidence and access control
- Workflows automation: automates lifecycle processes, offboarding and policy remediation across identities and devices.
- Automated compliance reporting: generates real-time audit reports and continuous logs mapped to regulatory frameworks across users, devices and agents.
- Agentic IAM: provides visibility and lifecycle tracking for agents and non-human identities.
- Risk detection: flags risky sign-ins, non-human behavior and unapproved access changes in real time.
- Continuous audit trails: link each human and non-human action to a verified identity to support SOC 2, ISO 27001, HIPAA and NIS2 audits.
- Device trust: blocks unmanaged or unhealthy devices from reaching company data through supported Conditional Access Policies.
- Privileged access management (PAM): deploys isolated identities and time-boxed credentials for admins and agents, scheduled for December 2026.
Datafy uses JumpCloud identity and MDM for SOC 2 requirements
Matt Lemon, system administrator at Datafy, said JumpCloud's centralized identity and MDM solution helps the company meet SOC 2 requirements. It provides identity management on devices and lets the company enforce security policies remotely.