Companies that use BigID

Source: Analysis of job postings that mention BigID (using the Bloomberry Jobs API)

I noticed that BigID buyers span three primary groups: data management directors (16%), information security directors (11%), and data privacy specialists (10%). Sales directors represent 6%, suggesting BigID is also hiring its own go-to-market team. These leaders are prioritizing data governance, compliance, and AI readiness. They're building teams to manage data as a strategic asset while meeting regulatory requirements like GDPR, HIPAA, and emerging AI governance standards.

The hands-on users are data engineers, privacy analysts, and security operations teams who perform daily tasks like data discovery, classification, sensitive data scanning, policy enforcement, and data subject rights request fulfillment. Multiple postings mention operating BigID alongside platforms like Collibra, Microsoft Purview, Varonis, and OneTrust. Practitioners tune classifiers, maintain data catalogs, conduct privacy impact assessments, and remediate data exposure risks across cloud and on-premises environments.

The pain points center on visibility and control at scale. Companies want to "discover, classify, and protect sensitive data" and achieve "end-to-end visibility" across fragmented data estates. They need to "reduce data exposure risk" and ensure "data remains protected throughout its lifecycle." One posting seeks to "minimize data exfiltration" while another aims to "unlock value" and "navigate complexity" in enterprise data environments. The consistent theme is transforming overwhelming data sprawl into governed, trustworthy assets that enable both innovation and compliance.

Source: Analysis of Linkedin bios of 121 companies that use BigID

I noticed that BigID's customers are predominantly large, established organizations operating critical infrastructure and services that millions of people depend on daily. These aren't tech startups building apps. They're financial institutions processing billions in transactions (PayPal, Scotiabank, MUFG), healthcare systems managing patient data (CVS Health, Labcorp), insurance companies underwriting risk (Swiss Re, Aviva), retailers serving consumers nationwide (Sprouts, Burberry), and utilities delivering essential services (Duke Energy, Aguas Andinas). Many are also government agencies and regulated entities handling sensitive citizen information.

These are mature enterprises, not startups. The signals are unmistakable: most employ thousands (often 10,000-plus), many are publicly traded with post-IPO funding rounds, and several mention heritage spanning decades or even centuries. I saw "Fortune company," "190 years of trayectoria," and "over 200 years of global financial leadership" throughout the bios. These organizations have complex, established operations across multiple geographies.

Source: Analysis of tech stacks from 121 companies that use BigID

I noticed that BigID users are heavily concentrated in enterprise governance, risk, and compliance (GRC). The extreme correlation with tools like Archer IRM, AuditBoard, and Diligent tells me these are large, regulated organizations that treat risk management and data governance as core business functions, not afterthoughts. These companies are likely in financial services, healthcare, or other industries where regulatory compliance directly impacts their ability to operate.

The pairing of BigID with Archer IRM and AuditBoard is particularly revealing. BigID discovers and classifies sensitive data across complex environments, while Archer and AuditBoard manage the broader risk and compliance workflows. This suggests a sophisticated approach where data privacy isn't handled in isolation but integrated into enterprise-wide risk programs. The high correlation with SailPoint CIEM reinforces this pattern, as these companies need to connect what data they have (BigID) with who can access it (SailPoint) to demonstrate compliance control.

The presence of Qualtrics alongside these compliance tools is interesting because it suggests these organizations also care about stakeholder feedback and experience management. They're not just checking compliance boxes. They're mature enough to measure how their governance programs actually impact employees, customers, and partners.