01
Orphaned account detection
Match accounts against current employee records, and flag every account without an owner.
Access Governance Agent
pegasus · Access Governance Agent
governed by CIP
Access Governance Agent · HRIS suite
- Connected to Workday, BambooHR, HiBobMerge
- Orphaned account detectionPegasus
- Dormant credential monitoringPegasus
- Prioritized permission clean-upPegasus
- policyFindings are reviewed by an owner before any account is changed.CIP
doneDeployed with the HRIS suite
Illustrative sampleThe Pegasus impact
The Pegasus Access Governance Agent helps HRIS and security teams reduce access risk by detecting orphaned accounts, dormant credentials and stale permissions across your HRIS and prioritizing them for an owner to act on.
Orphaned accounts accumulate. People leave or change role, and the access they held stays behind until an audit finds it.
- HRIS platforms supported through Merge
- 60+
- Specialized agents in the HRIS suite
- 6
- To deploy, from connected systems to go-live
- 4 weeks
- Of hypercare after launch
- 30 days
Capabilities
AI does the volume. Humans keep the judgment.
02
Dormant credential monitoring
Proactively monitor credentials, and surface the ones that have stopped being used.
03
Prioritized permission clean-up
Receive the permissions that no longer fit a person's role, ready for an owner to keep or remove.
Systems connected
Connected to the systems you already run.
Works across any HRIS via Merge: Workday, BambooHR, HiBob, Personio, ADP and 60+ more.
- Workday
- BambooHR
- HiBob
- Personio
- ADP
Governance built in
Human-in-the-loop control, with every action audited.
- Findings are reviewed by an owner before any account is changed
- Every decision logged
- CIP audit trail
FAQ
Access Governance Agent FAQs
A suite connects to your platforms through Merge's unified APIs. Whether your HRIS is Workday, BambooHR, or HiBob, the same AI agents work identically — because Merge normalizes the data model. You get consistent intelligence regardless of which vendor you chose.
4 weeks. Week 1: Connect your systems. Week 2: Configure agents and workflows. Week 3: Test with real data. Week 4: Go live. 30-day hypercare included after launch.
A one-time deployment fee scoped to the number of agents and complexity, plus a monthly retainer for managed operations. We quote both once we know which agents you need. Works with whatever platforms you have — no additional per-platform fees.
No. The deployment fee is scoped to the number of agents and their complexity, so the scoping call starts from the agents you need. If one workflow is the whole problem, a packaged Pegasus agent piloted on that workflow is the faster start.
Workday's Sana agents work inside Workday. Moveworks supports Workday plus a few other platforms. Pegasus suites work across whatever you have — 60+ HRIS platforms, 40+ ATS platforms, 30+ accounting platforms, 30+ CRM platforms — powered by Merge. When your problem spans your entire platform ecosystem, the suite connects the intelligence across all of it.
Related agents
The other agents in the HRIS suite, and the packaged agents the same team uses.
Additional resources
The HRIS suite
Deep AI agents that handle security diagnostics, access governance, compliance evidence, and onboarding orchestration — across whatever HRIS you run.
200+ platforms through Merge
HRIS, ATS, accounting, CRM, ticketing and file storage, connected during onboarding with no custom integration build.
CIP, the control plane under every agent
Open-source governance: every action audited, every deployment versioned, every decision explainable. MIT-licensed.
Next step
Start running your people operations on Pegasus.
Book a scoping call and we'll map your HRIS platforms, the agents you need, and the timeline.