RSA Security provides identity and access management products to government, finance and other organisations with high assurance requirements. Its portfolio includes RSA ID Plus, described on the company's website as a complete identity and access management platform for cloud, hybrid and on-premises environments. Other offerings cover passwordless and multi-factor authentication, governance and lifecycle management, and the SecurID line. The website also lists a joint offering with Microsoft.
RSA is a US company: its privacy policy names RSA Security USA LLC and gives a mailing address in Burlington, Massachusetts. The policy states that personal data may be stored in the United States and in other countries, and it refers to EU and UK standard contractual clauses for transfers. RSA describes itself as a data processor for its customers, who act as controllers. Because the provider is US-based, US legal access powers may apply, so European organisations should check where their data is stored and whether on-premises deployment fits their needs.