Sift Account Defense is a Sift service for preventing account takeover and account abuse. For every login and session the system assesses risk in real time using device information, behavioural patterns, unusual account changes and network signals. Teams can block a session, require step-up verification by email or SMS, route it for review or keep monitoring, without locking the whole account. Sift complements existing identity and authentication tools, with low-code integrations for common CIAM platforms or events sent through its API. The service is SaaS.
Sift Science, Inc. is headquartered in San Francisco and falls under US jurisdiction, including the CLOUD Act. According to Sift's privacy notice, its servers are located in the United States; it names no EU hosting option. Sift has stated in its own blog that it will execute a data protection addendum, and its privacy notice names it as controller for residents of the EEA, UK and Switzerland. For European organisations this means end-user login data, device data and risk signals are transferred to the US; check the current transfer basis beforehand.