About Us
We run the autonomous software governance infrastructure for the world's most resilient enterprises.
Mima was founded in Stockholm to eliminate the operational overhead of software asset management, compliance, and SaaS governance. We run autonomous compliance infrastructure that acts as a secure, invisible rail for the enterprise.
Our team of systems engineers, SAM specialists, and security researchers builds tools designed to withstand aggressive vendor audits, secure shadow AI vectors, and trigger automated, policy-gated reclamation workflows for underutilized resources.
Oracle, IBM, SAP, and Broadcom send audit notices with a 30-day response window. Most organisations spend that window assembling a position that should have existed continuously. We run the overnight pipeline so the brief is ready at 06:45 — before the letter, not after it.
What we believe
SAM, AI governance, and compliance are one problem.
A departing employee with an unreclaimed licence and an active AI session is a SAM violation, an AI governance breach, and a GDPR exposure simultaneously. Tools that see only one domain miss the full exposure.
The audit is won before the letter arrives.
Oracle LMS, IBM ILMT, SAP LAW — every methodology runs against the estate overnight. When the notice comes, the defensible position already exists.
The machine should run. Humans should decide.
Autonomous pipelines handle the overnight sweep. Every reclamation, every finding, every workflow that touches a human is presented as a decision — with evidence — not an action taken without consent.
Correctness before features.
We build in Rust, compile policy engines to WASM, and pin every agent transport to mTLS. An audit tool that produces wrong answers under adversarial conditions is worse than no tool at all.
The team
We are systems engineers, SAM specialists, and security researchers based in Stockholm. We built the product for the SAM manager who has 30 days to produce a defensible position — not for the vendor who sends the letter.
If you want to work on Rust licensing engines, policy sandboxes, or estate topologies — see open roles.