Digital Turbine is the leading independent mobile growth platform that levels up the landscape for advertisers, publishers, carriers and OEMs.
Digital Turbine, the world’s leading independent growth and monetization platform, is reshaping the mobile advertising ecosystem by creating a unified and neutral marketplace for advertisers, publishers, operators, and OEMs. With operations spanning four continents and more than 80,000 direct SDK integrations, the company supports a massive global footprint that demands strong governance and secure access controls.
Despite their scale, Digital Turbine was performing User Access Reviews (UAR) through manual processes. Depending on the application, evidence was generated as spreadsheets or screenshots and reviews were conducted quarterly or annually. The security team manually orchestrated every step of the UAR process, including assigning UAR tasks, generating user access list evidence, sending evidence to preparers and reviewers, validating generated evidence and reviewer approvals, and finalizing certifications.
This manual workflow created several challenges:
The process had become inconsistent, inefficient, and ineffective, placing a substantial operational burden not only on the Security and Compliance team but also on wider corporate functions such as IT, DevOps, and business teams.
Digital Turbine needed a modern solution; one that could deliver accuracy, reduce risk, streamline reviewer workload, and eliminate the inefficiencies of manual access reviews. They wanted to ensure terminated access was fully removed, risky permissions were detected early, and UARs could be completed on time without sacrificing quality or compliance.
Digital Turbine selected BalkanID to modernize and automate their User Access Review (UAR) program across critical systems including GCP, Okta, GitLab, Salesforce, Oracle ERP, databases, and several in-house custom applications. What once required days or weeks of manual effort—collecting spreadsheets, validating user lists, coordinating follow-ups, and assembling audit-ready evidence—was replaced by a unified, automated, and scalable workflow built for enterprise governance.
One of the biggest advantages for Digital Turbine was BalkanID’s ability to centralize user access information of every application at one place, regardless of whether the system supported APIs or not. BalkanID built custom extractors and S3 playbooks to pull CSV files from in-house systems, normalize the data, and bring them into the UAR engine with no engineering overhead. This allowed Digital Turbine to achieve complete review coverage across both SaaS and disconnected applications—including tools that historically could only be reviewed manually.
BalkanID also delivered an Excel-like data grid reviewer experience, allowing teams to sort, filter, and analyze access reviews in a familiar grid view. This significantly reduced reviewer friction and improved decision-making accuracy. With powerful bulk actions, reviewers could quickly approve or revoke access at scale, saving hours during each campaign.
To enhance review quality and reduce rubber-stamping, BalkanID introduced Access Change Status—an automated computation that compares current entitlements to previous campaign data and categorizes each item as unchanged, new, or removed. Reviewers immediately understood where their attention was required and prioritized their decisions using clear, contextual insights.
Digital Turbine further benefited from BalkanID’s identity insights, which highlighted privileged users, delegated admins, risky entitlements, and orphaned accounts. This gave reviewers the data they needed to make informed, risk-aware decisions instead of relying only on manual judgment.
According to the Digital Turbine team:
“BalkanID enabled us to automate our user access reviews program and manage all our identities as part of our continuous compliance initiatives. What once took days or weeks of manual effort is now efficient and automated. The audit-ready reports have significantly accelerated our compliance assessments and reduced post-campaign work.”
Today, Digital Turbine relies on BalkanID as a core part of their continuous compliance monitoring strategy. With a single platform to manage all identities and access reviews, Digital Turbine is able to:
By leveraging BalkanID, Digital Turbine transformed a complex, multi-touchpoint manual process into a modern, automated, and high-efficiency access governance program—saving significant time, reducing risk, and strengthening compliance across their global environment
“BalkanID has delivered clear, measurable value for us. It transformed our user access reviews from a periodic, resource-heavy exercise into a continuous compliance capability, replacing manual effort with reliable, repeatable controls that scale with our business. What used to take days or weeks of spreadsheet wrangling, screenshots, and follow-ups is now an automated workflow that consistently produces high-quality outcomes across applications and business units.”
BalkanID is now a core component of our identity governance strategy, providing the control, visibility, and assurance we need to support global growth without adding compliance risk or headcount.