Lutril vs Torii
Torii is a SaaS and AI management platform, a Gartner Magic Quadrant Leader, that added access governance, temporary access and Slack and Teams agents through 2026. Lutril is access governance for employees and AI agents, hosted in the EU, with an MCP proxy and prompt DLP. Where each fits.
Short answer
Choose Torii if SaaS management is the anchor, with spend, renewals and licence data alongside discovery, and you want the access governance features it shipped in 2026: temporary access, request agents in Slack and Teams, review remediation. Choose Lutril if the anchor is access governance for employees and AI agents: policy-driven requests in Slack, Teams and the app UI, reviews that execute, HRIS-driven lifecycle, and an MCP proxy that enforces policy on every agent tool call with prompt DLP, in the EU and in French. Torii documents that EU customers use its US instance and recommends pairing with a separate runtime DLP layer.
Where each one starts
Torii
Take control of every app, licence and AI tool: a SaaS and AI management platform with three product lines (SaaS management, identity governance, AI management), a Leader in Gartner's Magic Quadrant for SaaS Management Platforms for the third year in 2026. New York and Israel, founded 2017, $65M raised with a Series B led by Tiger Global in 2022.
Lutril
Access governance for employees and AI agents: discovery from Google Workspace and Microsoft 365, a Chrome extension and code scanning; requests in Slack, Teams and the app UI with automatic expiry; reviews that revoke; HRIS-driven lifecycle; and an MCP proxy with prompt DLP and a global kill switch. Hosted in France, in French and English.
Capability by capability
| Capability | Torii | Lutril |
|---|---|---|
| SaaS discovery from IdP sign-in and OAuth grants (Google Workspace, Microsoft 365) | YesGoogle Workspace and Microsoft 365 integrations pull users, usage and third-party appsSource 3 | YesGoogle Workspace and Microsoft 365 sign-in signals and OAuth grants, from the day you connect |
| Browser extension for shadow IT and shadow AI discovery | YesExtension detects logins to business applicationsSource 4 | YesChrome extension for the SaaS and AI tools that skip SSO |
| Access reviews whose keep-or-remove decisions execute the revocation | YesSince August 2026: reviewers trigger an action and Torii resyncs the appSource 5 | YesDecisions execute in the connected tool; proof in the campaign export |
| Access requests and approvals in Slack | YesSlack agent for catalogue requests; approve or deny in SlackSource 6 | YesRequests, approvals and expiry warnings in Slack |
| Access requests and approvals in Microsoft Teams | YesTeams agent for requests; approvals inline in TeamsSource 7 | YesSame flow in Microsoft Teams, and in the app UI |
| Just-in-time, time-boxed access that expires on its own | YesTemporary access with deprovisioning workflows and admin-set durationsSource 8 | YesOne hour to seven days; an approver can shorten, never extend; auto-revoked |
| Onboarding triggered by the HRIS | YesWorkday, BambooHR, HiBob, Rippling, Personio, SuccessFactors and moreSource 9 | YesLucca, PayFit and Eurécia native; other HRIS through the MCP endpoint |
| Offboarding that deprovisions across SaaS, including apps outside SSO | YesRevokes every app, including the ones the IdP never sawSource 10 | YesNative connectors plus a universal MCP endpoint for any tool with an API |
| Shadow AI discovery: AI tools and agents in use | PartialAI tools discovered with sign-up alerts; AI agent discovery not documentedSource 11 | YesSign-in logs, mailbox scanning, Chrome extension and code scanning |
| AI agent registry with an accountable owner | PartialService accounts, bots and API keys get a human owner; AI agents not namedSource 12 | YesOwner, model and scopes on every agent; offboarded like an employee |
| MCP proxy or gateway enforcing policy on agent tool calls | Not offeredTorii's MCP server exposes Torii data to assistants; no enforcement on agent tool callsSource 13 | YesLutril MCP proxy: policy on every call, WORM log, global kill switch |
| Prompt-level DLP and redaction for LLM traffic | Not offeredTorii recommends pairing with a runtime DLP layerSource 14 | YesDetect and redact PII and secrets in prompts, per-model policy |
| EU hosting and a French-language product | Not offeredEU customers use the US instance; French UI not documentedSource 15 | YesOVHcloud, France; product and documentation in French |
| Compliance evidence exports for SOC 2 and ISO 27001 | PartialFull decision trail export; no SOC 2 or ISO formatted package documentedSource 16 | YesCampaign export with decisions and revocation proof, one link |
| Native integrations | PartialHundreds of pre-built integrations; no figure publishedSource 1 | YesMore than 55 native connectors plus the universal MCP endpoint |
| Published pricing | Not offeredPricing page without figures; access governance requires the Identity moduleSource 2 | Not offeredOn request |
Choose Torii if
- Licences, renewals and spend are the first problem and access is the second.
- You want a Gartner Leader for SaaS management with discovery from finance systems as well as the IdP.
- US hosting is acceptable and you can pair a separate DLP product for AI traffic.
Choose Lutril if
- Access governance is the job, and AI agents are already part of it: you need a proxy on each MCP tool call, prompt DLP and a kill switch in one product.
- Your data has to stay in the EU, or your team works in French.
- You want one product rather than separate SaaS management, identity and AI management modules.
- Audit evidence should come out as one link with decisions and revocation proof, mapped to SOC 2 and ISO 27001.
Questions buyers ask
Does Torii do access governance now?
Yes. Torii's product updates show access governance going generally available in June 2026, temporary access in July, Slack and Teams request agents in June and July, and automated review remediation in August. It requires the Torii Identity module. Lutril has been access governance from the start, with AI agents governed the same way as employees.
Does Torii govern AI agents through MCP?
Torii offers an MCP server that lets assistants query Torii data, and its own articles state it has no on-premise runtime control and recommend pairing it with a runtime DLP layer. Lutril's MCP proxy sits in front of your SaaS tools, enforces policy on each agent call, redacts sensitive data in prompts and can pause any agent instantly.
Where does Torii store data for European customers?
Torii's GDPR documentation states that EU citizens may use its US instance, and its sub-processor list is US-based, with standard contractual clauses for transfers. Lutril is hosted at OVHcloud in France.
Which one is better for shadow IT discovery?
Both discover from the identity provider and a browser extension. Torii adds finance-system discovery for spend. Lutril adds mailbox scanning for sign-up receipts and code scanning for agents in GitHub and GitLab, then puts every discovered app or agent under access governance with an owner and a decision.
Sources
- 1Torii homepageread on September 2, 2026
- 2Torii pricingread on September 2, 2026
- 3Torii, Google Workspace integrationread on September 2, 2026
- 4Torii, browser extensionread on September 2, 2026
- 5Torii product updates, access reviews automated remediationread on September 2, 2026
- 6Torii product updates, Slack agent for app catalogread on September 2, 2026
- 7Torii product updates, Teams agent for app catalogread on September 2, 2026
- 8Torii product updates, temporary access managementread on September 2, 2026
- 9Torii, department-based onboarding workflowread on September 2, 2026
- 10Torii, real-time offboarding workflowread on September 2, 2026
- 11Torii, AI management platformread on September 2, 2026
- 12Torii, non-human identitiesread on September 2, 2026
- 13Torii, introducing Model Context Protocol in Toriiread on September 2, 2026
- 14Torii, six tools for AI governance and policy enforcementread on September 2, 2026
- 15Torii, GDPRread on September 2, 2026
- 16Torii, identity governance platformread on September 2, 2026
- 17Torii, Gartner Magic Quadrant for SaaS Management Platformsread on September 2, 2026
- 18Torii, Series B led by Tiger Globalread on September 2, 2026
Lutril wrote this page. Facts about Torii come from their public documentation as of September 2, 2026; states marked "Not documented" mean we found nothing public that confirms or denies the capability. Spotted an error? Write to hello@lutril.com and we will correct it.