Carrick Closes $600M Saviynt Continuation Vehicle

Carrick Capital Partners has closed a single-asset continuation vehicle for Saviynt with approximately $600M in capital commitments. Coller Capital led the vehicle, HSBC Asset Management served as co-lead, and Carrick committed $255M of new capital to Saviynt as part of the final close of the identity-security company's Series B financing.

The amounts serve different purposes. Approximately $600M capitalizes the vehicle that holds Carrick's Saviynt investment, while $255M is the new company investment and helped fund a tender offer that gave Saviynt employees a liquidity path. Carrick's existing limited partners could roll their equity into the new vehicle or take liquidity at sponsor-reported multiples of 11x gross and 10x net on the firm's initial investment.

The structure extends Carrick's ownership horizon while Saviynt expands from governing human and traditional machine identities into controlling AI agents that can act across enterprise systems. Saviynt reported more than $300M in annual recurring revenue in July 2026 and launched Zuma, a platform for discovering, authorizing, and governing AI agents and non-human identities.

What Carrick Closed

A continuation vehicle moves an existing portfolio holding into a newly capitalized structure. For the original fund's investors, that can create a decision between receiving liquidity and maintaining exposure. For the sponsor, it can preserve ownership of an asset beyond the original fund's normal holding period while introducing new investors with their own underwriting and return expectations.

In this transaction, Coller Capital led the vehicle and HSBC Asset Management acted as co-lead. Carrick said meaningful participation came from its general partners, making the $255M commitment the largest investment in the firm's history. Robert W. Baird & Co. advised Carrick, while Proskauer Rose advised on the continuation vehicle and Latham & Watkins advised on the new investment.

Carrick's announcement also gives several stakeholder groups a different form of liquidity. Existing LPs received a roll-or-sell choice, Saviynt employees gained access to a tender offer, and Carrick preserved the ability to keep backing a company it had supported before broader institutional capital arrived. The public record does not disclose the split of the $255M between primary capital and employee liquidity, the new vehicle's valuation, or the ownership percentage transferred.

Carrick's Saviynt Investment History

Carrick says it built a relationship with Saviynt's founding team before the company raised institutional capital. The firm led a $35M Series A and remained Saviynt's only institutional investor until the Series B, supporting leadership expansion, go-to-market work, and board development along the way. The sponsor reports that Saviynt's ARR grew from approximately $10M at Carrick's initial investment to more than $300M in 2026.

The company's financing history includes several instruments that should not be treated as identical. Saviynt announced $130M of financing from HPS Investment Partners and PNC Bank in 2021, then closed $205M in growth financing from AB Private Credit Investors in January 2023. In December 2025, KKR led a $700M Series B Growth Equity Financing at an approximately $3B valuation, with Sixth Street Growth, TenEleven, and Carrick participating.

Carrick describes its new $255M investment as part of that Series B's final close. That wording matters because it does not establish a newly named round or support adding $255M on top of the $700M as if both were separate financings. The continuation vehicle, the company investment, and the employee tender are linked parts of one transaction, but each serves a different economic purpose.

What Saviynt Is Building

Saviynt is an El Segundo, California-based identity-security company established around 2010. Founder, CEO, and chairman Sachin K Nayyar leads the company, with Paul Zolfaghari serving as president. Saviynt's Identity Cloud brings identity governance and administration, privileged access management, application access governance, and identity security posture management into one platform.

The company launched Zuma in July 2026 to address AI agents and other non-human identities. Saviynt says Zuma can discover agents, identify owners, map access paths, apply runtime authorization, and govern identity lifecycles alongside human users. The product is organized around Insights for visibility, Access for runtime decisions, and Governance for ownership and lifecycle controls.

Saviynt's operating metrics remain company-reported. The company says ARR has surpassed $300M, 2026 bookings have grown by more than 80%, customer retention is 96%, and its platform secures more than 100M identities. Those figures explain the investor interest, but they do not provide audited results, Zuma-specific revenue, customer concentration, or proof that enterprises have standardized agent security on Saviynt.

Why AI Agents Change Identity Security

Traditional identity programs are built around people, applications, and service accounts whose access can be provisioned, reviewed, and removed through defined processes. AI agents create a harder control problem because they can select tools, invoke APIs, work across systems, and alter their actions based on context. The enterprise buyer must understand both who or what holds permission and whether a particular machine action remains authorized when it occurs.

That problem is appearing outside vendor marketing. In February 2026, the National Institute of Standards and Technology opened work on software-agent identity and authorization, asking how organizations should handle identification, authorization, auditing, non-repudiation, and prompt-injection controls for agents. An August 2026 NIST follow-up argued that agents need unique identities, credentials, and entitlements tied to the people or systems operating them.

The Cloud Security Alliance describes the same gap as a shift from lifecycle governance toward continuous runtime decisions. That independent context does not validate Zuma's implementation, but it does show why enterprises are looking beyond quarterly access reviews and static service-account controls. Identity is becoming an operating layer for software that can act, not only a compliance record for software that can connect.

What the New Capital Changes

Carrick says the new investment will support product development across Saviynt Identity Cloud and Zuma, deeper integrations with hyperscalers and SaaS platforms, and expanded work with global systems integrators. Those priorities fit a product category that depends on sitting across many applications and data systems while producing authorization decisions security teams can explain.

The commercial burden is substantial. Saviynt must turn urgency around AI-agent access into deployed software, integrate without creating another isolated control layer, and maintain the retention reflected in its company-reported metrics. Enterprise identity projects are judged through implementation, policy quality, auditability, and the operating consequences of a wrong permission, not through the elegance of a product launch.

Carrick has used the continuation structure to remain invested while giving other stakeholders a route to liquidity. Saviynt now has more capital and a longer ownership horizon at the moment enterprise identity is being asked to govern actors that make decisions faster than the controls built for them. The next chapter will play out inside those permission paths, where every agent action leaves somebody responsible for the access it used.