Prove your access reviews.
No Entra P2. No $10k Vanta contract.
AccessKit runs your SOC 2 and ISO user access reviews and joiner-leaver evidence starting from a simple CSV import, with an optional read-only Entra connection for users, groups and role holders if you would rather not export by hand. No agent to install either way. Export a printable audit record when you are done.
Start your first review free See sample evidence
Free for one active campaign. No card required.
Import a CSV
Export who has access from any system into a CSV. Person, email, app, role, manager.
Review each row
Mark Keep, Revoke, or Flag with a note. Progress tracks as you go.
Export the evidence
A printable audit record of every decision, who decided, and when. Plus a CSV.
Access recertification
Run a review campaign per quarter or per system. Every Keep, Revoke, and Flag is timestamped and attributed for the auditor.
Joiner and leaver
Templated onboarding and offboarding checklists with sensible IT defaults. Check off each task and get a dated completion record.
No trust barrier
CSV import works day one, no cloud connection required. Want it automated instead? Connect Entra read-only for users, groups and role holders when you are ready, not before.
Pro
$49/mo
7-day trial, then $49/mo.
- Unlimited active campaigns
- Unlimited history
- Every future feature
Frequently asked questions
Will my auditor accept AccessKit evidence?
AccessKit produces what auditors ask for in an access review: who has access to what, who reviewed it, what was decided, and when. There is a sample evidence record linked on this page you can show your auditor before you commit to anything.
Does AccessKit connect to Entra, Okta, or my apps?
You do not have to. Export or build a CSV of people, systems, and roles and import it, and there is no admin consent or security review to pass. AccessKit can also connect to Entra read-only for users, groups and role holders if you would rather pull that automatically; Okta and other apps are CSV-only today.
What frameworks does it help with?
User access reviews and onboarding/offboarding evidence are core controls in SOC 2 and ISO 27001. AccessKit runs the review and produces the evidence; it does not claim to make you compliant by itself.
What are the joiner-leaver checklists?
Reusable onboarding and offboarding checklists with a printable completion record per person, so leavers actually lose access and you can prove it.
What does the free plan include?
One active review campaign plus the checklists. Pro lifts the campaign limit.
Wondering how AccessKit stacks up? Read AccessKit vs full compliance platforms like Vanta and Drata.