Prove your access reviews.
No Entra P2. No $10k Vanta contract.

AccessKit runs your SOC 2 and ISO user access reviews and joiner-leaver evidence from a simple CSV import. Nothing connects to your tenant, so there is no security review to pass and no agent to install. Export a printable audit record when you are done.

Start your first review free See sample evidence

Free for one active campaign. No card required.

1

Import a CSV

Export who has access from any system into a CSV. Person, email, app, role, manager.

2

Review each row

Mark Keep, Revoke, or Flag with a note. Progress tracks as you go.

3

Export the evidence

A printable audit record of every decision, who decided, and when. Plus a CSV.

Access recertification

Run a review campaign per quarter or per system. Every Keep, Revoke, and Flag is timestamped and attributed for the auditor.

Joiner and leaver

Templated onboarding and offboarding checklists with sensible IT defaults. Check off each task and get a dated completion record.

No trust barrier

CSV import first, no cloud or tenant connection. You never hand us a token, so there is nothing for your security team to block.

Free

$0

  • One active campaign
  • Unlimited checklists
  • Printable + CSV evidence
Start free

Pro

$49/mo

  • Unlimited active campaigns
  • Unlimited history
  • Every future feature
Go Pro

Frequently asked questions

Will my auditor accept AccessKit evidence?

AccessKit produces what auditors ask for in an access review: who has access to what, who reviewed it, what was decided, and when. There is a sample evidence record linked on this page you can show your auditor before you commit to anything.

Does AccessKit connect to Entra, Okta, or my apps?

No. You export or build a CSV of people, systems, and roles and import it. That means no admin consent, no security review, and no new tenant access to explain in your next audit.

What frameworks does it help with?

User access reviews and onboarding/offboarding evidence are core controls in SOC 2 and ISO 27001. AccessKit runs the review and produces the evidence; it does not claim to make you compliant by itself.

What are the joiner-leaver checklists?

Reusable onboarding and offboarding checklists with a printable completion record per person, so leavers actually lose access and you can prove it.

What does the free plan include?

One active review campaign plus the checklists. Pro lifts the campaign limit.

Wondering how AccessKit stacks up? Read AccessKit vs full compliance platforms like Vanta and Drata.