AccessProof connects GitHub and Microsoft Entra, builds a review campaign your team actually completes, and hands your auditor a tamper-evident evidence pack. No spreadsheets.
Every cycle, AccessProof snapshots who has access, routes each item to an owner, and locks in the evidence — automatically.
Org members, outside collaborators, admins, 2FA status and last activity from GitHub. Users, guests, expiring app secrets and privileged roles from Entra.
Each reviewer gets a magic-link email. They hit Keep, Revoke, or Reassign with a reason — no new password, no training needed.
Closing a cycle produces a print-ready evidence pack, a CSV for your GRC tool, and a SHA-256 hash chain linking every past cycle — so nothing can be edited after the fact.
Install the GitHub App (read-only) and grant the Entra app admin consent. Takes about 5 minutes, or explore first in demo mode.
Pick the people who should attest to each system — a team lead, IT admin, whoever actually knows who should still have access.
Everyone gets a magic link by email. Keep, Revoke, or Reassign — with a reason logged for every decision.
One click closes the cycle, builds the evidence pack, and extends your hash-chained attestation history by one more month.
Annual billing gets you 2 months free. Every plan includes unlimited reviewers.
Try the full flow on one org.
14-day free trial, no card required to start.
For larger orgs that need auto-revoke and SSO.
Annual plans: 2 months free. Not sure yet? Every paid plan has a 30-day no-questions refund — one click in billing.