For SOC 2, ISO 27001 and PCI DSS audits
User access reviews without the spreadsheet chase.
Acciew collects who has access, gets each manager’s yes or no, and builds the evidence pack your auditor asks for.
Read-only. Works with Keycloak, GitHub and AWS.
Every quarter
Every quarter, the same weeks of chasing.
Exports from every system, a spreadsheet per manager, screenshots of replies, and still an auditor asking about a missing account.
With Acciew
Spend the time on decisions, not lists.
Acciew gets the full list, sends each manager their part, and shows you who has answered.
Who we are
We’ve been through the audit too.
The team behind Skycloak runs Keycloak for other companies, and we built Acciew around what auditors actually ask for.
How it works
Three steps to a finished review.
- 1
Connect
Your engineer gives Acciew read-only access. Nothing changes.
KeycloakCorp loginRead-onlyRead 1 Sep 2026, 08:02231 accessesGitHubnorthwindRead-onlyRead 1 Sep 2026, 08:04169 accessesAWS IAMProductionRead-onlyRead 1 Sep 2026, 08:05112 accessesSample data. - 2
Decide
Each manager gets an email link: approve, reject or change.
Your review · 3 of 12Sam · repository accessApprovedDoes Dana still need billing admin?Through the Finance Ops groupApproveRejectChangeMoved to Support in August.SavedAlex · support toolsWaitingSample data. - 3
Hand over
Download one pack: the full list, every decision, the report.
PersonSystemAccessDecisionacciew · Evidence packPDFQ3 2026 user access reviewFinalized and confirmed · every access decidedSample data.
- Read-only
- Your admins make every change
- Hosted, or on your own servers
One job
Just the access review. Nothing bigger.
Acciew does one job, start to finish: the periodic access review, with no identity suite to roll out.
For your auditor
Evidence your auditor can check.
The usual auditor requests in a user access review, and where each one sits in your pack.
Every pack has a code on its first page. Your auditor types it on Acciew’s check page to see what Acciew recorded, and can check the PDF there without uploading it.
Which requests apply is for you and your auditor to decide.
Free template
Not ready yet? Start with our template.
A free user access review spreadsheet with the columns auditors look for, and no form to fill in.
Questions
The questions we get asked.
Will Acciew change anything in our systems?
No. It only reads; your admins make every change.
Will our managers actually do it?
Each manager gets an email link to their own short list, with no new account to make. You see who has answered and can send a link again. Automatic reminders are coming soon.
What does our auditor get?
One pack: a spreadsheet of every access and decision, a PDF and Word report, and the full record. Every pack has a code on its first page. Your auditor types it on Acciew’s check page to see what Acciew recorded, and can check the PDF there without uploading it.
Is this a big identity governance suite?
No. It is not an identity governance suite. It does one job: the periodic access review.
Which systems does it work with?
Keycloak, GitHub and AWS today. Microsoft Entra ID is coming soon.
Will our security team approve it?
It only reads, the code that touches your systems is open source, and login details can stay inside your network.
Can we host it ourselves?
Yes, on request.
How does early access work?
A small group of design partners gets early access, hands-on setup help, and a say in what we build next.
Access review coming up? Run it with us.
Design partners get the product early, help setting up their first review, and a say in what we build next.
For your engineer
Read-only access, with the exact permissions for each system. Open-source code for everything that touches your systems. Login details can stay inside your network, or host all of Acciew yourself.