The problem
In Jira Cloud, who can actually access a project is the combination of project roles, group memberships, permission schemes, and admin roles — there is no single native report that shows the full picture, or how it changed since your last review. And the native audit log retains only 180 days, so the evidence auditors ask for has often already aged out.
How it works
1 · Snapshot
Capture a point-in-time picture of who can access your Jira projects, groups, and roles — automatically each week, or on demand.
2 · Diff
Every review compares the latest snapshot to the previous one and lists each grant added or removed. Stable IDs mean a rename is never mistaken for a change.
3 · Sign-off
Reviewers attest to each cycle in one click. Every decision is recorded with the reviewer and a timestamp — turning a manual chore into accountable certification.
4 · Export
Export each review and change as CSV or PDF for your evidence repository — generated in your browser, with no data leaving Atlassian.
Built for access reviews under SOC 2 and ISO 27001
Access Review & Audit Trail helps you produce the evidence auditors ask for. It supports access-review controls such as SOC 2 CC6.1 (logical access), CC6.2 (provisioning / registration), and CC6.3 (modification / removal), as well as ISO 27001 access-control reviews — with timestamped reviewer sign-off and audit-ready CSV/PDF export. You keep an append-only history that outlasts Jira's native 180-day audit log.
Runs on Atlassian
Built on Atlassian Forge: the app runs entirely on Atlassian infrastructure, requests read-only scopes, and performs no data egress — your permission data never leaves your Atlassian cloud. See the full Privacy Policy.
Pricing
Teams of up to 10 users pay nothing. If that is your team, you can run access reviews indefinitely without a subscription.
Above that, pricing is per user and decreases as the team grows — from USD 2.72 per user / month for 11–100 users, to USD 1.92 at 251–1,000 users and USD 0.74 at the largest tiers. Every paid plan starts with a 30-day free trial, and billing is handled by the Atlassian Marketplace — there is no separate contract or vendor onboarding.
See the full pricing table on the Atlassian Marketplace (Pricing tab)
Prove who has access — and exactly how it changed
Snapshot access, diff what changed, capture reviewer sign-off, and export audit-ready evidence with history beyond 180 days.