Skip to content

Pass audits without the scavenger hunt.

Verifiable, field-level logs.

The Problem

Passing a compliance audit is traditionally a painful, manual process. IT teams have to dig through logs across dozens of systems, take screenshots of admin panels, and manually compile evidence to prove who had access to what at a specific point in time.

Search Acme Inc.
audit-evidenceM4
Q2 evidenceControl matrixAuditor call
Today
Erin Walsh9:02 AM
Audit is Friday. Can everyone drop their access evidence here?
31
M7 repliesLast reply today at 10:41 AM
M
Marco Hale9:14 AM
Entra admin panel, screenshotted
entra-admin.png
Hana Cole9:31 AM
License export, hope it’s the right quarter
licenses-q3.xlsx
Spreadsheet · 88 KB
9:33
ignore the last two tabs
S
Sam Cole11:47 AM
Google access dump, bit out of date
access-export.csv
CSV · 1.2 MB
2
Message #audit-evidence
Aa

Our Solution

Klef records every permission, role, license, and field update it makes across all of your systems. It captures a before and after view, who made the change, its timestamp, and more. When an auditor asks why a user is permitted to access a certain system, Klef can explain why.

This evidence can help organizations meet common identity and access management requirements, such as:

Federal control AC-2(4) requires systems to audit account creation, modification, enabling, disabling and removal automatically — and to notify the roles accountable for them.
NIST SP 800-53 Rev. 5, control AC-2(4)
Export
Comma-separated.csv
JSON records.json
PDF report.pdf
Search Acme Inc.
soc2-auditM4
Q2 evidenceControl matrixAuditor call
Erin Walsh11:58 AM
Can someone post the Q2 access changes for the auditor?
M
Marco Halejust now
Q2 access changes, fully attributed, straight from Klef
access-changes-q2.csv
CSV · 312 records
Drop to uploadShare this file in #soc2-audit
Message #soc2-audit
Aa
access-changes-q2.csv

Auditable Execution with Plans

Every policy run produces a plan of all identity and access changes that will be applied downstream. These plans can be reviewed manually or automatically committed depending on your configuration.

Sync plan
Applied
41 added1,198 updated45 removed
Erin WalshAdded
MiMicrosoft Entra ID
mailerin.walsh@acme.co
departmentMarketing
GoGoogle Workspace
orgUnit/Marketing
Hana ColeUpdated
MiMicrosoft Entra ID
departmentSalesMarketing
MiMicrosoft 365
licenseE3E5
AWAWS
Nia BennettRemoved
MiMicrosoft Entra ID
MiMicrosoft 365