OVERALL RATINGS
SUPPORT
- Partner Supported
TRUST SIGNALS
Key highlights of the appRun SOC 2 & ISO 27001 user access reviews in Jira: reviewer context, AI pre-sort, and an auditor-ready certified report
Reviewers get context, not a rubber stamp
Each reviewer sees groups, roles, last-active status, and an AI-generated safe/needs-review tag with a one-line reason for every person on their team, so keep, revoke, and escalate decisions are informed, not automatic.
The click produces an auditor-ready report
Certia builds a certified access review report mapped to SOC 2 CC6.1-CC6.3, drawn from an append-only audit log with a verifiable integrity fingerprint, so nothing depends on spreadsheets or email threads.
Every decision is reasoned and recorded
Keep, revoke, or escalate: each decision needs a written reason before it saves, and later changes are logged, not overwritten. The certified report shows real judgment, not a column of rubber stamps.
More details
Certia is built for SOC 2 (CC6.1-CC6.3) and ISO 27001 access-control reviews, not license optimization. It produces evidence that a review was performed; it does not by itself make an organization compliant.
Runs entirely on Atlassian: Certia has no servers of its own and makes no calls outside Atlassian’s cloud. AI pre-sorting uses Atlassian-hosted AI (Forge LLMs), and it only sees group names, role names, days since last active, and risk flags, never a person’s name, email, or account ID. Certia does not use your data to train AI models. The AI tag is advisory; every keep, revoke, or escalate decision is made and recorded by a person, and Certia never changes anyone’s access itself.
Built and supported directly by its founder, so support requests get a real, fast response.
Language support: English (UI and generated reports).
Every plan includes a 30-day free trial, and teams of 10 users or fewer can use Certia free.
Resources
App documentation
Comprehensive set of documentation from the partner on how this app works
Privacy and Security
Privacy policy
Atlassian's privacy policy is not applicable to the use of this app. Please refer to the privacy policy provided by this app's partner.
Partner privacy policySecurity program
This app is not part of the Marketplace Bug Bounty program.
Integration permissions
Certia — User Access Reviews for Jira (SOC 2 & ISO 27001) integrates with your Atlassian app
Version information
Version 3.0.0•for Jira Cloud
- Release date
- Oct 7th 2026
- Summary
- Now runs entirely on Atlassian: AI pre-sorting uses Atlassian-hosted AI
- Details
Certia now runs entirely on Atlassian. AI pre-sorting moved to Atlassian-hosted AI (Forge LLMs), so no data leaves Atlassian’s cloud and Certia no longer uses any third-party AI service. This update needs admin approval because it changes the app’s permissions.
Fixed: campaign due dates no longer display one day early for teams behind UTC.
Fixed: “Reclassify unknown” on the report now also tags review items created before AI tagging existed.
- Payment model
- Paid via Atlassian
- License type
- Commercial