Keyring — Access Review & Recertification

Keyring turns "who can access what in Jira?" into evidence. It resolves effective access for each Jira project — expanding project roles and group memberships into a per-user, per-permission report you can filter and export. From there, run recurring certification campaigns: reviewers attest keep, revoke, or exception on each grant, with completeness sign-off, an exceptions register, and a coverage-and-limitations statement. Every closed campaign produces a tamper-evident audit evidence pack (hash-chained and checksum-verified) suited to SOC 2 CC6.3 and ISO 27001 A.5.18 access reviews. Its differentiator is remediation re-scan verification: a later snapshot proves revoked access is actually gone. Keyring runs entirely on Atlassian Forge — read-only, with zero external egress, so your access data never leaves Atlassian. Confluence support is coming in a later release.