Corma

Corma is a platform from Corma SAS in Paris that combines SaaS management with identity and access management. IT teams get an overview of all applications in use, including shadow IT and unapproved AI tools. Access can be granted and revoked automatically when employees join, move or leave, including through role-based rules. Access reviews are automated and documented with an audit trail, for example for ISO 27001 or SOC 2. Corma also manages licenses, contracts and software spend.

According to its security page, Corma's web servers and databases run in data centers inside the European Union. The hosting provider named is Amazon Web Services (AWS), a company based in the United States. According to the provider, stored data is encrypted in transit and at rest, including backups and replicas. Corma itself is certified to ISO/IEC 27001:2022. The data location is therefore European, while the infrastructure operator is a US corporation.

Yes, Corma offers a free Freemium plan that includes an identity provider connection, a browser extension and an SSO connection. It is a free plan, not a time-limited trial. According to the pricing page, the Essential plan starts at EUR 3 per user and month with an annual commitment. The Pro and Enterprise plans are priced individually after a demo call. Organizations with fewer than 50 users are offered a discount of up to 50 percent.