Last updated
Centralise SaaS access, automate reviews and user provisioning, detect shadow IT, and recover unused licences from one platform.
French platform for SaaS access governance, automated lifecycle management, and licence optimisation.
Corma brings SaaS access governance and licence management into one platform for IT teams. It reveals approved and shadow applications, maps users to software, and identifies unused seats so teams can reduce risk and spend without maintaining separate identity and asset inventories.
Corma connects with identity providers, HR systems, IT service tools, finance platforms, and SaaS applications. Its automated joiner, mover, and leaver workflows provision or remove access, while access reviews, approval flows, and audit-ready exports help teams enforce policy across the application lifecycle.
Key benefits:
- Application discovery Map sanctioned and shadow SaaS across the organisation
- Automated access reviews Collect approvals and retain evidence for audits
- Lifecycle provisioning Grant, change, and remove access through policy-based workflows
- Licence optimisation Find inactive seats, duplicate tools, and renewal savings
- Self-service access Route employee requests through controlled approval flows
- Broad integrations Connect more than 200 applications across the SaaS stack
Founded in Paris in 2023, Corma is operated by French company CORMA SAS. Its documentation states that all data is hosted in France on AWS infrastructure in the Paris region. The platform processes personal data under GDPR and is certified to ISO/IEC 27001:2022.
Corma was included in Gartner's Magic Quadrant for SaaS Management Platforms in both 2025 and 2026, supporting its position as an active commercial option for mid-market IT teams.
Categories
European alternative to
Tags
Similar European alternatives
Veriff
Verify customer identities instantly with AI-powered document checks, liveness detection, KYC workflows, and fraud prevention. ISO 27001 and eIDAS certified.
Bitdefender
Award-winning antivirus, EDR, and XDR from Romania's global cybersecurity leader, with 100% threat detection scores and 500M+ users protected across 170 countries.
Cookiebot
Automatically scan, categorise, and manage website cookies with a GDPR and CCPA-compliant consent banner. No manual configuration, with continuous re-scanning.
Proton Pass
Securely manage passwords, passkeys, and email aliases. Enjoy autofill, 2FA, secure sharing, and dark web monitoring. Open-source and free forever.
Hanko
Open source authentication solution with passkeys, 2FA, SSO support. GDPR compliant, built in Europe. Switch between self-hosted and cloud anytime.
ESET
Multilayered endpoint security for home and business, built on the NOD32 antivirus engine from Slovakia's cybersecurity pioneer and protecting users in 200+ countries since 1987.