JML

JML is joiner, mover, and leaver software. Access follows the position, not the person.

When someone changes roles, the access package should change with the position, instead of lingering from the job they left. JML opens a checklist for that change. Each item has an owner and a timestamp. Join, move, leave. The next person starts the file again.

The trail is the point. Person, position, system, grant or revoke, who acted, and when. You can export an evidence pack for an access review or an audit. Applications carry data-class tags, so access to protected health information, personal information, or financial data stays visible as sensitive.

JML sits above the identity provider and the EHR. It does not replace them. Those systems still create and disable the login. JML keeps the roster of who should have what, and opens the file.

The Pilot is free, always. No credit card. You run the checklists by hand. The site is usejml.com.