Access review field guide
A practical scope, cadence and evidence checklist for recurring user access reviews.
Resources
Useful guidance for the review work nobody taught you.
Short, practical material for finding license waste, designing a defensible access review and preparing evidence before an auditor asks.
Inactive-seat business case
Turn activity and SKU cost into a renewal-ready savings estimate finance can understand.
SOC 2 evidence checklist
The people, timestamps, decisions and exception records auditors expect to see.
Read-only integration review
Questions to ask when granting a SaaS access-review platform access to your tenant.
Delta review playbook
Reduce reviewer fatigue by defining which access and activity changes are material.
License-reclamation policy
A starting policy for inactivity thresholds, exceptions, communication and approvals.
Quick answers
Common questions before the first scan.
Does Fallow change access?
No. The MVP requests read-only scopes and produces recommendations, review decisions and evidence. Your administrators make changes in source systems.
Where is raw scan data stored?
Raw responses are envelope-encrypted in regional Azure Blob Storage. They never enter Postgres and expire after the plan retention period.
Can I start without a sales call?
Yes. Free, Starter, Growth and Business have public monthly pricing and self-serve onboarding.
What makes a review audit-ready?
Clear scope, assigned reviewers, per-user decisions, exceptions, timestamps, immutable completion state and verifiable evidence.
Find the fallow seats
Turn the checklist into a repeatable review.
Join the private preview to evaluate the Microsoft-first workflow as production controls become available.