Corma versus Trelica (1Password)
Looking for an alternative to Trelica (1Password)? Trelica is now part of 1Password and sold as SaaS Manager, a discovery and workflow tool inside 1Password's security suite. Corma starts with identity, so every app, license and euro is tied to a person and their access, whichever password manager you use.
Identity-first SaaS management. Access, compliance, and spend through governance.
Discovery and workflow-first SaaS management, now part of 1Password's Extended Access Management.
.avif)
.avif)
Trelica is a SaaS management platform built in Cambridge, UK, and part of 1Password since January 2025, which now sells it as 1Password SaaS Manager. It discovers apps through identity providers, finance systems and a browser extension, automates onboarding, offboarding and access requests across more than 350 integrations, and runs access reviews within 1Password's Extended Access Management suite.
Mid-market and large enterprises
2018 in Cambridge, UK, as Trelica; part of 1Password since January 2025
Comparing Corma and Trelica (1Password)? Both discover the apps your teams use, automate who gets access and cut the licenses nobody needs. This comparison covers SaaS discovery, lifecycle automation, access requests, access reviews, license optimization, hosting and total cost.
Trelica was founded in Cambridge in 2018 as a SaaS management platform built around discovery and workflow automation. 1Password bought it in January 2025 and now sells it as 1Password SaaS Manager within its Extended Access Management suite. Today Trelica finds apps through identity providers, finance systems and a browser extension, connects to more than 350 apps directly, runs onboarding and offboarding workflows, offers an app catalog with approval chains and, since August 2025, access reviews. Customers choose EU or US hosting at sign-up, and 1Password reports a Leader placement in Gartner's 2026 Magic Quadrant for SaaS Management Platforms.
Corma is identity-first and independent of your password manager. It connects to the identity provider and HR system you already run, ties every application, license and euro to a person and their access, and keeps provisioning, requests, reviews and license control in one product. It is built in Europe, hosted in the EU, ISO 27001 certified and supported in English, French and German, with a free tier to start without a sales cycle.
The choice often comes down to the rest of your stack. If 1Password already holds your passwords and you want device trust and SaaS management from the same vendor, Trelica fits naturally. If you want access governance as its own discipline, from a European vendor and next to whichever password manager you run, Corma is built for that. Read the full Corma versus Trelica comparison to see which fits your team.
The Comparison
Trelica began as a SaaS management platform for discovery and workflow automation and now ships as 1Password SaaS Manager, one module in a suite that also covers passwords and device trust. Corma starts at identity and access and treats governance as the core product, not an add-on to credentials. Both automate lifecycle, requests and reviews; they differ in where they come from and what they ask you to standardise on.
Identity-first: every app, license and cost is tied to a person and their access.
Discovery and workflow-first SaaS management, sold within 1Password's Extended Access Management suite.
Native provisioning and deprovisioning, driven by your identity provider and HR system.
Onboarding and offboarding workflows across integrated apps, triggered from HR and identity data.
Self-service catalog with approval workflows; approved access is provisioned automatically.
Catalog of approved apps with approval chains and policies; Jira Service Management can front the requests.
Built-in review campaigns with exportable evidence for ISO 27001, SOC 2 and NIS2.
One-off or scheduled reviews since August 2025, aimed at SOC 2, PCI, SOX and ISO audits.
Identity provider, finance data, browser extension and Windows agent — sanctioned and unsanctioned apps.
Identity provider, finance systems and browser extension, backed by more than 350 direct API integrations.
Ungoverned tools surface together with the accounts behind them, so access can be revoked from the same place.
Unmanaged apps surface through discovery and can be combined with 1Password Device Trust for device posture.
Unused licenses surface from access data and can be revoked or canceled in one click.
Usage and spend data per app, with workflows to reclaim unused licenses.
Renewal dates, notice periods and spend forecasts in one view.
Contracts and renewals tracked next to users, licenses and spend in one inventory.
Connected in minutes, productive within days to weeks, no professional services required.
Integrations connect in minutes; G2 reviewers report about two months to full implementation.
Free tier, then per-user plans — you can start without talking to sales.
No public price list; quoted on request, with a free trial available.
Growing IT teams and mid-market organizations, roughly 50 to 5,000 employees.
Mid-market and enterprise; G2 reviewers split evenly between the two.
EU-hosted and ISO 27001 certified, with support in English, French and German.
EU or US hosting, chosen at sign-up; parent company 1Password is based in Toronto.
Identity governance and SaaS management in one product, independent of your password manager.
Password management, device trust and SaaS management from one vendor; a Leader in Gartner's 2026 SaaS management Magic Quadrant.
Which platform fits your team?
Corma is best for
Teams that want a European vendor, EU-hosted and ISO 27001 certified
IT, security and compliance teams that have to prove who has access to what
Companies that want access governance without changing their password manager
Mid-market teams that want to start free, without a sales cycle
Trelica (1Password) is best for
Organisations already standardised on 1Password for passwords and secrets
Teams that want SaaS discovery and device trust from the same vendor
Estates that rely on a broad catalog of direct API integrations
Buyers who weigh analyst recognition such as Gartner's 2026 Leader placement
Setup at a glance
Deployment in days to weeks for SMBs
Identity provider, HR and finance systems connected via OAuth or API key
Connects to your existing identity provider and HR system
Browser extension rolled out to discover unmanaged apps
RBAC policies and approval workflows configured
App catalog, approval policies and provisioning rules configured
Ongoing maintenance mostly automated by the platform
Onboarding and offboarding workflows built per app
User training focused on self-service access requests
Daily data sync, with recurring access reviews scheduled
Why IT teams rely on Corma
Automation
employees onboarded and offboarded automatically
Time spent
spent less with Corma per week for management
Cost Efficiency
saved monthly by optimizing SaaS licenses
Shadow IT
to detect Shadow IT applications
What IT teams say about Corma
“Corma is very useful and user friendly. It helps us save money and prevent potential security threats.”
Chief Operating Officer, Media
“I like how it’s very easy to see all the apps that have been accessed by our employees.”
Chief Engineering Officer, Healthcare and Biotech
“I think Corma is a really great app that has lots to offer and working with them has been great.”
IT & Security Administrator, Software
One security suite, or governance on its own terms?
Trelica, now part of 1Password, brings strong discovery, more than 350 direct integrations and solid workflows, sold alongside 1Password's password manager and Device Trust. Corma puts identity at the centre of the product: every seat tied to a person, unused licenses surfaced from access data and access removed the day someone leaves, from a European vendor that works with whichever password manager you already use. A demo on your own stack shows which approach fits your team.
Book a demoCan Corma help with EU data privacy better than Trelica?
Yes, Corma’s EU-focused controls meet strict compliance; Trelica’s options vary.
How do Corma and Trelica differ on spend control?
Corma reduces license waste directly; Trelica tracks usage and subscriptions.
What makes Corma more secure than Trelica?
Corma focuses on identity and access controls; Trelica emphasizes SaaS operations.
