Two steps: remove identifying data in your browser, then analyse and download the dashboard.
Step 1 — remove identifying data (runs entirely in your browser)
How this protects you
Your file never leaves this device in Step 1. It is read locally and processed in your browser's memory.
Names and emails are replaced with one-way tokens (HMAC-SHA-256, computed here). Product-licence names are kept as-is; every other column is dropped.
A few non-identifying flags are derived here (blocked yes/no, name labels like admin/service) so the analysis can spot unused or mis-assigned licenses — these are categories, not names.
The key and the token→name map stay with you. They download to your machine, never to us, so only you can turn tokens back into people.
Only tokens + licence names are ever uploaded in Step 2 — no data that can identify a person.
Don't take our word for it. Disconnect your internet, then tokenise and download below — this step
still works, because it makes no network requests (watch the browser's Network tab: it stays empty here).
A standalone, provably egress-free version also lives at /pseudonymise.
Detection & labels for your organisation (optional — sensible defaults applied)
Give each pattern a label that means something to you — it becomes the reason ("why")
shown against each account in your report. Detection runs here, locally. Markers match anywhere in the
account name, case-insensitive.
Label (the "why")Markers (comma-separated)
Blocked / disabled accounts are always detected from the report's "Block credential" column.
Everything flagged here is returned for your review with its label — only genuine license
overlaps are ever proposed as a reclaim.
Drop your Microsoft 365 user export (CSV) or click to choose
0
Users tokenised
0
Guests preserved
0
PII columns dropped
Account-quality signals detected
(carried as non-identifying flags)
Keep tokenised_map.csv and tokenised_key.b64 safe on your side — they are the
only way to turn tokens back into names, and to get matching tokens next month. We never receive them.