LicenseDesk

Microsoft 365 License Rationalisation

Two steps: remove identifying data in your browser, then analyse and download the dashboard.

Step 1 — remove identifying data (runs entirely in your browser)

How this protects you

  • Your file never leaves this device in Step 1. It is read locally and processed in your browser's memory.
  • Names and emails are replaced with one-way tokens (HMAC-SHA-256, computed here). Product-licence names are kept as-is; every other column is dropped.
  • A few non-identifying flags are derived here (blocked yes/no, name labels like admin/service) so the analysis can spot unused or mis-assigned licenses — these are categories, not names.
  • The key and the token→name map stay with you. They download to your machine, never to us, so only you can turn tokens back into people.
  • Only tokens + licence names are ever uploaded in Step 2 — no data that can identify a person.
Don't take our word for it. Disconnect your internet, then tokenise and download below — this step still works, because it makes no network requests (watch the browser's Network tab: it stays empty here). A standalone, provably egress-free version also lives at /pseudonymise.
Detection & labels for your organisation (optional — sensible defaults applied)

Give each pattern a label that means something to you — it becomes the reason ("why") shown against each account in your report. Detection runs here, locally. Markers match anywhere in the account name, case-insensitive.

Label (the "why")Markers (comma-separated)

Blocked / disabled accounts are always detected from the report's "Block credential" column. Everything flagged here is returned for your review with its label — only genuine license overlaps are ever proposed as a reclaim.

Drop your Microsoft 365 user export (CSV)
or click to choose

Microsoft 365 admin center → Users → Active users → Export gives you a CSV.