Someone left last month. Is their account, forwarding rule or licence still live?

{{BRAND}} is run by {{FIRST_NAME}} in Dhaka, Bangladesh. The work runs on email and shared files, so the time difference doesn't slow it down: your review comes back within 3 working days of getting the exports. The first month takes up to 5, because we set up the matching.

Files, not logins. No tenant access, no admin consent, no delegated partner access, no passwords or API keys. You run the reports you already know, or the ones in our checklist, and email them or drop them in a shared folder. Read-only exports are enough.

The exports hold staff names, work email addresses, forwarding addresses and licence data. We use them only to run your check. They're kept in our Google Workspace account with 2-step login, seen only by the person working on your account, never shared or sold, and deleted within 7 days if you leave. Please leave out mail content and file names; we don't need them. If you're an MSP, your client's staff data passes through you to us, so we'll sign a data processing agreement as your sub-processor, with the EU standard contractual clauses and the UK Addendum where they apply, and we'll sign your NDA if you have one. We don't sign HIPAA business associate agreements. The exports contain staff accounts, not patient records, but if a client's rules say a contractor can't see even staff lists, leave that client out.

People, with good tools. Software matches names, joins the exports and does the arithmetic. A person checks every flag against the export rows before it reaches you. If we can't point to a row that backs it up, it goes on the "ask first" list, not the fix list.

We send a checklist naming the report for each one: the Entra user list with last sign-in, enterprise app consents, Exchange forwarding and mailbox permissions, and licence assignments. They can come from CIPP, PowerShell or the admin centres, whichever you already use. Last sign-in dates typically need Entra ID P1, which Business Premium includes; on other plans we fall back on mailbox last-logon times, which are less exact. Once you know where the reports are, it typically takes a few minutes per tenant. If you get stuck on one, say so and we'll show you another route.

No. We can only report on what's in the exports you send. Logins that sit outside Microsoft sign-in, such as a separate SaaS account or an API key someone created, won't appear unless you add them to the leavers sheet. Power Platform flows only show up if you send the inventory. A clean review means we found nothing in the files, not that nothing exists. Each report lists what was checked and what wasn't.

Many don't, or send it late. Use your closed offboarding tickets or any list you have, even a pasted email. We also flag accounts that nobody has signed in to for 60 days or more and that aren't on any list, so you can ask the client whether they're leavers.

Microsoft 365 is what we check today. If some of your clients run Google Workspace, say so in the form and we'll tell you straight whether we can check them, before you send anything.

We don't do the offboarding. We don't log in to your tenants, change anything, disable accounts, remove access or revoke grants. You make every change. We don't advise on which licences a client needs, and we're not a security audit, a compliance audit or an insurer's assessment. If a client's auditor or insurer asks for offboarding records, the fix list and the log of fixes are yours to share. We don't give legal advice, and we don't handle money.

Pick a plan or stop. Either way, the fix list and every file we made are yours.

A monthly invoice that you can pay by bank transfer (US ACH or UK bank transfer) or by card.