Arvetio

Security check

We're just checking you're not a bot — this only takes a second.

Microsoft 365 governance & auditing

Take control of Microsoft 365 access — with total confidence

Enterprise tools for auditing SharePoint and OneDrive permissions. Read-only, your data never leaves your organisation, licences cryptographically signed.

M365 Access Audit — Dashboard
1 284Resources
37B2B guests
12External links
ResourceAccessRisk
Finance / Budget 2026.xlsxEveryoneCritical
HR / ContractsGuest ×4High
Projects / RoadmapExt. linkMedium
Marketing / ResourcesTeamLow
M365 Access Audit — Inheritance
📁 SharePoint / Finance unique
└ 👥 Site Members — Edit
└ 📁 Budget broken inherit.
└ 👤 j.kowalski — Full Control
└ 🌐 Anyone with link — View
└ 📁 Reports — inherits from site
└ 👥 Finance-RO — Read
M365 Access Audit — B2B guests
GuestDomainType
anna@partner.compartner.comGuest
m.nowak@extco.ioextco.ioGuest
Anyone-with-link—Link
k.wisniewska@vendor.plvendor.plGuest
M365 Access Audit — Report (pivot)
Dept.OwnerEditRead
Finance31248
HR2831
Marketing42196
IT514120
M365 Access Audit — Export
CSVUTF-8 · Excel
PDFAudit report
SQLDatabase / BI
SQL export — historicalstation+tenant+iddedup
Last export2026-07-29OK
M365 Access Audit — Scan comparison
ChangeResourceStatus
+ New guestHR / ContractsNew
+ Link "anyone"Finance / BudgetNew
− Access revokedIT / ScriptsRemoved

Built for IT and security teams

Read-only

The scan changes nothing in your tenant — read-only permissions only.

Your data stays put

Audit results never leave your workstation. Zero data on our servers.

Signed licences

Licences signed with ES256 in Azure Key Vault — tamper-proof.

Compliant

B2B sales, VAT invoice, annual licence.

How it works

How it works

From install to a full audit in minutes.

1

Install

Download the Windows installer and run it — no station-admin rights needed.

2

Sign in with Microsoft

Sign in with your M365 work account. Read-only scan; admin consent only on first run.

3

Scan & export

Run a scan, see the risks, export to CSV, PDF, a SQL database or a pivot table.

Products

Everything you need to audit access

From the full inheritance chain to detecting B2B guests and external links.

SharePoint & OneDrive audit

A complete picture of permissions across every site and library.

Inheritance chain

Trace exactly where every permission comes from — down to the source.

B2B guests & links

Catch external accounts and sharing links that slipped past control.

Recurring scans

Run audits on a schedule and compare changes over time.

Export & reports

Clean CSV/PDF reports ready for auditors and management.

Governance (soon)

Remediation actions, approval queue and write-back to resources.

Security & compliance

Security & compliance

Designed so your data never leaves your organisation.

Read-only

The scan modifies nothing in your tenant. Minimal, read-only permissions.

Your data stays put

Results in an encrypted local database (SQLCipher). Nothing reaches our servers.

GDPR-compliant

Processing on your side; licensing infrastructure in the EU region (Azure West Europe).

Signed licences

Licences signed with ES256 in Azure Key Vault, verified offline — tamper-proof.

Our products

A growing catalogue of Microsoft 365 management tools.

M365 Access Audit — Dashboard
1 284Resources
37B2B guests
12External links
ResourceAccessRisk
Finance / Budget 2026.xlsxEveryoneCritical
HR / ContractsGuest ×4High
Projects / RoadmapExt. linkMedium
Marketing / ResourcesTeamLow

M365 Access Audit

SharePoint & OneDrive permission auditing: inheritance, B2B guests, external links, privileged accounts. Read-only.

Learn more

Frequently asked questions

Does the app change anything in my tenant?
No. The scan is strictly read-only and modifies nothing. Remediation actions (Governance) are optional and always require your approval.
Where does the audit data go?
It stays on your workstation, in an encrypted local database. We don't send results anywhere — only licence validity is checked online.
What permissions are required?
An account with at least the SharePoint Administrator role (Global Administrator also qualifies). Graph permissions are read-only and approved by an admin on first sign-in.
Do I need a separate account?
No. You sign in with your Microsoft work account — your customer account is created automatically on first sign-in.
How does licensing work?
An annual licence tied to your tenant, with a VAT invoice. You activate a key in the app; it works with a 24-hour offline buffer.
Can I export the results?
Yes — to CSV (Excel), PDF (report), a SQL database (historical, with duplicate protection) and a dynamic pivot table.
Governance (soon)

Governance — coming soon

Remediation actions, approval queue and write-back to the tenant. Leave your work email — we'll let you know when it's available.

Ready to see who has access to what?

Choose a plan and order in minutes — no account needed.

Explore products
Download datasheet (PDF)