Now generally available

Get more from your
Microsoft 365 storage
— safely, in days.

TSO scans SharePoint, OneDrive, Exchange and Teams to surface the duplicates, oversized files and stale content weighing your tenancy down. Read-only by design. Client-ready PDF & Excel reports.

Microsoft 365 SSO  ·  Read-only Graph permissions  ·  No agents to install

Pay for what matters

Only pay for the M365
storage you actually use.

The mid-size tenants we scan typically hold 20–40% of their storage in duplicates, stale drafts and orphaned OneDrives — bytes nobody is opening. TSO surfaces them, ranked, so every gigabyte earns its keep.

One-off scan  ·  No card  ·  Cancel anytime

Copilot-ready storage

Fix the data,
fix the Copilot answer.

Ten versions of the same "expenses policy" and Copilot happily quotes the wrong one — the 2018 draft nobody retracted. TSO surfaces duplicates, stale drafts and orphaned OneDrives so your ground truth is clean before you roll Copilot wider.

Duplicate detection  ·  Stale-content ranking  ·  Orphaned-OneDrive alerts

TSO — Microsoft 365 storage overview dashboard
Built for Microsoft 365
SharePoint SharePoint Online
OneDrive OneDrive for Business
Teams Microsoft Teams
Exchange Exchange Online
Azure Marketplace
WHY TSO

The problem it solves — in one page

Storage bloat is quiet, cumulative and expensive. TSO exists to make it visible, ranked, and safe to act on.

Silent, compounding storage bloat

Additional Microsoft 365 storage is priced at $0.20 per GB per month, and typical mid-size tenants hold 20–40% they no longer use. Old drafts, duplicates and ex-employee OneDrives grow every quarter — nobody deletes anything, and the tenancy quietly carries the cost.

Copilot hallucinations from stale data

Copilot for Microsoft 365 searches everything the user can see. Ten versions of the same "HR policy" — half of them stale — and Copilot happily quotes the wrong one, confidently. TSO surfaces the duplicates and orphaned drafts so your ground truth is clean before rollout.

Why native admin tools miss both

The SharePoint admin storage report shows totals per site — not which files, which owners, which duplicates. Copilot data-quality issues never appear in those reports. TSO surfaces both, ranked and exportable.

What TSO does about it

One consent, one scan, one ranked reclaim list per workload. Each finding carries the site, owner, size, age and reclaim estimate, so an admin can act in minutes — or hand it to the data owner with the receipts.

Reports your clients will read

Every scan produces a branded PDF and an Excel workbook, ready to hand to a customer, CIO, or finance team. MSPs on the Enterprise tier can white-label them under their own brand.

FEATURES

Everything you need to get more from your M365 tenant

Six product surfaces, one scan, one report. Click any screenshot to see it full-size.

TSO duplicate detection
View full size
Duplicate detection

Hash-based sweeps across every SharePoint site and OneDrive account. Grouped by content, sorted by reclaimable bytes.

TSO largest files
View full size
Largest files

Top-N largest files across every drive, with per-file version count. One click to open in SharePoint.

TSO scan overview
View full size
File versions

Files hoarding versions. Estimated reclaim if older versions were pruned, per file, with totals.

TSO no-owner sites
View full size
No-owner site insights

SharePoint sites without an owner, dormant OneDrives, sites without activity in years. Ranked by cost.

TSO recommendations
View full size
Recommendations engine

Archive / delete / review candidates, scored on age, ownership and usage — each with a reclaim estimate.

TSO optimize playbook
View full size
Optimize playbook

Groups every finding into an actionable plan with a cumulative reclaim readout — the version of the story a data owner will read.

COPILOT-READY STORAGE

Your Copilot is only as good as your data.

Copilot for Microsoft 365 grounds every answer in the files the user can already see. When that includes ten versions of the same policy — half of them out of date — the answer is confidently wrong.

Before TSO
Employee asks Copilot
"What is our expenses policy?"

Our expenses policy sets a £30 daily meal cap for domestic travel and requires manager approval for anything over £500. Alcohol is not reimbursable.

⚠ Answer combines wording from three different documents — one drafted in 2018 and never retracted.
Copilot cited
StaleHR-Policy-Expenses-2018-DRAFT.docxHR / Old policies
OrphanExpenses Policy v2.pdfSam Torres' OneDrive
CurrentHR Policy — Expenses (Final).docxHR / Policies
After TSO
TSO Recommendation
"Expenses Policy" — 3 copies found across tenant. Cull the 2018 draft and the orphaned OneDrive copy. Retain the HR-owned 2026 final as the single source of truth.
Reclaim 4.2 MB · Removes 2 confused Copilot sources · One click to export the action list.
Recommended actions
ArchiveHR-Policy-Expenses-2018-DRAFT.docx+2.1 MB
DeleteSam Torres' OneDrive copy+2.1 MB
KeepHR Policy — Expenses (Final).docxOwned
📜
10 versions, no ground truth

The 2018, 2021 and 2026 versions of your expenses policy all live in the tenant. Copilot has no way to know which one is authoritative — so it will happily quote from any of them.

📌
Stale drafts outrank current

A pinned 'Pricing 2018 draft' still surfaces above the live pricing site because it was popular once. Copilot picks it up and quotes 2018 numbers to a 2026 customer.

👤
Ex-employee OneDrives leak

An orphaned OneDrive still visible to the user's manager keeps working policy drafts alive years after the author left. Copilot cheerfully quotes them.

Scan my tenant free
READ-ONLY. SAFE BY DESIGN

We only read. Never write.
Never touch your files.

TSO requests only Microsoft Graph read scopes. The Graph API physically will not let us delete, move or modify anything in your tenant — even if we wanted to.

What TSO does read

Exactly these Microsoft Graph scopes — no more, no less.

Sites.Read.All
Read SharePoint site + drive metadata.
Files.Read.All
Read file metadata — name, size, hash, timestamps. Never contents.
Reports.Read.All
Read the usage reports Microsoft already generates for the tenant.
Directory.Read.All
Resolve user and group names for the ownership column.
User.Read.All
Resolve mailbox owners.
What TSO cannot do

Even with your consent. The Graph API blocks it.

Delete files, sites, mailboxes or messages
Move or rename anything in your tenant
Modify permissions, sharing links or labels
Read file contents, email bodies or Teams messages
Send email or post to Teams on your behalf
Create or change apps, users, groups or policies
Revoke access anytime from the Microsoft Entra admin portal → Enterprise applications → TSO → Remove.
No file contents
Never touched. Never stored.
UK South data residency
Or your own Azure region on the MSP tier.
Full audit trail
Every Graph call is logged and exportable.
TESTIMONIALS

What teams say about TSO

A sample from admins, MSPs and compliance leads using TSO in production.

"We shaved 8 TB off our SharePoint bill in the first fortnight. TSO showed us duplicates our Admin Centre reports kept missing."

Head of Infrastructure
Professional services (UK) · 4,200 seats

"Our clients pay for the audit alone. Handing them a branded PDF with the top-ten reclaim actions is the whole business."

Managing Partner
Microsoft partner MSP · 60+ tenants

"Setup took ten minutes over Teams. First tenant scan finished before the meeting was over."

IT Manager
Financial services (EU) · 1,800 seats

See what's hiding in your tenant.

Sign in with Microsoft 365 SSO — your first scan is free. Read-only. No card required.

Microsoft 365 SSO · Read-only Graph permissions · No agents to install