Cut Microsoft 365 storage costs — safely, in days.
TSO scans SharePoint, OneDrive, Exchange and Teams to surface the duplicates, oversized files and stale content weighing your tenancy down. Read-only by design. Client-ready PDF & Excel reports.
Microsoft 365 SSO · Read-only Graph permissions · No agents to install
SharePoint Online
OneDrive for Business
Microsoft Teams
Exchange Online 
The problem it solves — in one page
Storage bloat is quiet, cumulative and expensive. TSO exists to make it visible, ranked, and safe to act on.
Silent, compounding storage bloat
Additional Microsoft 365 storage is priced at $0.20 per GB per month, and typical mid-size tenants hold 20–40% they no longer use. Old drafts, duplicates and ex-employee OneDrives grow every quarter — nobody deletes anything, and the tenancy quietly carries the cost.
Copilot hallucinations
Copilot searches everything the user can see. Ten versions of the same “HR policy” — half of them stale — and Copilot quotes the wrong one, confidently. TSO surfaces the duplicates and orphaned drafts so your ground truth is clean before rollout.
Native admin tools miss both
The SharePoint admin storage report shows totals per site — not which files, which owners, which duplicates. Copilot data-quality issues never appear in those reports. TSO surfaces both, ranked and exportable.
One consent, one scan, one ranked list
Each finding carries the site, owner, size, age and reclaim estimate, so an admin can act in minutes — or hand it to the data owner with the receipts.
Reports your clients will read
Every scan produces a branded PDF and an Excel workbook, ready to hand to a customer, CIO or finance team. MSPs on the Enterprise tier can white-label them.
Read-only, by design
Only read scopes from Microsoft Graph — Sites.Read.All, Files.Read.All, Reports.Read.All. No delete, no move, no modify. Every finding is a recommendation for your admin to act on.
Six product surfaces. One scan. One report.
Everything you need to get more from your Microsoft 365 tenant — each screen, with what it tells you.
The headline reclaim number, per workload
Total storage, items scanned and recommendations across SharePoint, OneDrive, Exchange and Teams — with the storage-overage card that tells finance what it is costing.
- Storage and items by workload
- Overage against your included pool
- Scan history and rescan on demand
Hash-based sweeps across every site and OneDrive
Copies of the same document across the tenant, grouped by content and sorted by reclaimable bytes — the ones Copilot cannot tell apart.
- Merged rows with copies and total bytes
- Reclaimable estimate per group
- Open in SharePoint in one click
Top-N largest files, with version counts
The biggest files across every drive, the ones hoarding versions, and the estimated reclaim if older versions were pruned — per file, with totals.
- Size, version count and workload per row
- Estimated reclaim from version pruning
- Sortable and exportable
Ownerless sites and dormant OneDrives
SharePoint sites without an owner, ex-employee OneDrives still visible to a manager, sites without activity in years — ranked by cost.
- Storage in GB and last-activity date
- Governance risk flagged
- Assign an owner or archive
Archive, delete or review — each with a reclaim estimate
Every finding scored on age, ownership and usage, with a ranked action table and insight cards across the whole workspace.
- Priority score per item
- Suggested action category
- Export to PDF and Excel
Put a pound sign on the problem
Storage economics: enter licensed users and your overage rate; TSO calculates current annual overage and projects conservative, expected and aggressive clean-up scenarios with a live simulator.
- Current annual overage cost
- Three savings scenarios
- Sensitivity to rate and reduction assumptions
Your Copilot is only as good as your data.
Copilot grounds every answer in the files the user can already see. When that includes ten versions of the same policy — half of them out of date — the answer is confidently wrong.
Employee asks Copilot: “What is our expenses policy?”
“Our expenses policy sets a £30 daily meal cap for domestic travel and requires manager approval for anything over £500. Alcohol is not reimbursable.”
⚠ Answer combines wording from three different documents — one drafted in 2018 and never retracted.
- Stale HR-Policy-Expenses-2018-DRAFT.docx HR / Old policies
- Orphan Expenses Policy v2.pdf Sam Torres' OneDrive
- Current HR Policy — Expenses (Final).docx HR / Policies
TSO recommendation: “Expenses Policy” — 3 copies found across tenant
Cull the 2018 draft and the orphaned OneDrive copy. Retain the HR-owned 2026 final as the single source of truth. Copilot will quote from it — and only it — going forward.
Reclaim 4.2 MB · Removes 2 confused Copilot sources · One click to export the action list.
- Archive HR-Policy-Expenses-2018-DRAFT.docx +2.1 MB
- Delete Sam Torres' OneDrive copy +2.1 MB
- Keep HR Policy — Expenses (Final).docx Owned
10 versions, no ground truth
The 2018, 2021 and 2026 versions of your expenses policy all live in the tenant. Copilot has no way to know which is authoritative — so it quotes any of them.
Stale drafts outrank current
A pinned “Pricing 2018 draft” still surfaces above the live pricing site because it was popular once. Copilot quotes 2018 numbers to a 2026 customer.
Ex-employee OneDrives leak
An orphaned OneDrive still visible to the user's manager keeps working drafts alive years after the author left. Copilot cheerfully quotes them.
We only read. Never write. Never touch your files.
TSO requests only the Microsoft Graph read scopes below. The Graph API physically will not let us delete, move or modify anything in your tenant — even if we wanted to.
What TSO does read
Exactly these Microsoft Graph scopes — no more, no less.
Sites.Read.AllRead SharePoint site and drive metadata.Files.Read.AllRead file metadata — name, size, hash, timestamps. Never contents.Reports.Read.AllRead the usage reports Microsoft already generates for the tenant.Directory.Read.AllResolve user and group names for the ownership column.User.Read.AllResolve mailbox owners.
What TSO cannot do
Even with your consent. The Graph API blocks it.
- Delete files, sites, mailboxes or messages
- Move or rename anything in your tenant
- Modify permissions, sharing links or labels
- Read file contents, email bodies or Teams messages
- Send email or post to Teams on your behalf
- Create or change apps, users, groups or policies
Revoke access any time from Microsoft Entra → Enterprise applications → TSO → Remove.
No file contents
Never touched. Never stored.
UK South data residency
Or your own Azure region on the MSP tier.
Full audit trail
Every Graph call is logged and exportable.
What teams say about TSO
A sample from admins, MSPs and compliance leads using TSO in production.
“We shaved 8 TB off our SharePoint bill in the first fortnight. TSO showed us duplicates our Admin Centre reports kept missing.”
“Our clients pay for the audit alone. Handing them a branded PDF with the top-ten reclaim actions is the whole business.”
“Setup took ten minutes over Teams. First tenant scan finished before the meeting was over.”
Everything teams ask before their first scan
Can't find your question? Contact us — we usually reply within one working day.
Is TSO read-only?
Yes. TSO only requests read scopes from Microsoft Graph. It never deletes, moves or modifies anything in your tenant — every finding is a recommendation for your admin to act on.
How long does a first scan take?
For a typical mid-size tenant, 20–90 minutes. It runs asynchronously — you can close the tab and come back.
What data does TSO store?
Site and drive metadata, storage numbers and activity dates, plus derived recommendations. Never file contents. Data lives in Azure UK South by default; MSPs on the self-hosted plan can pick their own region.
Do I need a card to try it?
No. The Free tier covers your first tenant scan without a card. Sign in with Microsoft 365 to start.
Which Microsoft 365 workloads are covered?
SharePoint Online (including subsites), OneDrive for Business, Microsoft Teams (files channel) and Exchange Online mailboxes. All four scan from a single admin consent.
How is TSO different from the native SharePoint admin storage report?
The admin report shows top-level totals per site. TSO surfaces individual duplicate files, version bloat, largest files with owner and last-access, and turns each into a ranked reclaim action with an Excel/PDF you can hand to a client.
Do I need to install anything on-prem?
No agents, no proxies, no on-prem installers. Consent to the read-only Graph app and TSO scans through Microsoft Graph.
What permissions does the app request?
Sites.Read.All, Files.Read.All, Reports.Read.All, Directory.Read.All and User.Read.All — all read-only. An admin approves them once during onboarding and can revoke access at any time from the Entra portal.
Can we buy through Microsoft?
Yes. TSO is listed on the Microsoft Marketplace and Azure Marketplace, so it can be billed through your existing Microsoft agreement.
Can I white-label the reports?
Yes — on the Enterprise and MSP tiers, both PDF and Excel exports carry your branding.
Can I run TSO in my own Azure subscription?
Yes, on the MSP tier. LogiSam engineers deploy TSO into your tenant so client data never leaves your control. See MSP & partners.
Storage & Copilot data-quality insights
The 2019 Org Chart Strikes Back: A Copilot Hallucination Story
A real account of what happens when Copilot hallucination grounds in a stale tenant. See what the post-mortem revealed about the cleanup that should have…
Your Copilot Is Only as Smart as Your SharePoint: Why Stale Files Are Hallucinations Waiting to Happen
Stale SharePoint: Copilot grounds every answer in your tenant's own content. When that content is stale or contradictory, it answers with confidence, not…
Copilot Governance Starts With Content Hygiene
Copilot Governance starts with content hygiene. A 500-user tenant needs 12.2TB but gets 5.9TB included. See why overage costs compound, and what's…
Buy it straight from Microsoft.
Prefer to buy through Microsoft? Get Tenant Storage Optimisation on the Microsoft and Azure Marketplace — billed through your existing Microsoft agreement, with the procurement your finance team already trusts. The same read-only product, one click away.
See what's hiding in your tenant.
Sign in with Microsoft 365 SSO — your first scan is free. Read-only. No card required.
One-off scan · No card · Cancel anytime