Collect
Connect a tenant. Get the whole picture.
One consented connection pulls users, licenses, and real usage signals through Microsoft Graph — read-only scopes, nothing written back.
Microsoft 365 license optimization
Stop paying for licenses nobody uses.
PerimetAI reads your Microsoft 365 tenant, finds the seats going to waste, and turns them into an approval-ready business case. Execution stays gated until you say go.
Read-only by default · No tenant is modified
Built on the Microsoft cloud
- Microsoft Graph
- Entra ID
- Read-only scopes
- Deterministic engine
- Next.js
- Vercel
How it works
From connection to business case, in four steps.
Collect
Connect read-only through Microsoft Graph and inventory every user, license, and usage signal in the tenant.
Plan
The deterministic engine scores each seat against real activity and cost — same inputs, same answer.
Review
Approve, defer, or exclude seat by seat, with the evidence attached to every recommendation.
Execute
Apply only what was approved — or export the plan and hand it off. Execution stays disabled until you enable it.
The platform
From raw tenant data to a signed-off business case.
Every card below is the real product — the same screens you get after one read-only connection.
Plan
A deterministic engine finds the waste.
The plan engine scores every seat against actual usage and license cost. Same inputs, same answer — no black-box scoring.
Review
Approve with evidence, not hunches.
Approve, defer, or exclude seat by seat — every recommendation carries its evidence, and the audit trail writes itself.
Export & execute
A business case finance signs off on.
Export a numbers-first savings pack — executive PDF, finance CSV, IT change plan, and the audit trail.
Guarantees
Nothing changes until you say go.
- Read-only Graph scopes end to end
- Every decision lands in the audit trail
- Execution gated behind explicit approval
What it handles
Every flavor of license waste, covered.
Inactive-seat detection
Surface licensed seats with no recent sign-in or app activity, each backed by its own usage evidence.
Duplicate & overlap cleanup
Flag users holding overlapping licenses whose capabilities already cover each other.
Downgrade & rightsizing
Match each seat to the cheapest license that still covers what that person actually uses.
Renewal-ready business case
Walk into the renewal with a numbers-first savings pack instead of a gut feeling.
Role-gated approvals
Changes require an explicit, per-seat approval from someone with the role to give it.
Audit trail
Every decision is recorded as it happens, so you can show who approved what, and when.
Who it's for
Built for the people who own the license bill.
IT administrators
Know exactly which seats are idle — with the sign-in evidence attached — before anyone asks.
Finance & procurement
Walk into the renewal with a numbers-first savings pack instead of a gut feeling.
Security & compliance
Read-only Graph scopes during analysis and a complete audit trail of every decision.
MSP & multi-tenant teams
Run the same deterministic analysis across every tenant you manage — same inputs, same answer.
Security
Safe by default.
PerimetAI is built so that looking never means touching. Analysis, review, and the demo are read-only; changing anything requires deliberate, recorded approval.
Read-only Graph scopes
Analysis runs entirely on read-only Microsoft Graph scopes. Nothing is written to your tenant while PerimetAI looks around — looking never means touching.
Execution disabled by default
License changes ship turned off. Applying anything requires explicit approval first — the demo and the analysis can never modify a tenant.
Per-seat approvals, on the record
Approvals are role-based and granted seat by seat, and every decision lands in the audit trail as it happens.
Hardened in production
A strict per-request Content Security Policy and hardened response headers ship with the production build.
4
Export formats
Executive business case, finance CSV, IT change plan, and audit trail.
0
Tenant changes during analysis
Collection, planning, and review never write anything back.
100%
Read-only collection
Every Microsoft Graph scope used for analysis is read-only.
See what your tenant is wasting.
Sign in with Microsoft for a read-only analysis, or explore the demo workspace first — neither touches your tenant.
Read-only by default · No tenant is modified