Find CPR numbers in SharePoint and OneDrive, and see who can open them.

Sign in with your Microsoft 365 account. An admin approves read access and Sporlock goes through your files. The first scan is free. The report shows which files contain CPR numbers, how many, and whether they are shared with anyone with the link, the whole organization or external people.

What we ask for, and why

Permission (Microsoft Graph, application)	Why
`Files.Read.All`	Read files in SharePoint and OneDrive and see who they are shared with. Content is read in memory, checked for CPR numbers and discarded immediately.
`Sites.Read.All`	Find every SharePoint site and its document libraries.
`User.Read.All`	Find each user's OneDrive, know your own domains (internal or external sharing) and count licensed users for the price.
`Files.ReadWrite.All` Separate app, “Sporlock Lockdown”, only when you lock down	Remove sharing links and external access on the files you choose. It is the narrowest Microsoft Graph permission that can remove sharing on arbitrary files. Technically it also allows changing files; Sporlock never changes, moves or deletes a file, only sharing, and every change is in the audit log.

Only a Global Administrator or a Privileged Role Administrator can approve application permissions for Microsoft Graph. That is Microsoft's rule; a Cloud or Application Administrator can't.

Not an admin? Sign in anyway: you get a ready-made link to send to your admin.

What we store

File ids, finding counts (never the numbers themselves, not even masked), sharing state and the audit log. No file contents, no file names. Results are deleted after 30 days. The full description is in privacy and data processing.

Price: first scan free; locking down costs DKK 19 per user per month (DKK 190 per year) excl. VAT.