Frequently Asked Questions

Privacy and data handling

Does MungePoint send my data anywhere?

No. MungePoint is a desktop application that runs entirely on your machine. Every API call goes directly from your desktop to Microsoft’s Graph API and SharePoint REST endpoints. There is no Anadak relay, no proxy server, and no third-party infrastructure in the data path.

Scan results, readiness scores, and remediation logs are stored in a local SQLite database on your machine. No file content, metadata, or tenant structure is ever transmitted to Anadak or any external service.

The only external calls beyond Microsoft are license validation and update checks, neither of which includes tenant data.

Where is scan data stored?

All scan data is stored locally in a SQLite database on your machine. The database contains file metadata (names, sizes, dates, content hashes), scan results, readiness scores, and audit trail entries. It does not contain file content.

If you uninstall MungePoint and remove its data directory, the scan data is gone.

Does MungePoint read the contents of my files?

MungePoint reads file metadata (names, sizes, modification dates) and content hashes for duplicate detection. It does not download, open, or read the full contents of your documents. The content hash is computed by SharePoint and retrieved via the Graph API; MungePoint does not compute it locally.

Can Anadak see my tenant data?

No. Anadak has no access to your Microsoft 365 tenant, your SharePoint content, your scan results, or your readiness scores. MungePoint operates entirely on your machine with your credentials.

Authentication and permissions

Does MungePoint require admin consent?

For read-only scanning (generating your Copilot Readiness Score), admin consent is typically not required. MungePoint uses delegated permissions with the Microsoft Graph PowerShell first-party client ID, and the read scopes (Sites.Read.All, Files.Read.All, User.Read) are generally available through standard user consent.

For fix operations that require write scopes (Sites.ReadWrite.All, Sites.Manage.All, Files.ReadWrite.All), admin consent may be needed depending on your tenant’s consent policy. See Permissions and Consent for detailed guidance.

Does MungePoint work with MFA and Conditional Access?

Yes. MungePoint uses standard OAuth2/MSAL authentication through Microsoft’s identity platform. Multi-Factor Authentication, Conditional Access policies, device compliance requirements, and session lifetime controls are all fully supported. You authenticate the same way you do for any Microsoft 365 application.

Does MungePoint create an app registration in my tenant?

No. MungePoint uses the Microsoft Graph PowerShell first-party client ID for authentication. No custom app registration, no service principal, and no background agent is created in your tenant.

Can MungePoint access content I do not have permission to see?

No. MungePoint uses delegated permissions, which means it operates with your account’s existing SharePoint access. If your account cannot access a site or library, MungePoint cannot access it either. There is no privilege escalation.

Platform support

Which operating systems are supported?

MungePoint supports:

• Windows (x64): available as an installer (.exe) or portable archive (.zip).
• macOS (Apple Silicon and Intel): available as a .dmg installer.
• Linux (x64): available as an AppImage or portable archive (.zip).

Does MungePoint require an internet connection?

Yes. MungePoint calls the Microsoft Graph API and SharePoint REST endpoints to scan your tenant. It requires an active internet connection while scanning and executing fixes. The application itself runs locally, but it needs network access to communicate with Microsoft’s APIs.

Licensing and pricing

Is there a free tier?

Yes. The free tier is fully functional for scanning and scoring. There is no trial period, no expiration, and no account required. You can download MungePoint, connect to your tenant, and get your Copilot Readiness Score. The free tier includes the Score Simulator and full inventory export.

The free tier limits are on action and export: executing bulk fixes and generating full evidence exports require a Pro license.

What happens when I upgrade to Pro?

Your existing scan data, scores, and remediation history carry over. Pro unlocks bulk fix execution, automated cleanup operations, and stakeholder-ready evidence exports. The upgrade is applied via a license key; no reinstallation is needed.

Do I need a license per user or per tenant?

Licensing details are available on the pricing page at mungepoint.com. Contact [email protected] for multi-user or enterprise licensing questions.

Troubleshooting

The scan is slow. What affects scan speed?

Scan speed depends on the number of files in the scanned site and the responsiveness of the Microsoft Graph API. A site with 100,000 files will take longer than one with 1,000 files. Microsoft Graph API throttling (HTTP 429 responses) can also slow scans during peak usage periods. MungePoint handles throttling automatically by backing off and retrying.

Subsequent scans are incremental: MungePoint caches the file index locally and only queries for changes, so rescans are significantly faster than the initial scan.

A fix action failed. What should I do?

Individual fix actions can fail due to file locks (someone has the file open), insufficient permissions on a specific library, or transient API errors. MungePoint logs the failure with error details and continues with remaining actions. You can retry failed actions after the underlying issue is resolved (for example, after the file is no longer locked).

How do I revoke MungePoint’s access?

Remove the consent grant in the Entra ID admin center. Navigate to Identity > Applications > Enterprise applications, find the Microsoft Graph PowerShell entry, and revoke the consent. This immediately invalidates MungePoint’s tokens. You can also sign out within MungePoint, which clears the locally stored tokens.