For Microsoft 365 shops · Built on Entra, Graph & Defender

Stop running IT in your inbox.

OutfIT is the operational shell for your M365 tenant. It closes the loop between shadow-IT discovery, SaaS request approval, Entra provisioning, and your inventory of record — so IT stops chasing email threads and starts shipping decisions. New-hire onboarding rides the same rails.

Demo runs in-browser with sandboxed data — nothing you do is saved.

The problem

IT runs on email threads, spreadsheets, and tribal memory.

Three things break in a growing company without a system of record for software and people.

Approvals get lost in inboxes

An employee asks IT for a tool. The thread bounces between manager, IT, legal, and finance. Two weeks later nobody remembers who said yes, what was approved, or whether security signed off.

New hires show up without accounts

HR emails IT a spreadsheet. IT clicks through Entra, M365 admin, and twelve security groups by hand. Half the time something gets missed and the new hire spends day one waiting on a license.

Nobody knows what the company already owns

A manager asks for Slack. You already have Slack — bought twice, in two different departments. There is no single place to check, so it happens again next quarter.

The fix

One closed loop for software and people.

Defender discovers the app. The catalog scores it. The workflow routes it. Entra provisions it. Hudu remembers it. The same rails carry new-hire onboarding end to end.

Workflow 1

App approvals

Employees file software requests in two minutes. OutfIT scores the request for risk and routes it through Manager → IT → Legal → Tech Committee — only the steps it actually needs.

Risk score with reasons (data sensitivity, cost, SSO, MDA score)
Approve, return, or deny in one click — works on phone
Approved app lands in inventory with a 10-task project plan

Workflow 2

New-hire onboarding

HR fills the form (or pulls it from Workable in one click). HR approves, IT approves, IT clicks Provision. The new hire's Entra account is ready when they show up.

Three-step intake: HR → hiring manager → IT
Dual approval with rejection notes at either step
One click creates the user, assigns M365 E5, sets manager, adds groups

How an app request flows

01
Submit
Employee picks the app, fills cost and sensitivity, hits send.
02
Score & route
OutfIT computes the risk and pulls in the right reviewers.
03
Review
Reviewers approve, return, or deny with the risk breakdown in front of them.
04
Provision
Approved app joins inventory; a 10-task project plan kicks off.

How a new hire flows

01
Intake
HR, hiring manager, then IT each fill their step.
02
Approve
HR approves first, then IT — either can reject.
03
Provision
Entra user, license, manager, and groups in parallel.
04
Day one
Account ready, retry button on any failed task.

Integrations

Deep in M365. Pragmatic everywhere else.

Microsoft 365, Entra, Defender, Planner, and Teams are first-class. Everything else — HR, hiring, ITAM, contracts — connects via thin adapters that read, write, or hand work off without trying to replace the system of record.