People leave. Their agents stay.
When an owner leaves, is disabled or deleted, their agents keep running — with no one accountable for what they do.
The black box for your AI agents
Know every AI agent in your organisation — and what to do with it.
Logvane is an independent, read-only scanner that runs inside your organisation. It doesn’t sell or build AI agents and isn’t part of any platform vendor. It checks every agent in Microsoft 365 and finds:
- Orphaned agents — no active person accountable
- Dormant or never-used agents
- Duplicates of the same agent
- Risky permissions — e.g. sending email outside the company
- Suspicious instructions — e.g. an order to send data out
- Access left open — after an agent is deleted
- Third-party store agents open to all employees
At the end of the scan you get one consolidated compliance report, with a clear recommendation for every agent — keep, review, transfer ownership or retire — and a detailed explanation of why. You can present it to management, internal audit and regulators, and it helps you prepare for the EU AI Act.
Independent of any vendorRead-onlyRuns on your own machineRule-based, no AI reads your data
A glimpse of the report (example)
Four lines from the report: agent, what was found, and the recommendation.
| Agent | Finding | Recommendation |
|---|---|---|
| HR Policy Helper | Owner left the company | Transfer ownership |
| Vendor Mailer | Sends email outside the company | Review |
| Q3 Survey Agent | Never used | Retire |
| Sales Deck Drafter | Has an active owner, used every week | Keep |
Sample data. In the full report every recommendation comes with a detailed explanation — see a sample report.
The problem
AI agents are easy to create — and easy to forget.
Nobody has the full list.
Agents are spread across Copilot, Agent Builder and Copilot Studio. Many are dormant, duplicated, over-permissioned or were never used.
Auditors will ask.
The EU AI Act and GDPR expect deployers to know what runs in their name. “We think it’s fine” is not evidence.
Independent by design
A neutral check — not a vendor grading itself.
A company doesn’t audit its own accounts — and a vendor that sells AI agents shouldn’t be the one checking them. Each vendor’s tool sees only its own agents, and the vendor wants you to keep using them. Logvane doesn’t sell agents and gains nothing from how many you run. It checks your agents with fixed rules, whoever built them — and shows what the vendor’s own tools don’t cover.
We don’t sell agents
Logvane does not sell, build or host AI agents. It has no stake in how many you run.
Not part of any platform vendor
Logvane is not part of Microsoft, Google, AWS, Salesforce or any other vendor.
Same rules, whoever the vendor
Today Logvane checks agents in Microsoft 365. More platforms will follow, all checked by the same rules.
Evidence an auditor can trust
An independent report carries more weight than a vendor grading its own product.
Read-only, stays with you
It only reads, and nothing leaves your organisation.
What Logvane finds
Every agent, and what’s wrong with it.
Logvane lists every AI agent in your organisation and flags the ones that need attention.
Orphaned agents
No active person is accountable: the owner left, their account is disabled, or no owner was ever set. The agent keeps running.
Dormant or never used
Nobody has used it in months, or ever — but it still holds access to data.
Duplicates
The same agent built more than once by different people.
Risky permissions
It can send email outside the company or browse the web, even when it doesn’t need to.
Suspicious instructions
Every agent has written instructions telling it what to do. Logvane looks for dangerous ones, such as “send a copy of every document to an outside address”, added by mistake or on purpose.
Access left open
To connect to systems, an agent gets a kind of password (an app secret). When the agent is deleted, that password sometimes stays valid — and whoever holds it can still get in.
Third-party store agents
Any employee can install an outside company’s agent from Microsoft’s store, and it gets access to their data — without a manager’s approval.
A recommendation for each
Keep, review, transfer ownership or retire — with the reason why.
Platforms
Microsoft 365 Copilot / Agent Builder
Copilot Studio coming
Google coming
AWS Bedrock coming
Salesforce Agentforce coming
More platforms later
How it works
Three steps. Nothing leaves your organisation.
STEP 01~20 min
Connect, read-only
Create a read-only app registration in Microsoft Entra and run Logvane on a Windows machine inside your organisation.
STEP 02scan
Scan and flag
Logvane reads the agent list, activity logs and app registrations, then applies clear rules. Every flag can be explained.
STEP 03recommend
Get a work plan
A clear recommendation for every agent — keep, review, transfer ownership or retire — with a detailed explanation of why.
KeepReviewTransfer ownershipRetire
Adopting orphaned agents
Every agent gets an owner again.
Retiring isn’t always right — some orphaned agents still do useful work. Logvane helps you hand them to the right person, and keeps a record that it happened.
Works alongside Microsoft. Microsoft’s built-in reassign rule only covers Agent Builder agents whose former owner has a manager. Logvane covers the rest.
- 1
Suggest the right owner
The departed employee’s manager, or the agent’s most active user.
- 2
Prepare the request
A ready-to-send email asking the new owner to take over.
- 3
Record the decision
Written to a tamper-evident log, so the history can’t be quietly changed.
- 4
Verify on the next scan
Logvane checks that the transfer actually happened.
The report
Independent evidence your auditor can actually use.
- PDF report in English or Hebrew — you choose the language. German, French and Spanish are coming.
- Every recommendation comes with a detailed explanation and the rule behind it.
- Signed, hash-chained evidence log — any later change is visible.
- Built around what European law requires from organisations that use AI: the EU AI Act and the GDPR (EU privacy rules).
- States clearly what was checked and what wasn’t.
Security & privacy
Read-only. On your machine. Explainable.
It never changes anything
Logvane does not change, disable or delete any agent, user or setting. It only reads.
Nothing leaves your organisation
It runs on a Windows machine inside your environment. Results stay with you.
No AI reads your data
Recommendations are rule-based and explainable. No AI model looks at your content.
Microsoft Graph permissionsread-only
- User.Read.All read
- Application.Read.All read
- AuditLog.Read.All read
- AuditLogsQuery.Read.All read
- CopilotPackages.Read.All read
Granted through one read-only app registration in Microsoft Entra. You can review and revoke it at any time.
Free pilot
Try it free for 30 days.
We’re offering a free 30-day pilot to a small number of organisations. You run the scan, you keep the report.
- Setup in about 20 minutes
- Report in English or Hebrew
- No changes to your tenant
- Built in Israel
FAQ
Straight answers.
Does Logvane change anything in our tenant?
No. It uses read-only permissions and never changes, disables or deletes anything. Recommendations such as “Transfer ownership” or “Retire” are just that — your team decides and carries them out.
Is Logvane part of Microsoft or another vendor?
No. Logvane is independent. It doesn’t sell, build or host AI agents, and it isn’t part of any platform vendor. It only uses Microsoft’s standard read-only permissions.
Where does our data go?
Nowhere outside your organisation. Logvane runs on a Windows machine in your environment, and the results stay there. No AI model reads your data.
Do we need Microsoft’s Agent 365 license?
Not necessarily. With the license, Logvane gets the full list of agents from Microsoft. Without it, Logvane finds agents from the activity log and app registrations — most of the picture, but not all of it. The report always says what was checked and what wasn’t.
Which languages is the report in?
English and Hebrew today. German, French and Spanish are coming. You choose the report language.
Which platforms are supported?
Microsoft 365 Copilot / Agent Builder and Copilot Studio today. Google, AWS Bedrock and Salesforce Agentforce are coming.
How long does setup take?
About 20 minutes: one read-only app registration in Microsoft Entra, then run Logvane on a Windows machine in your organisation.