Example report · Invented workbook · Back to how it works

42ANALYTICS / WORKBOOK INSPECTOR

Single-file review report

2026-11-01T08:28:46.717Z · 1 file · Sensitive data search ON

Application 0.2.0 · XML parser 0.9.12

Generated locally · Matching values omitted · Terms of use

All findings and coverage records are included. Groups are initially expanded; screen filters and collapsed groups do not affect this report.

Hidden contentInformationInspection gapFailed inspectionNot run / inactive

file-0001 · Synthetic example.xlsx

Checked

The supported checks finished. Coverage details and known limits are available below.

Scanner 0.2.0 · 2026-11-01T08:28:46.679Z · 4733 bytes

All finding groups (4)

Hidden contentA tab is hidden from the normal Unhide menuWhat to do: Ask the workbook owner to reveal this tab in a review copy.Sheet: Lookup1 finding(s) · 1 evidence location(s)Show detailsHide details

Workbook · very-hidden-sheet · Sheet: Lookup

  1. Hidden content · finding-1 · very-hidden-sheet

    Reason: The workbook declares this tab hidden, regardless of its sheet type. Stored content may be overlooked when reviewing visible tabs. 6 populated cell(s) are stored on this hidden tab.

    Location: Sheet: Lookup · xl/worksheets/sheet2.xml

    Review guidance: Review this worksheet using a trusted tool that can expose very hidden sheets; normal sheet tabs will not show it.

Hidden contentA row is hiddenWhat to do: Unhide this row and check its contents.Sheet: Summary1 finding(s) · 1 evidence location(s)Show detailsHide details

Workbook · hidden-row · Sheet: Summary

  1. Hidden content · finding-2 · hidden-row

    Reason: This row is explicitly hidden; 3 populated cell(s) were inspected in it. The stored row flag does not establish a shared filter or outline cause.

    Location: Sheet: Summary · 3:3 · xl/worksheets/sheet1.xml

    Review guidance: Reveal and review the indicated rows, including any stored values and formulas.

Routine content (2 informational groups)

Stored text, metadata and other information without a recorded sensitive-data match. Every finding remains available below.

InformationContent sits far from the main dataWhat to do: Go to the reported cell and decide whether it belongs in the file.Sheet: Summary1 finding(s) · 1 evidence location(s)Show detailsHide details

Workbook · distant-populated-cell · Sheet: Summary

  1. Information · finding-3 · distant-populated-cell

    Reason: 1 populated cell(s). Heuristic: this stored content is at least 1,000 rows or 26 columns beyond the upper-left content. This may be intentional, including an ordinary large table.

    Location: Sheet: Summary · AA2500 · xl/worksheets/sheet1.xml

    Evidence: 1 match(es) · Distant populated cells · matching values omitted

    Review guidance: Navigate to the indicated cells and check whether the distant content belongs in the shared workbook.

InformationCustom document properties are storedWhat to do: Review custom properties and remove unwanted fields in a copy.docProps/custom.xml1 finding(s) · 1 evidence location(s)Show detailsHide details

Workbook · custom-property · docProps/custom.xml

  1. Information · finding-4 · custom-property

    Reason: 1 descriptive or non-routine metadata field(s) are present. Routine timestamps, recognised application details and worksheet inventory are excluded from findings. All fields are still searched when sensitive search is enabled. Values are omitted from this report.

    Location: docProps/custom.xml

    Review guidance: Review custom document properties for information that should not travel with the workbook.

Coverage — including checks not run (5)
Package inventory and relationshipscompleted

Conservative ZIP checks, related-part inventory, and external relationships. Only read parts receive decompression/checksum validation.

Supported workbook inspectioncompleted

Worksheet, chartsheet and dialog-sheet visibility, hidden and zero-size rows/columns, populated rows with explicit heights below 3 pt, populated column ranges with explicit widths below 0.5 characters, populated cells and supported rich-text runs with stored font sizes below 4 pt, resolved font/fill contrast below 1.2:1 is amber only with a known display and background; 1.2:1 to below 1.5:1 is Information, with computed ratios in both. Supported rich-text run colours use the same thresholds; possible readable overflow into a differently filled neighbour is noted without changing the grade for text inside the cell. Differential conditional font/fill and empty/literal-only number-format checks using supported conditions, priority and stop-if-true on known stored display values, populated cells using selected empty or literal-only custom-format sections, stored number-format and conditional-rule text, workbook structure locks, sensitivity-label metadata with screened names and withheld identifiers, true conditional rules storing tiny font sizes (visual effect unverified), worksheet and table filter criteria with bounded cause grouping, table columns, sheet/workbook code names and named cell-style names, distant populated cells, simple print areas, hidden defined names and whole text, numeric, Boolean and standard error named constants, plus rectangular arrays of those types and whole zero-argument Boolean calls (other named expressions are not evaluated), properties, custom XML property identifiers/schema references, unused shared-string entries and legacy comments. Unused strings become amber only after a complete reference audit and bounded comparison against potentially visible cell values, headers/footers, chart text and text boxes; hidden sheets and explicitly hidden cells/objects do not count as visible copies. Ordinary and x14 validation/conditional formats share the same checks. Sparkline data references and x14/x15 slicer references are read; unknown worksheet extension URIs remain named gaps. Static local references in visible cells, names, dropdowns and chart series are traced to populated hidden source cells. Single-reference cached results are compared with stored source values; other cached text receives a limited heuristic comparison, never a recalculation.

Sensitive data searchcompleted

0 location(s) matched enabled rules in inspected content. This is not a complete personal-data search.

Stored text, protection and viewscompleted

Headers/footers, validation messages with stored display flags and literal lists, static dropdown source tracing (including bounded defined-name chains), hyperlink fields with static hidden-sheet destination context, formula/name string literals, scenario inputs, protected hidden formulas, stored non-anchor merged values and workbook window visibility. Dropdown source warnings require populated cells in an explicitly hidden sheet/row/column. Low zoom, distant saved views and long-text adjacency are information, not confirmed hiding. Default row visibility and ambiguous/limited combinations remain explicit gaps.

Advanced and embedded contentcompleted

Supported advanced-content checks finished; any known limits are listed separately. Supported Unicode EMF text records and bounded Unicode printer/device names are read without image playback or contacting printers. Unsupported text/layouts have file-specific gaps; remaining image and driver-private content has known limits. Saved previews are identified by thumbnail relationships or conventional package paths, with declared image types and bounded signature checks; their pixels remain unsearched. Bounded PNG tEXt, zTXt and iTXt fields, JPEG Exif ASCII fields and GPS directories receive metadata checks; unsupported encodings, XMP, private metadata and OCR remain outside these checks. Legacy shared-workbook revision headers, logs and editor parts receive bounded stored-value/formula/editor checks; actions are not replayed or mapped to current sheets. Bounded text/metadata checks also cover documented drawing/alt text, modern comments/persons, chart/pivot/external-link cache values, pivot layout field usage and local cache-source visibility, chart source references, connection fields and custom XML text when present. Direct worksheet shape text is checked for hidden flags. Visible opaque RGB rectangles with unoffset cell-relative two-cell anchors receive full-cell coverage checks; fixed-size, grouped, alternate or unresolved shape layouts do not justify concealment warnings. Legacy VML note boxes receive comment-target, visibility, dimensions and anchor checks. Hidden notes do not imply covered cells; visible solid rectangles require agreeing worksheet-origin anchors and physical bounds before concealment is reported. Supported VML picture-frame previews receive stored-text, image relationship, visibility, dimensions and anchor checks; matching embedded-object identity and modern preview references are reconciled. Supported visible picture anchors overlapping populated cells are reported as Information: structure understood; concealment not assessed. Their rendering and cell occlusion remain known limits. Other VML objects and unresolved geometry retain explicit gaps. Positive picture crops are checked separately: supported visible rectangular PNG crops are amber only when bounded decoding confirms differing opaque pixels excluded from the displayed source rectangle. Integer and percentage crop offsets, including bounded negative outsets, are read. Uniform or transparent discarded pixels do not establish concealment. JPEG crops remain Information with a pixel-analysis support gap, not a lower-risk assessment. One-cell and absolute picture frames are read; full-cell concealment requires bounded grid dimensions and confirmed opaque PNG pixels. Unknown grid dimensions, conflicting transforms and unsupported effects retain gaps. Simple rectangular two-cell pictures are checked for full cell-area coverage using bounded static 8-bit PNG opacity decoding. A separate picture extent must also cover a conservative stored-grid bound using supported regular Arial/Calibri Normal-font metrics; unknown metrics and insufficient extents remain gaps. Partial overlap, other image formats, effects and unsupported geometry cannot justify concealment warnings. Image metadata, rendering, references and payload semantics outside the supported checks are listed as known limits. Embedded files receive bounded Office-package type identification, compound-file directory checks and supported ASCII Ole10Native filename recovery. Direct ZIP-based .docx/.pptx stored text and nested attachments are checked; .xlsx attachments reuse the workbook checks. Recursion is limited to 3 levels and 32 documents, with shared workbook entry, decompression, cell and time limits. Encrypted, macro-enabled and binary/OLE payload contents remain uninspected. No VBA/bytecode, binary data-model or OCR interpretation. Unsupported conditional expressions, formula-dependent display values, unresolved inherited formatting, unsupported rich-text effects or conditional interactions, automatic/system font colours and unresolved table-style backgrounds retain explicit limits or gaps. See the part inventory.

Package inventory (10)

Each part is listed with its inspection status and the checks performed.

[Content_Types].xml
inspected 1145 bytes

Documented checks completed for this supported part.

_rels/.rels
inspected 459 bytes

Documented checks completed for this supported part.

docProps/custom.xml
inspected 374 bytes

Document properties checked; ordinary housekeeping fields are omitted from findings. All stored property text is searched when sensitive search is enabled.

xl/_rels/workbook.xml.rels
inspected 913 bytes

Documented checks completed for this supported part.

xl/sharedStrings.xml
inspected 115 bytes

Documented checks completed for this supported part.

xl/styles.xml
inspected 1899 bytes

Cell style font sizes, font/fill colours, differential font sizes/colours/number formats and custom number-format references read for tiny-font, contrast, evaluated conditional concealment and selected empty/literal-only number-format checks. Stored format text is searched separately; other display effects are not evaluated.

xl/theme/theme1.xml
inspected 3546 bytes

Theme palette read for stored font/fill contrast checks. Other theme effects and text are not inspected.

xl/workbook.xml
inspected 375 bytes

Documented checks completed for this supported part.

xl/worksheets/sheet1.xml
inspected 1631 bytes

Documented checks completed for this supported part.

xl/worksheets/sheet2.xml
inspected 852 bytes

Documented checks completed for this supported part.

Terms of use

Workbook Inspector by 42Analytics helps you review workbook content before sharing. These usage terms describe the current development preview.

Using the tool

Inspect workbooks you own or are authorised to review. The tool reads supported, unencrypted .xlsx files and produces findings with evidence locations. It does not edit your original workbook.

Your files and reports

Inspection takes place in your browser. Workbook contents are not uploaded, and only the sensitive-search preference is saved automatically. Downloading a report saves a copy to your device.

Matching sensitive values are omitted from reports. File names, sheet names, paths and locations remain, so check who should receive a report before sharing it.

Reviewing results

Use the findings and coverage record together when deciding what to share. Findings identify content for review; sensitive-data indicators are pattern and heading matches that need your judgement. A completed check records the work performed within its stated scope.

The report supports your review. It does not certify that a workbook is safe to share, free of malware or compliant with data-protection law. A check that was not run, failed or did not cover particular content is identified in the report.

Inspection scope

The coverage record lists the checks performed for each file. The package inventory identifies components and how they were handled. Formulas, macros and embedded content are not executed, and external relationships are not followed.

Files that cannot be fully inspected remain in the results and exports with their recorded status. On-screen filters and collapsed groups do not remove findings or coverage from an export.

Technical scope and report notes

Read-only review aid, not a safe-to-share, malware or legal-compliance verdict. Matching values are omitted; file and sheet names, paths and locations may still be sensitive. Review before sharing.

  • This is a read-only review aid, not a safe-to-share, malware or GDPR verdict.
  • Only the documented rules and supported parts are inspected. Absence of findings is not evidence of absence of sensitive information.
  • Workbook formulas are not recalculated. Supported conditional-formatting comparisons and Boolean expressions are interpreted locally against stored values; macros, embedded objects and external relationships are never executed or fetched.
  • Static dropdown references and bounded defined-name chains are traced locally. Simple rectangular two-cell picture anchors can establish covered cell areas when bounded PNG decoding confirms opaque pixels. Separate picture extents must also cover conservative stored-grid bounds; unsupported fonts or dimensions remain gaps. Other image formats, transparency, effects, partial coverage and unsupported geometry remain information or inspection gaps. Positive crops are checked separately for supported visible rectangular PNG pictures. Amber requires differing fully opaque source pixels excluded by the crop; uniform or transparent areas do not establish concealed image content. Simple one-cell picture bounds can rule out cell coverage when all populated areas end before their start; intersecting or unsupported one-cell layouts remain gaps. No image OCR is performed.
  • No OCR, VBA/bytecode, binary data-model or comprehensive secret detection is implemented. Documented drawing text, alt text, modern comments/persons, chart/pivot caches, external-link caches, connection fields and custom XML text have bounded stored-text checks; other payload semantics and rendering remain inspection gaps. Conditional font/fill, selected empty or literal-only number-format suppression and stored tiny-font checks support a bounded expression subset, priority and stop-if-true. Conditional concealment findings require known stored display values and resolved formatting. Resolved font/fill contrast below 1.2:1 is amber when the stored display and background are known; 1.2:1 to below 1.5:1 is Information. Both report the computed ratio. Supported rich-text run colour and size checks use the same thresholds; unsupported effects and conditional interactions remain gaps. Possible readable text overflow into a differently filled neighbour is noted without downgrading confirmed concealment inside the cell. Conditional font-size changes are not normally supported by Excel and are informational. Unsupported conditional expressions, formula-dependent displays and unresolved display effects remain inspection gaps. Static local A1 references in formulas, names, validations and chart series are traced to hidden populated sources without executing formulas. Recognised #REF! and external chart references are inventoried without fetching targets. External-link sheet names and cache values are read; confirmed retained cache values without an inspected visible-cell copy are amber. Dynamic, structured and 3D references remain outside the local dependency check. Stored formula caches receive bounded comparisons, not recalculation. Pivot layout usage, cache relationships and local source visibility are checked; pivots are never refreshed.
  • Drawing shape text is checked for an explicit hidden flag on direct worksheet shapes. Visible, opaque RGB rectangles using unoffset cell-relative two-cell anchors can establish full cell coverage. Fixed-size or absolute shape anchors, groups, alternate drawing branches, partial coverage, theme-dependent fills, effects and rotations are not used to claim concealment.
  • Legacy VML notes receive bounded target, visibility, physical-dimension and anchor checks. Hidden notes are not cell-coverage warnings. Visible opaque rectangular notes require both a supported cell anchor and conservative physical-grid bounds from the worksheet origin. Nonzero-origin visible note boxes, controls, groups, unsupported styles and conflicting geometry remain explicit gaps. Supported picture-frame presets receive stored-text, image relationship, visibility, size and anchor checks. Embedded preview identity and modern image/anchor references are reconciled when present. Supported visible picture-anchor overlap with populated cells is Information only: structure understood; concealment not assessed. Picture rendering and cell occlusion remain known limits; malformed or unsupported picture properties remain gaps. VML is never executed or rendered.
  • Saved previews are inventoried without rendering or OCR. Bounded PNG tEXt, zTXt and iTXt fields and JPEG Exif ASCII text and GPS directories are checked, including in nested documents. XMP, unsupported text encodings, private metadata and metadata after image data are not searched. Supported Unicode EMF text records and bounded Unicode DEVMODE printer names are read and searched when enabled, including in nested documents. Glyph indexes, ANSI text, EMF+ extensions, image pixels/font metadata and remaining printer settings are not interpreted; malformed or unsupported text layouts have explicit gaps. Legacy shared-workbook revision headers, cell snapshots, formula text and selected editor/name/sheet metadata have bounded stored-field checks. Historical actions, formatting, shared-string references, extensions and current sheet mappings are not reconstructed. Cloud version history is not part of the local workbook package.
  • Embedded files are inventoried using object/package relationships, declared attachment types and conventional paths. Bounded Office-package metadata and version 3 compound-file root directories identify types where possible; supported ASCII Ole10Native records can supply stored filenames, shown without source paths. Direct ZIP-based .docx/.pptx stored paragraphs, notes, comments and selected metadata are checked; embedded .xlsx files reuse the workbook checks. Nested attachments are followed to 3 levels and 32 documents with shared entry, decompression, cell and time budgets. Values are omitted; nested paths use !/. Encrypted, macro-enabled and legacy binary/OLE payloads, unsupported XML, rendering and other encodings/layouts remain explicit limits or gaps. No object activation is performed.
  • Sensitive-data search covers supported stored cell/formula text, shared strings (including unreferenced entries audited separately), custom XML property identifiers/schema references, comments, defined names, document properties (including sensitivity-label fields; stored label names may appear after an always-on sensitive-indicator guard, while identifiers remain omitted), number-format definitions, conditional-rule formulas even when false, PNG text fields, JPEG Exif ASCII text, relationship targets, headers/footers, validation and hyperlink fields, scenario data, supported revision values/formulas/editor fields, recovered object filename/label metadata, supported nested Office text, Unicode EMF text, Unicode printer names and documented text-bearing package fields. It does not infer identities or decode arbitrary binary/encoded payloads.
  • Reports omit matching values, but file names, sheet names and package paths may themselves be sensitive. Review reports before sharing.
  • Sheet/workbook code names, named cell-style names and table column/filter metadata are searched. Theme names, font-family names, format-scheme labels, custom table-style names and arbitrary style/extension attributes are not fully searched as metadata. These are general known limits, not evidence that reading a supported part failed.
  • XML is parsed strictly within bounded limits; this is not full OOXML schema validation or a rendering of Excel.

Reports are generated locally and do not carry a digital signature or independent verification.