How to your excel file is revealing your company name — here's how to strip it
- Step 1Confirm the leak — Right-click the
.xlsx→ Properties → Details. IfCompany(orAuthors/Manager/Tags) shows your organisation, this tool is the fix. - Step 2Drop the file onto the tool — Upload one
.xlsx. ExcelJS loads it in browser memory; the confidential file never leaves your machine. There is nothing to configure. - Step 3Run the wipe —
companyandmanagerare set to empty, alongside the core.xml author fields. ExcelJS then writes a clean workbook with generic Application/AppVersion. - Step 4Re-check the Details tab — Open Properties → Details on the downloaded
<name>-clean.xlsx. TheCompany,ManagerandAuthorsfields should be blank. - Step 5Clear the Title if it names you — Title is not in scope for this tool. If
dc:titlecarries your firm or deal name, clear it via Excel's File → Info or the office-doc-property-wiper. - Step 6Rename before distribution — Filenames are not metadata. If
ACME_teaser.xlsxnames you, rename the clean file before sending — the tool only appends a-cleansuffix.
Where your company name hides — and whether this tool clears it
A workbook can carry the organisation's identity in several places at once.
| Location | Typical value | Cleared here? |
|---|---|---|
Company (app.xml) | Acme Holdings | Yes — blanked |
Manager (app.xml) | Corporate Finance | Yes — blanked |
creator (core.xml) | a.smith@acme.example | Yes — blanked |
lastModifiedBy (core.xml) | b.jones@acme.example | Yes — blanked |
Title (core.xml) | Acme – Project teaser | No — clear separately |
custom.xml (DMS tags) | Owner=Acme/CF | No — out of scope |
| Filename | ACME_teaser.xlsx | No — rename it |
Fields blanked vs overwritten
Blanked = empty string; overwritten = a fixed ExcelJS value on save.
| Field | Action | Value after |
|---|---|---|
Company | Blanked | empty |
Manager | Blanked | empty |
creator / lastModifiedBy | Blanked | empty |
description / subject / keywords / category | Blanked | empty |
Application | Overwritten | Microsoft Excel |
AppVersion | Overwritten | 16.0300 |
Tier limits
Single file per run.
| Tier | Max file size | Row cap |
|---|---|---|
| Free | 5 MB | 10,000 |
| Pro (required) | 50 MB | 100,000 |
| Pro-media | 200 MB | 500,000 |
| Developer | 500 MB | unlimited |
Cookbook
Confidential-distribution scenarios. XML snippets show the exact change inside the workbook ZIP.
Company and Manager removed
The core leak for an 'anonymous' workbook — both organisation fields are emptied.
Before (docProps/app.xml): <Company>Acme Holdings</Company> <Manager>Corporate Finance</Manager> After (-clean.xlsx): <Company></Company> <Manager></Manager>
Author email no longer leaks the domain
Even with Company blank, an author email betrays the firm via its domain. core.xml author fields are cleared too.
Before (docProps/core.xml): <dc:creator>a.smith@acme.example</dc:creator> <cp:lastModifiedBy>b.jones@acme.example</cp:lastModifiedBy> After: <dc:creator></dc:creator> <cp:lastModifiedBy></cp:lastModifiedBy>
Internal label removed from keywords
A 'confidential' tag or internal codename in keywords/subject is cleared in the same pass.
Before: <cp:keywords>Acme;Project Teaser;Do Not Forward</cp:keywords> <dc:subject>Acme Holdings disposal</dc:subject> After: <cp:keywords></cp:keywords> <dc:subject></dc:subject>
Title still names the firm — handle it
Title is out of scope here, so verify and clear it before distribution.
Unchanged by this tool: <dc:title>Acme – Project teaser pack</dc:title> Fix: Excel File → Info → clear Title, or /security-tools/office-doc-property-wiper
Anonymous-bid hygiene chain
For a sealed/blind process, combine the property wipe with link and macro checks.
1. excel-app-metadata-wiper → Company/Manager/author 2. clear Title (office-doc-property-wiper) 3. /excel-tools/excel-external-link-auditor → no links to acme shares 4. /excel-tools/excel-vba-macro-stripper → strip any VBA author info 5. rename file → neutral name
Edge cases and what actually happens
Title still contains the company name
PreservedThis tool does not clear the Title property, so Acme – Project teaser in dc:title survives. Always check Title for a confidential file and clear it in Excel or with office-doc-property-wiper.
Custom properties carry the owner / classification
PreservedDMS systems (SharePoint, iManage) stamp custom.xml with owner, matter or classification values that can name your firm. This tool does not touch custom.xml. Remove them with Office's Inspect Document before distribution.
Author email leaks the domain
By designAn author value like a.smith@acme.example betrays the organisation via its domain. The tool blanks creator and lastModifiedBy, closing this leak — but confirm there is no email in the Title or in cell content (cells are never altered).
Company appears inside cells, not just properties
PreservedIf the firm name is typed into a header cell, footer or logo image, that is content, not metadata, and is preserved. Edit cells/headers in Excel; for PII patterns across cells use the PII redactor.
Version is normalised, not removed
By designExcelJS writes a generic Application = Microsoft Excel and AppVersion = 16.0300. Your real build is gone, which de-fingerprints the file; the field is populated with a neutral value rather than blank.
Encrypted / open-password workbook
failsAn encrypted file is not a readable ZIP, so ExcelJS cannot load it and the run fails. Remove the open password in Excel first, then wipe.
File over the tier size cap
rejectedExcelJS loads the whole workbook into memory; files above your tier cap (Pro 50 MB) are rejected. Use a higher tier or a desktop script for very large files.
OneDrive / SharePoint co-authored file
ExpectedThe tool edits a local file. Download the workbook from OneDrive/SharePoint, wipe it locally, then re-upload the clean copy — editing the cloud original in place is not how this works.
Created/modified dates reset to now
ExpectedExcelJS regenerates timestamps on write. The clean file looks newly created; this is not date redaction. Use the office-doc-property-wiper if dates must be controlled.
Recipient already cached the original
ExpectedIf you already sent the un-wiped file, the leak has occurred — re-issuing a clean copy does not unsend the first. Wipe before the first distribution, not after.
Frequently asked questions
Why does my Excel file have a Company name I never set?
Excel auto-populates the Company field in app.xml from the name registered in your Windows/Office installation. It is stamped onto every save automatically, so workbooks you never personalised still carry it.
Does this tool remove the Company field?
Yes — Company is set to an empty string, as is Manager. Both stop appearing in the file's Details tab.
Will the author / last-editor name also be removed?
Yes. creator and lastModifiedBy in core.xml are blanked, so an author email that would reveal your domain is removed too.
Is the company name removed from inside the cells?
No. The tool only edits document properties. If the firm name is typed in a cell, header or footer, edit those in Excel — content is preserved exactly.
What about the Title field?
Title is not cleared by this tool. Check it — a confidential file often names the firm or deal in Title. Clear it in Excel or with the office-doc-property-wiper.
Does it clear custom document properties?
No. custom.xml (DMS owner/classification tags) is out of scope. Use Office's Inspect Document for those before distribution.
Is my confidential file uploaded?
No. ExcelJS runs in your browser; the file is processed locally and never transmitted, which is essential when the file's identity is what you are protecting.
Does this break formulas or formatting?
No. The workbook is round-tripped through ExcelJS — cells, formulas, formats, charts and named ranges are preserved. Only the listed properties change.
Can I clean a OneDrive file directly?
Download it first, wipe locally, then re-upload the clean version. The tool works on a local file, not a cloud document in place.
What output do I get?
A binary .xlsx named <original>-clean.xlsx for download. Rename it before sending if the original name itself identifies you.
Is the version number deleted?
Your real build is replaced with the generic 16.0300, and Application reads Microsoft Excel. The field is neutral rather than empty, but it no longer fingerprints your deployment.
Why is this Pro tier?
It uses ExcelJS, which is heavier than the lightweight tools. Pro (50 MB / 100,000 rows) covers the compute and file-size allowance.
Privacy first
Every JAD Excel tool runs entirely in your browser using SheetJS and ExcelJS. Your spreadsheets, formulas, and data never leave your device — verified by zero outbound network requests during processing.