PROOF & TRUSTMoat
Bind, sign, and prove every number.
Bind Source, Sign Cell, Sign Block, Verify Ledger, Why This Number, Replay Proof, Proof Coverage, Export Certificate. Cryptographic proof of derivation stays with the workbook.
Learn moreNow in betaWindows · Excel 2016 and later
Trustworthy spreadsheets, finally.
ModelxcelPro is the Excel add-in built for power financial modelers. Bind sources, sign formulas, and prove every number — with tamper-evident certificates any auditor can verify.
One install · every capability · no per-feature upsell
Why this matters
~88% of spreadsheets contain material errors
Powell, Baker & Lawson (2008), Tuck School of Business · longitudinal review of 50+ enterprise spreadsheets · the academic standard citation for spreadsheet risk.
Six capabilities. One install.
What ModelxcelPro does
Every capability ships in every plan. Tiers differ on seats, admin tools, and support — never on features.
AUDIT & REVIEW
Hand off the model with evidence.
Audit Trail, Flag Cell, Review Issues Tracker, Model Health Report, Cell Search by attribute. Paired JSON sidecars (.mxaudit for review status, .mxreview for issues) travel beside the workbook across saves and email handoffs.
Learn moreFORMULA INTELLIGENCE
Explain formulas before you edit or defend them.
CalcScope explains the selected formula with live values, branch state, and no-write what-if sliders where eligible. Dock CalcScope follows selection in a read-only cockpit. TrustLens adds proof state and drift, with Trace, Sensitivity, and Name Conversion for the rest of the review loop.
Learn moreSTRUCTURE VISUALIZATION
See the whole model on one screen.
Worksheet Map and Risk Heatmap in three modes — Risk, Structure, Audit — with complexity scoring, all-sheets analysis, and an interactive legend panel.
Learn moreWORKBOOK COMPARISON
Know why outputs moved.
Compare Workbooks, Compare to Previous Version, Compare Sheets — formula-aware diff. Material Change Intelligence replays material drivers and explains the delta.
Learn moreFORMATTING & THEMES
Excel that understands your model — and applies your standard.
Smart Format reads financial-model intent — "DSCR" maps to ratio, "WACC" to percent, "COD" to date, "exchange rate" to factor. Format Selection for precision. Format Sheet for scale. AutoFormat runs passively for eligible numeric and formula edits. Six workbook-persisted themes plus a custom designer set the standard once, then reuse it everywhere.
Learn morePlus dozens more across the six capabilities — keyboard shortcuts, settings panels, cloud-aware OneDrive / SharePoint handling, and more.
See every featureTHE MOAT
Excel can’t lie to you anymore.
Three primitives, one promise. When the number changes, you know why — and you can prove it.
- 01
Bind
Pin every input to its source — URL, file, or prior workbook. SHA-256 hash. Drift detected the moment the source changes.
- 02
Sign
Attest individual cells or contiguous formula blocks. Every record chains to the prior one — append-only, tamper-evident, anchored in workbook custom XML.
- 03
Prove
Replay material drivers live through Excel; export a tamper-evident certificate with a sibling Ed25519-signed envelope any auditor can verify with the shipped Node CLI — no install required.
Underlying engine: the Causality ledger. Every write is SHA-256(prior_hash || record).
SMART FORMAT · THE WEBINAR MOMENT
Manual formatting model standards.
Just type. We handle the rest. Format Selection for precision, Format Sheet for scale, and AutoFormat for eligible numeric and formula edits. This is how Excel should work.
- ManualBeforeCell by cell, by hand.
- SelectionFormat SelectionThe range you picked.
- Used rangeFormat SheetThe whole worksheet.
- PassiveAutoFormatEligible edits, quietly styled.
Same Smart Formatting engine, three ways to invoke it: the selected range, the worksheet used range, or a debounced AutoFormat pass after eligible edits.
In the add-in
Show me what it does.
Three of the dozens of capabilities you get on day one.
WORKSHEET MAP
See the whole model on one screen — and drill into it.
An in-pane structural TreeView (sheets → ranges → formulas) alongside the heatmap. One-click TrustLens peek on any formula opens the full inspector. Built for 30-tab PF and IB models you didn’t write yourself.
- In-workbook TreeView — navigate the whole model as a tree
- Heatmap with three view modes: Risk · Structure · Audit
- TrustLens peek button drills any formula into the inspector
Worksheet Map
Three layered views — Risk, Structure, Audit
Demo comingTRUSTLENS
The first formula inspector wired to a cryptographic ledger.
Every node shows live proof state, per-node intermediate result, and which
IF() branch actually fires today. A four-tab side panel breaks the formula down in plain English — "Condition X is FALSE, taking value_if_false branch" — alongside the active path, attestation state, and resolved reference values.- Plain-English Explain tab — formula behavior described in words, not just diagrams
- PATH / OFF badges show which branches execute under current inputs
- Live Dependents enumerates downstream cells (cross-sheet count, click to navigate)
- Drift badge flags signed formulas changed since last attestation
TrustLens
Deep formula workbench with diagnostics
Demo comingMATERIAL CHANGE INTELLIGENCE
Why did Project IRR move from 12.4% to 11.8%?
Auto-detects your model’s outputs across the standard PF/IB metric vocabulary (IRR, NPV, DSCR, LLCR, PLCR, MOIC, Payback) — or any cell you specify — then decomposes the delta into ranked drivers. Per-driver Confidence blended from evidence, path length, and residual; an exact Residual on the unattributed remainder. For each driver: the cell-by-cell path from input change through every formula it touched. Seven one-click routes from the result, plus an automatic write to the Proof ledger when a comparison touches a signed block.
- Auto-detected outputs — no list to maintain
- Sensitivity-backed contributions: ±1% perturbation of the live workbook, not pattern matching
- Cell-by-cell dependency path from driver → output
- Seven one-click drill-ins · auto-writes to the Proof ledger when comparison touches a signed block
Material Change Intelligence
Diff with causal explanation
Demo comingBuilt for power modelers
What changes for you.
Same product. Four flavors of pain it solves.
Hand off the model with a signed certificate the MD can show the client.
Lead capability: Sign Formula Block
- Sign the entire output block once instead of cell-by-cell sign-off.
- TrustLens and CalcScope give inherited models a structured formula readout before the team edits or signs them.
- CalcScope, Classic Pretty Print, and Sensitivity tornados ship the deliverable, not just the work.
Product comparison
Compare ModelxcelPro with the add-in stack around Excel.
See how ModelxcelPro coverage maps against the categories teams usually combine: formatting tools, worksheet mapping, formula review, workbook comparison, proof, and audit handoff.
Can this number be defended?
Source bindings, formula signatures, ledger verification, and certificates keep evidence close to the workbook.
Review capabilityCan reviewers explain the logic?
CalcScope, TrustLens, Trace, Sensitivity, and Name Conversion support different levels of formula review.
Review capabilityCan changed outputs be explained?
Workbook Comparison features connect changed cells, changed outputs, and driver explanations.
Review capabilityCan findings survive review?
Review Issues, Audit Trail, Output Intelligence reports, and proof records turn findings into a durable workstream.
Review capabilityMost spreadsheet models supporting nine-figure decisions can’t be re-justified six months later. ModelxcelPro is the first add-in that fixes that with cryptography instead of conventions.
— Generic placeholder; replace with permissioned beta testimonial in M2
Pricing
One product. Three tiers. Every plan ships every feature.
You pick a tier based on seats, admin tools, and support — not on what the add-in does.
Individual
TBD
Solo analysts, freelancers, small advisory.
- All of ModelxcelPro — every capability
- 1 named user · 2 active machines
- Email support
Final pricing will be announced before paid checkout opens.
Team
TBD
Deal teams, FP&A teams, modeling boutiques.
- Same product — every capability
- Team admin · seat assignment
- Shared theme library
- Priority email support
- 3-seat minimum
Final pricing will be announced before paid checkout opens.
Enterprise
Talk to us
Banks, audit firms, large infra developers.
- Same product — every capability
- SSO · custom EULA / DPA
- Dedicated CSM
- On-prem .lic issuance · signed SLA
Every plan ships every feature. Tiers differ on seats, admin tools, and support — never on what the add-in does.
Resources
Recent from the blog
Notes on financial modeling, model risk, and the practice of building Excel models that hold up.
Project Finance
12 minIslamic Financing in Project Finance
Explore how Islamic financing works in project finance, including murabaha structures, common terms frameworks, cash flow controls, security, and key considerations for sponsors.
Project FinanceFinancial Modeling
35 minInflation & Escalation in Financial Modelling
A complete practitioner's guide to modelling price adjustments over time — from foundational concepts to advanced implementation techniques in project finance spreadsheets.
Project FinanceFinancial Modeling
15 minProject Finance Modelling in Excel: How to Build Models That Win Negotiations
Learn how to build negotiation-ready project finance models in Excel. Practical guidance on output-led design, cash flow logic, risk allocation, debt sculpting, auditability, and decision-focused outputs.