Microsoft Purview is a unified platform for data governance, data security, risk, and compliance across your entire data estate – including hybrid, on-premises, multicloud, SaaS apps, and even generative AI data.

Instead of stitching together multiple point tools, Purview gives security, compliance, and data teams a single, integrated approach to:

• Understand and govern data – Create a unified data map, catalog, and policy framework so teams can find, trust, and use data for analytics and AI.
• Secure data throughout its lifecycle – Automatically discover, label, and protect sensitive data across apps, devices, and clouds, and prevent data loss.
• Improve risk and compliance posture – Automate classification, records management, eDiscovery, auditing, and communication compliance.

Purview is designed to help you:

• Close exposure gaps created by hybrid work, multicloud environments, and AI adoption.
• Reduce manual work using AI, automation, and built-in machine learning (for example, for insider risk and eDiscovery).
• Simplify vendor and tool sprawl by consolidating data protection, governance, and compliance capabilities into one portfolio.

In short, Purview helps you reimagine how you protect and manage data: making it easier for business users to access quality data for innovation, while giving security and compliance teams the controls they need to keep that data safe.

Microsoft Purview is built to give you a clear, end-to-end view of your data estate and to turn that visibility into practical governance.

Key capabilities include:

• Unified data map – Microsoft Purview Data Map captures metadata across analytics platforms, SaaS apps, and operational systems in hybrid, on-premises, and multicloud environments. It stays current with automatic scanning and classification, and supports integration via Apache Atlas APIs so you can bring in existing catalogs.
• Business-friendly data discovery – Microsoft Purview Data Catalog lets data stewards curate governed data assets and define business-friendly terms, policies, and rules. Data consumers can then search and self-serve the data they need for analytics and AI, without needing deep technical knowledge of the underlying estate.
• Policy-based access and sharing – With Microsoft Purview Data Policy, you can define and automate who can access, move, or share specific data across sources. For example, you can apply different policies for DevOps teams, data owners, and business users seeking self-service access.

This combination helps you:

• Know where data lives, where it travels, and how it’s used for analytics and AI.
• Identify critical data assets that need higher levels of quality, lineage, classification, and protection.
• Support a modern, federated data governance model that balances central oversight with local autonomy.

The result is a more organized, governed data estate where teams can confidently use data to drive insights and AI scenarios, while you maintain consistent controls and oversight.

Microsoft Purview brings together multiple capabilities to help you secure data, manage risk, and meet compliance obligations in a more integrated way.

1. Protect sensitive data and prevent leakage

• Information Protection – Automatically discover, label, and protect sensitive data across enterprise apps and services (including Copilot for Microsoft 365), devices, SaaS apps, and both cloud and on-premises environments. The Information Protection SDK lets you extend labeling and protection into third-party apps.
• Data Loss Prevention (DLP) – Microsoft Purview Data Loss Prevention helps you detect and prevent risky or unauthorized sharing or transfer of sensitive data across endpoints, apps, services, and on-premises files. Policies are designed to be quick to configure and help users take the right actions without blocking productivity.
• Insider Risk Management – Uses machine learning to correlate signals and identify potential insider risks (both accidental and malicious), so you can act earlier and more precisely.

2. Automate classification, records, and lifecycle

• Data Lifecycle Management – Automates classification and governance at scale using file properties, pattern recognition, 90+ sensitive info types, and machine learning. For example, you can automatically apply retention labels to content containing PII such as passport or Social Security numbers.
• Records Management – Provides a reliable way to store and retain regulatory, legal, and business-critical records in unalterable, compliant formats, while enabling defensible disposal of data that is no longer needed.

3. Support investigations, audits, and communications compliance

• eDiscovery – Microsoft Purview eDiscovery offers an end-to-end workflow to preserve, collect, analyze, review, and export content for internal and external investigations, including data spillage. It uses capabilities like deep indexing, email threading, and near-duplicate detection to narrow large data sets. Copilot for Security in Purview can summarize review sets to speed up tagging and export decisions.
• Audit – Microsoft Purview Audit provides detailed insights into user activity and high-bandwidth data access, and can preserve audit logs for up to 10 years to help meet regulatory requirements and support forensic investigations.
• Communication Compliance – Helps detect sensitive or inappropriate communications (for example, potential SEC/FINRA violations, harassing or threatening language, adult content) while maintaining privacy with role-based access, pseudonymized usernames, and audit logs. It also extends to Generative AI by monitoring prompts and responses from Copilot for Microsoft 365.
• Compliance Manager – Continuously assesses and tracks your compliance effectiveness, offering pre-built assessments for common standards, step-by-step improvement guidance, and a risk-based compliance score so you can see where to focus.

Together, these capabilities help you rethink your approach to data protection: moving from reactive, manual processes to a more automated, consistent, and insight-driven model that supports both innovation and regulatory expectations.