Microsoft Purview is a unified platform for data governance, data security, and compliance across your entire data estate, including on-premises, hybrid, and multicloud environments.

Instead of stitching together separate point solutions for data security, governance, and compliance, Purview helps you reimagine your approach with a single portfolio that:

• Improves visibility into where your data lives, how it moves, and how it’s used for analytics and AI.
• Protects data throughout its lifecycle across apps, clouds, and devices, including generative AI data and Copilot for Microsoft 365.
• Supports risk and compliance with tools for classification, records management, eDiscovery, auditing, and communication compliance.
• Reduces manual work by using AI and automation to scan, classify, and govern data at scale.
• Simplifies operations for SecOps, DevOps, and data teams with a unified management experience and fewer vendors to manage.

For organizations dealing with hybrid work, multiple clouds, and growing AI use, Purview helps close exposure gaps, manage regulatory requirements, and keep critical data assets safer—while still making data discoverable and usable for the business.

Purview is designed to help you move from fragmented data visibility to a more connected, governed data estate.

Key capabilities include:

• Unified data map: Microsoft Purview Data Map captures metadata across analytics, SaaS, and operational systems in hybrid, on-premises, and multicloud environments. It automatically scans and classifies data so your inventory stays current.
• Business-friendly catalog: Microsoft Purview Data Catalog lets data stewards curate governed data assets and define business-friendly terms. Data consumers can then search and discover data products without needing deep technical knowledge.
• Integrated ecosystem: Support for Apache Atlas APIs makes it easier to integrate existing data catalogs and systems, so you’re not starting from scratch.
• Policy-based access: Microsoft Purview Data Policy allows you to create automated access, movement, and sharing policies across data sources. You can tailor policies by role (for example, DevOps vs. business users) and resource.

Together, these capabilities help you:

• Identify critical data assets that need higher levels of quality, lineage, classification, and protection.
• Make trusted data easily discoverable for analytics and AI scenarios.
• Standardize controls and policies while maintaining oversight from a central data office.

The result is a more governed, yet still accessible, data estate that supports innovation without losing control.

Purview brings together multiple capabilities to help you secure data, manage risk, and support compliance obligations in a more connected way.

1. Protect sensitive data across your estate

• Information Protection: Automatically discover, label, and protect sensitive data across enterprise apps and services (including Copilot for Microsoft 365), devices, SaaS apps, and both cloud and on-premises environments.
• Extensibility: The Information Protection SDK lets you embed Purview labeling and protection into third-party apps and services.
• Data Loss Prevention (DLP): Microsoft Purview DLP helps prevent risky or unauthorized sharing and exfiltration of sensitive data across endpoints, apps, services, and on-premises files, while guiding users toward safer behavior.
• Insider Risk Management: Uses machine learning to correlate signals and identify potential insider risks—both accidental and malicious—so you can act earlier.

2. Improve risk and compliance posture

• Data Lifecycle Management: Automates classification and governance at scale using file properties, pattern recognition, and 90 sensitive info types, plus machine learning. For example, you can automatically apply retention labels to content containing PII.
• Records Management: Provides a reliable system to store and retain regulatory, legal, and business-critical records in unalterable, compliant formats.
• eDiscovery: Offers an end-to-end workflow to preserve, collect, analyze, review, and export content for internal and external investigations, including data spillage. Features like deep indexing, email threading, and near-duplicate detection help narrow large data sets. Copilot for Security in Purview can summarize review items to speed up analysis.
• Audit: Supports forensic and compliance investigations with detailed user activity insights and reporting. Audit logs can be preserved for up to 10 years to meet regulatory requirements.
• Communication Compliance: Detects potential violations in communications, including harassment, threats, adult content, and regulatory issues (for example, SEC or FINRA-related). It also extends to Generative AI by monitoring prompts and responses from Copilot for Microsoft 365. Privacy is built in with role-based access, pseudonymized usernames, and audit logs.
• Compliance Manager: Helps you continuously assess and track compliance effectiveness with pre-built assessments for common standards, step-by-step improvement guidance, and a risk-based compliance score.

By consolidating these capabilities in one portfolio, Microsoft Purview helps you reshape how you manage data risk and compliance—reducing manual effort, improving consistency, and giving you clearer insight into your overall posture.