Microsoft 365 · Purview
Purview and compliance
Purview brings classification, data loss prevention, retention and eDiscovery into one place. It's where Microsoft 365 stops being a productivity tool and starts being defensible.
In plain English
What is Purview?
Purview is the Microsoft 365 capability that handles purview and compliance. It sits inside the wider microsoft 365 support stack, so it shares identity, licensing and admin with the rest of your Microsoft 365 estate rather than living off to one side.
In practice, purview brings classification, data loss prevention, retention and eDiscovery into one place. It's where Microsoft 365 stops being a productivity tool and starts being defensible.
Day to day, it covers sensitivity labels for documents and emails, data loss prevention across microsoft 365 and endpoints, retention policies and records management, and more besides. Most teams use a mix of out-of-the-box configuration and a handful of tailored policies, rather than a bespoke build.
Capabilities
What Purview does
The core capabilities that come with Purview, and the practical difference each one makes to a business running on Microsoft 365.
Sensitivity labels for documents and emails
Filters malicious mail before it reaches inboxes and stops attackers spoofing your domain, protecting both staff and the customers who trust your brand.
Data loss prevention across Microsoft 365 and endpoints
New laptops and phones arrive pre-configured and stay compliant automatically, cutting onboarding from days to hours and reducing help-desk load.
Retention policies and records management
Captures and retains data with point-in-time restore, so accidental deletes, ransomware and audit requests stop being a crisis and become a routine recovery.
eDiscovery, audit and litigation hold
A native Purview capability inside Microsoft 365 that handles ediscovery, audit and litigation hold out of the box, so the business gets the outcome without building or maintaining the underlying plumbing.
Insider risk management
Automatically tags and protects sensitive content as it's created, so commercial, personal and regulated data don't leak through everyday sharing.
Communication compliance
Centralised policies apply the same standards to every user and resource automatically, giving leadership confidence that the platform stays compliant as it grows.
Common scenarios
- Meeting regulatory obligations in finance, legal or healthcare
- Stopping accidental sharing of sensitive content
- Responding to a subject access request or legal hold
- Putting guard rails around AI and Copilot
Business benefits
Why teams invest in Purview
The outcomes businesses typically point to when Purview earns its place in the Microsoft 365 estate.
Lower operational cost
Consolidating into Purview usually replaces several point tools and the people-time spent stitching them together, with measurable savings in licensing and admin effort.
Reduced risk
Native controls, audit trails and Microsoft's own security investment raise the floor on protection and make compliance evidence much easier to produce.
Faster productivity
Because Purview is already wired into Microsoft 365, users get the value through tools they already use, instead of learning yet another system.
Scalable foundations
Capacity, regions and features grow with the business, so the platform you choose now still fits when headcount, data volume or geography change.
Better visibility
Centralised reporting across users, devices and workloads gives leadership a clear, current picture of what's happening instead of monthly snapshots.
Future-ready
Microsoft ships new Microsoft 365 capabilities into Purview continuously, so the investment compounds rather than ages out.
Watch out for
Common pitfalls
Purview is powerful out of the box, but a few patterns reliably cause it to under-deliver. Worth checking your current setup against these.
- Labels that nobody applies because users were never trained
- DLP policies stuck in audit mode forever
- Retention rules that contradict legal requirements
- Treating Purview as a project rather than a service
Is it a fit
How to know Purview is right for you
Purview tends to earn its place when one or more of these signals show up. If several feel familiar, it's usually worth a proper conversation rather than another round of internal debate.
- Meeting regulatory obligations in finance, legal or healthcare
- Stopping accidental sharing of sensitive content
- Responding to a subject access request or legal hold
- Putting guard rails around AI and Copilot
More on Microsoft 365
Related areas
Exchange Online and email
Email is still the busiest service in most businesses, and the one users notice first when something breaks. Exchange Online done well is invisible; done badly, it's the loudest problem in IT.
Learn moreTeams, calling and meetings
Teams sits between collaboration, telephony and culture. The technical setup is the easy part - the harder work is making it the way your business actually communicates.
Learn moreSharePoint and OneDrive
SharePoint and OneDrive are where most business content lives. The platform is powerful and forgiving, which is why so many tenants end up with thousands of unowned sites and unclear permissions.
Learn moreIntune and device management
Intune is how you turn a fleet of laptops and phones into a managed, compliant estate. It's the engine room behind conditional access, zero touch deployment, and modern endpoint security.
Learn moreBackup and retention
Microsoft replicates your data, but it does not back it up the way most businesses assume. A separate backup for Microsoft 365 is now table stakes for almost every organisation.
Learn moreReady when you are
Find a Purview specialist.
Tell us a bit about what you're trying to achieve and we'll come back the same day with an introduction to a specialist from our network.
Get matchedFAQs
Common questions, answered.
Still unsure about something? Drop us a note and we'll get back to you the same day.
Talk to us about your IT needsRelated insights
Insights on Purview and related IT support topics.
- Product21 Apr 2026 · 7 min
How Microsoft 365 quietly drifts into PCI scope
Even if you've outsourced payment processing, the way your team handles refunds, exceptions and customer data can pull Microsoft 365 into PCI scope without anyone noticing.
Read - Product8 Apr 2026 · 7 min
The hidden cost of unmanaged SharePoint
SharePoint sprawl rarely shows up as a line item. It shows up as slow projects, exposed data, and a Copilot rollout that has to be paused.
Read - Strategy22 Apr 2026 · 7 min
Why Copilot rollouts stall before they pay back
Most Microsoft 365 Copilot pilots get bought, lit up, and quietly stall. The problem usually isn't the AI - it's the data and the habits underneath it.
Read