Global Tool Radar

Security & Privacy / Data Loss Prevention (DLP) Software

Microsoft Purview Data Loss Prevention Review, Pricing, Pros & Cons

Microsoft Purview Data Loss Prevention is a cloud-managed policy system for detecting sensitive content, coaching or blocking users, recording activity, and investigating data-loss events across Microsoft and connected environments.

Research by Global Tool Radar Research SystemEvidence checked: Sep 23, 2026AI-assisted · No Global Tool Radar hands-on testView research methodology
Visit product websiteChoose similar tools to compare

Buying snapshot

Quick buying snapshot

A compact view of who this tool fits, what it costs, and what to confirm before choosing it.

Best for
  • Most sensitive collaboration already occurs in Microsoft 365: DLP policy is native to Exchange Online, SharePoint Online, OneDrive, Teams, Office applications, and eligible Microsoft 365 Copilot workflows, with central policy and activity reporting.
  • The program needs endpoint controls for supported Windows and macOS devices: Endpoint DLP can audit, warn, allow justified override, or block activities such as clipboard use, printing, USB copying, network-share copying, restricted-app access, and cloud uploads after devices are onboarded.
More buying conditions
  • The buyer wants risk-adaptive DLP inside the Microsoft Purview ecosystem: Adaptive Protection can use Insider Risk Management risk levels to vary DLP policy for Exchange Online, Devices, and Teams when the required advanced entitlements are present.
  • The organization can deploy and fund supported browser or network enforcement for unmanaged cloud and AI apps: Purview can enforce in Edge for Business and through supported SASE or secure-browser integrations, but network and selected unmanaged-app scenarios require consumption billing and infrastructure configuration.
Not for
  • The procurement requires one standalone DLP SKU with one public all-channel price: Microsoft publishes DLP through multiple containing licenses and consumption meters rather than a standalone DLP edition ladder.
  • The environment is primarily non-Microsoft and cannot deploy supported traffic or cloud-app integrations: Broad non-Microsoft browser and network enforcement depends on Edge management, supported SASE or secure-browser integration, Microsoft identity, and pay-as-you-go configuration.
More buying conditions
  • The organization cannot operate a staged policy-testing and tuning program: Microsoft recommends simulation, monitoring, condition refinement, sensitive-information-definition tuning, and user training before restrictive enforcement.
  • On-premises repository protection must work without Windows Server, SQL, service identities, labels, or scanner operations: On-premises DLP relies on the Information Protection scanner and its repository, identity, rights-management, client, SQL, and policy prerequisites.
Pricing
  • Microsoft does not publish Data Loss Prevention as a standalone SKU or edition ladder. Baseline Microsoft 365 workload DLP is an entitlement inside eligible licenses; advanced user-based DLP comes through Microsoft Purview Suite, Microsoft 365 E5, or equivalent licenses; selected non-Microsoft, browser, network, and at-rest protection uses Azure-linked consumption billing.
Free or trial access
  • No permanent free Microsoft Purview DLP plan is published. Microsoft advertises a Microsoft Purview Suite trial, but that temporary broader-suite access is not a DLP pricing plan.

Product scope

Product functionality and purchase scope

This profile evaluates Microsoft's DLP policy capability across licensed Microsoft 365 workloads, onboarded endpoints, supported cloud-app instances, Microsoft Fabric and Power BI, on-premises repositories, Microsoft 365 Copilot, and eligible browser or network traffic. Coverage statements assume the required user licenses, workload services, Azure consumption billing, connectors, device onboarding, and supporting Microsoft products are present; they do not imply that every channel is included in one license.

Product checked: Aug 12, 2026

Functionality reviewed
  • Core DLP for Exchange Online, SharePoint Online, and OneDrive for Business under eligible Microsoft 365, Office 365, or standalone workload licenses
  • DLP for Teams chat and channel messages under eligible E5, Purview Suite, or equivalent Information Protection and Governance entitlements
  • Endpoint DLP for onboarded supported Windows and macOS devices under eligible advanced entitlements
  • DLP policies for supported Microsoft Defender for Cloud Apps instances, Microsoft Fabric and Power BI workspaces, and Microsoft 365 Copilot where licensed
  • Inline browser DLP in Microsoft Edge for Business under the applicable per-user and pay-as-you-go state
  • Network DLP through a supported SASE or secure-browser integration with Microsoft Purview pay-as-you-go billing
  • DLP for on-premises file shares and supported SharePoint Server repositories through the Microsoft Purview Information Protection scanner
  • DLP alerts, Activity Explorer, Microsoft 365 audit records, and eligible Defender XDR and Microsoft Sentinel incident workflows
Non-target functionality excluded from scoring
  • Microsoft Purview Information Protection classification, sensitivity labeling, encryption, and scanner functions except where they directly supply DLP conditions or enforcement
  • Microsoft Purview Insider Risk Management policies, cases, user-risk analytics, and investigations except the Adaptive Protection risk-level signal consumed by DLP
  • Microsoft Purview Data Security Posture Management, Data Security Investigations, Communication Compliance, eDiscovery, Audit, Records Management, Data Lifecycle Management, and Compliance Manager as separate solutions
  • Microsoft Purview Suite, Microsoft 365 E3, Microsoft 365 E5, Office 365, education, government, frontline, and business suites as products; they are licensing routes rather than DLP editions
  • Microsoft Defender for Cloud Apps, Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra Internet Access, Microsoft Intune, Microsoft Edge for Business, and Microsoft 365 Copilot as separately licensed products or services
  • Third-party SASE, secure-browser, SIEM, network, endpoint, cloud-app, storage, and professional or managed services
  • Preview capabilities as proof of production-ready availability, service levels, or universal geographic support
Purchase paths

Pricing checked: Sep 23, 2026

  • Microsoft 365 E3 core DLP: Obtain core DLP for Exchange Online, SharePoint Online, and OneDrive for Business through Microsoft 365 E3. E3 is a broader suite and does not provide the full Endpoint, Teams, Copilot, risk-adaptive, browser, network, or extended incident scope by itself.
  • Microsoft Purview Suite: Add advanced user-based Data Loss Prevention and the rest of the Purview Suite to an eligible Microsoft 365 E3 base or Office 365 E3 plus Enterprise Mobility + Security E3 base.
    • $12.00 USD · per user · per month · billed annually · annual · Requires Microsoft 365 E3, or Office 365 E3 and Enterprise Mobility + Security E3
  • Microsoft 365 E5: Obtain all Microsoft Purview Suite capabilities through a broader Microsoft 365 productivity, identity, endpoint, threat-protection, analytics, and compliance plan. With-Teams and no-Teams states are separate bundle offers, not DLP plans.
    • $60.00 USD · per user · per month · Microsoft 365 E5 with Teams · billed annually · annual · Microsoft 365 E5 with Microsoft Teams
    • $51.45 USD · per user · per month · Microsoft 365 E5 without Teams · billed annually · annual · Microsoft 365 E5 without Microsoft Teams
  • Microsoft Purview pay-as-you-go data security: Link the Microsoft 365 tenant to an Azure subscription for supported at-rest or in-transit Information Protection and DLP policies. At-rest protection is metered by protected assets and in-transit protection by policy-scoped requests; the current public table did not expose numeric U.S. rates.
What is included, connected, or sold separately

Product scope

What is included, connected, or sold separately

Material capabilities are separated by their verified relationship to the target product.

Core DLP for Exchange Online, SharePoint Online, and OneDriveIncluded capability

Core workload DLP is part of the target but requires an eligible Microsoft 365, Office 365, SharePoint, OneDrive, Exchange, or Purview entitlement for each benefiting user.

Official source
DLP for onboarded supported Windows and macOS devicesIncluded capability

Endpoint DLP is an advanced target capability, not Defender for Endpoint. Eligible E5, Purview Suite, or equivalent licensing and device onboarding are required.

Official source
Pay-as-you-go DLP for supported cloud-app traffic across the networkIncluded capability

Network DLP is part of the target policy system but is consumption-billed and needs a supported SASE or non-Microsoft secure-browser integration. Some documented scenarios remain preview.

Microsoft Purview Network Data Security
Official source
DLP alert correlation, hunting, and in-place response in Defender XDRNative integration

Eligible advanced licensing is required. Defender XDR is an integrated incident platform, not an included standalone DLP plan.

Microsoft Defender XDR
Official source
DLP alerts incorporated into Microsoft Sentinel security workflowsNative integration

Microsoft Sentinel is a separate SIEM with its own workspace, ingestion, retention, and commercial terms.

Microsoft Sentinel
Official source
DLP rule matching and enforcement for supported on-premises repositoriesNative integration

The scanner is a separate Information Protection component used to apply target DLP rules to file shares and supported SharePoint Server repositories.

Microsoft Purview Information Protection scanner
Official source
Information Protection classifiers and sensitivity labels used as DLP conditionsNative integration

Information Protection is a separate Purview solution. DLP consumes its classifiers and labels; labeling, encryption, scanner, and auto-labeling rights must not be inferred from DLP alone.

Microsoft Purview Information Protection
Official source
Inline Edge for Business DLP for supported managed and unmanaged cloud-app scenariosNative integration

Managed-app Edge protection can be included with E5-equivalent licensing; protection for unmanaged apps from managed devices uses pay-as-you-go and Intune-managed Edge configuration.

Microsoft Edge for Business
Official source
Risk-adaptive DLP for eligible Exchange, Teams, and device policiesNative integration

Insider Risk Management is a separate solution. Adaptive Protection supplies minor, moderate, or elevated user-risk levels to eligible DLP rules when licensed and configured.

Microsoft Purview Insider Risk Management
Official source
Sensitive-content blocking in Teams chats and channel messagesNative integration

Teams DLP requires an eligible advanced license and the Microsoft Communications DLP service. Teams is a separate collaboration product.

Microsoft Teams
Official source
AI-powered deep-content data security investigationsSeparate product

Data Security Investigations has separate storage and compute meters and must not be represented as the DLP incident dashboard.

Microsoft Purview Data Security Investigations
Official source
Supported SASE and secure-browser enforcement connections for network DLPThird-party integration

Provider procurement, traffic forwarding, integration support, and licensing are separate from Purview DLP.

Supported SASE and non-Microsoft secure-browser providers
Official source
How the score is calculated

Scoring method

How the score is calculated

The score uses the category-specific buying dimensions below and their displayed weights.

This page is based on public product information, official sources, structured feature data, and multi-model AI evaluation. It is not a hands-on lab test unless explicitly stated. Confidence percentages describe our research indicators, not the probability that a claim is true or a measured accuracy rate.

Evidence confidence
81%
AI claim confidence
99%
Required-field evidence status
82%
Evidence freshness
66%
Field traceability
100%
Model agreement
95%
Why this confidence level
  • Evidence confidence uses source level and claim-to-source support; AI claim confidence is shown separately.
  • Required-field evidence status measures whether weighted required claims have evidence links; it does not mean every product behavior was independently verified.
  • 7 of 7 weighted claims have evidence links.
  • 13 A1 documentary official sources and 1 A2 official product sources are linked.
  • 2 independent review sources are retained, including 0 professional sources with an explicit hands-on method.
  • 3 weighted claims are past the review window.
  • No blocking evidence conflict was identified.
Channel and data coverage18%
85

The product spans supported Microsoft 365 workloads, endpoints, cloud apps, on-premises repositories, Fabric, Copilot, browser, and network locations, which gives it broad channel reach for Microsoft-centered environments.

Detection and classification accuracy18%
88

Employs document fingerprinting, exact data match, and trainable classifiers alongside traditional regular expressions to identify sensitive items.

Enforcement controls16%
86

Supports diverse endpoint actions including clipboard, print, USB, and network share blocks, but specific egress paths require SASE or secure browsers.

Incident operations14%
79

Aggregates security events into Activity Explorer and integrates with Microsoft Sentinel, though advanced hunting and security copilot require separate licensing.

Governance and integrations12%
82

Central DLP policy administration integrates with Information Protection labels and classifiers, Microsoft 365 audit telemetry, Defender XDR, and Microsoft Sentinel for organizations already standardized on those Microsoft governance and security surfaces.

User and risk context12%
75

Integrates with separate Insider Risk Management products to apply Adaptive Protection policies, which depends on purchasing the necessary license tiers.

Support and total cost10%
60

Lacks a standalone license, requiring organizations to purchase broad suites like M365 E5 or add-ons alongside possible Azure pay-as-you-go charges.

Public review signals

Exact-product feedback favors Microsoft ecosystem integration but flags operating complexity

Gartner Peer Insights and TrustRadius show favorable aggregate sentiment for Microsoft Purview Data Loss Prevention. Across the retained exact-product material, users value centralized policy and Microsoft 365 integration, while configuration effort, cross-workload consistency, alert latency, and tuning recur as cautions.

Public review signals updated: Aug 12, 2026

Commonly reported strengths

  • Centralized policy management and strong Microsoft 365 ecosystem integration reported on Gartner Peer Insights and TrustRadius
  • Sensitive-data detection and protection across collaboration, endpoint, and cloud workflows reported on both retained sources

Commonly reported concerns

  • Configuration and policy tuning require substantial care, as reflected in both retained sources
  • Cross-workload consistency and incident-response timing can be uneven, as reflected in Gartner Peer Insights and TrustRadius material
Gartner Peer Insights4.3/5
Rating count
60 ratings
Source context
Microsoft Purview Data Loss Prevention in Data Loss Prevention on Gartner Peer InsightsExact product
View sourceHistory baseline established: Aug 12, 2026
TrustRadius7.7/10
Reviews and ratings
32 reviews and ratings
Source context
Microsoft Purview Data Loss Prevention Reviews and Insights on TrustRadiusExact product
View sourceHistory baseline established: Aug 12, 2026
Score81
Pricing modelMicrosoft does not publish Data Loss Prevention as a standalone SKU or edition ladder. Baseline Microsoft 365 workload DLP is an entitlement inside eligible licenses; advanced user-based DLP comes through Microsoft Purview Suite, Microsoft 365 E5, or equivalent licenses; selected non-Microsoft, browser, network, and at-rest protection uses Azure-linked consumption billing.
Use caseidentify sensitive data and prevent risky use or exfiltration across Microsoft 365, endpoints, browsers, networks, cloud apps, AI, and stored data
Company sizeEnterprise, Mid-market
Structured tags

Microsoft Purview Data Loss Prevention tag profile

Company size
  • Enterprise
  • Mid-market
Key features

Microsoft Purview Data Loss Prevention core capabilities

  • Central DLP policy store spanning supported Microsoft 365 workloads, endpoints, cloud apps, on-premises repositories, Fabric, Copilot, browser, and network locations
  • Sensitive information types, regular expressions, validation, proximity, exact data match, document fingerprinting, trainable classifiers, labels, and OCR-supported text
  • Policy templates, custom conditions, administrative units, workload and identity scope, simulation, and policy tuning
  • Audit, policy tips, notifications, justified override, block, quarantine, access restriction, and location-specific enforcement
  • Endpoint controls for clipboard, print, USB, network share, restricted apps, browser upload, and other supported egress activities
  • DLP Alerts, Activity Explorer, Microsoft 365 audit records, Defender XDR incident correlation, hunting, and remediation
Detailed strengths and purchase cautions
Pros

Why it is worth considering

  • Provides systematic sensitive data discovery using exact data match, trainable classifiers, regular expressions, and OCR-supported text.
  • Supports dynamic policy adjustment by utilizing risk levels from separate Insider Risk Management subscriptions for Adaptive Protection.
  • Delivers endpoint controls that manage actions across clipboard, printing, USB storage, and unmanaged cloud apps.
Cons

What to confirm before buying

  • Lacks a standalone DLP plan, forcing buyers to acquire broader containing license suites like Microsoft 365 E5 or Purview Suite.
  • Requires multi-system infrastructure including Windows Server, SQL, and the Information Protection scanner to protect on-premises repositories.
  • Relies on preview capabilities for selected browser, network, Copilot, and unsupported-file controls, which require production validation.
Cross-model buying perspectives

Multi-AI review

Cross-model buying perspectives

Multiple AI models assess this tool against the same buying criteria, so you can compare scores, confidence, fit, cautions, and final views.

AI assessment updated: Sep 22, 2026

Score comparisonGPTGeminixAIRange
Channel and data coverage8684842
Detection and classification accuracy9088855
Enforcement controls8986836
Incident operations8280757
Governance and integrations8580815
User and risk context7875726
Support and total cost6160583
dlp data discovery classification9290866
dlp policy enforcement precision8885826
dlp incident workflow effectiveness84827410
dlp user coaching exception handling8388808
dlp channel coverage operability80726812
Where models differ
  • dlp channel coverage operability: 68–80 (12-point range)
  • dlp incident workflow effectiveness: 74–84 (10-point range)
  • dlp user coaching exception handling: 80–88 (8-point range)
GPTAI-assisted buyer perspective83

Microsoft Purview Data Loss Prevention fits organizations that already standardize on Microsoft 365 and need central DLP policy control across supported Microsoft workloads, endpoints, browser and network scenarios, and some on-premises repositories. The main tradeoff is that entitlement is split across Microsoft 365, Purview Suite, E5, and consumption-billed scenarios, so buyers need to verify which channels and controls are included for their specific licenses and deployment model.

Review confidence
83/100
Model details
Strengths
  • It provides a central DLP policy store that can span supported Microsoft 365 workloads, endpoints, cloud apps, on-premises repositories, Fabric, Copilot, browser, and network locations, which supports a single policy model across mixed Microsoft environments.
  • It includes detection methods such as sensitive information types, regular expressions, validation, proximity, exact data match, document fingerprinting, trainable classifiers, labels, and OCR-supported text, which gives buyers multiple ways to define sensitive content.
  • It supports policy templates, custom conditions, administrative units, workload and identity scope, simulation, and policy tuning, which helps teams stage and refine policies before broad enforcement.
  • It includes audit, policy tips, notifications, justified override, block, quarantine, access restriction, and location-specific enforcement, which supports both guided user response and active prevention.
Cautions
  • There is no standalone DLP SKU or single deterministic public price for every channel, so commercial planning depends on the specific Microsoft license mix and any Azure consumption billing.
  • Selected browser, network, non-Microsoft, and at-rest scenarios can add Azure consumption charges and deployment prerequisites, so the full cost and operating model can vary by use case.
  • Endpoint DLP, browser protection, network protection, and on-premises repository coverage all depend on supported devices, integrations, scanners, or SASE and secure-browser requirements, so coverage is not uniform across every environment.
  • Several browser, network, Copilot, unsupported-file, and advanced hunting functions are documented as preview, which makes production scope validation important before purchase.
GeminiAI-assisted buyer perspective81

Microsoft Purview DLP is a policy-driven data protection system for organizations standardizing on Microsoft 365, offering systematic discovery and incident correlation, though buyers must navigate complex license bundles and potential consumption-based charges.

Review confidence
81/100
Model details
Strengths
  • Provides systematic sensitive data discovery using exact data match, trainable classifiers, regular expressions, and OCR-supported text.
  • Supports dynamic policy adjustment by utilizing risk levels from separate Insider Risk Management subscriptions for Adaptive Protection.
  • Delivers endpoint controls that manage actions across clipboard, printing, USB storage, and unmanaged cloud apps.
Cautions
  • Lacks a standalone DLP plan, forcing buyers to acquire broader containing license suites like Microsoft 365 E5 or Purview Suite.
  • Requires multi-system infrastructure including Windows Server, SQL, and the Information Protection scanner to protect on-premises repositories.
  • Relies on preview capabilities for selected browser, network, Copilot, and unsupported-file controls, which require production validation.
xAIAI-assisted buyer perspective77

Microsoft Purview DLP fits Microsoft 365-centric buyers that will standardize policies across email, files, collaboration, endpoints, and eligible connected channels, provided they map each benefiting user to the correct E3, E5, or Purview Suite entitlement and accept onboarding plus possible Azure consumption for extended channels.

Review confidence
77/100
Model details
Strengths
  • A single policy store can cover supported Microsoft 365 workloads, endpoints, cloud apps, on-premises repositories, Fabric, Copilot, browser, and network locations under the matching entitlements.
  • Detection building blocks include sensitive information types, regular expressions with validation and proximity, exact data match, document fingerprinting, trainable classifiers, sensitivity labels, and OCR-supported text.
  • Enforcement actions include policy tips, notifications, justified override, block, quarantine, access restriction, and endpoint controls for clipboard, print, USB, network share, restricted apps, and browser upload on supported devices.
  • Incident handling can use DLP alerts, Activity Explorer, Microsoft 365 audit records, and Defender XDR correlation with hunting and remediation for teams already operating those Microsoft security workflows.
Cautions
  • DLP is not sold as a standalone SKU with one deterministic public price
  • rights depend on eligible Microsoft 365, Purview Suite, workload, or equivalent licenses for each benefiting user.
  • Microsoft 365 E3 covers core Exchange Online, SharePoint Online, and OneDrive DLP, while Teams, Endpoint DLP, advanced policy tips, Copilot restrictions, and other advanced scenarios need higher or add-on entitlements.
  • The published USD 12 per user per month amount, paid yearly in the U.S., is the Microsoft Purview Suite price that bundles DLP with other Purview products and still requires an eligible E3 base.

Research transparency

How this page was researched

A compact record of the evidence used, what was not tested, and which conclusions still need verification.

Official sources
13
Broad product review sources
2
Marketplace and app-store sources
0
Editorial sources
0
Latest evidence check
Sep 23, 2026
Research basis

Global Tool Radar generated this assessment from structured facts linked to public sources. No Global Tool Radar hands-on test is recorded in this page's research data. Any external hands-on assessment is identified separately and does not affect the Global Tool Radar score.

Conflict handling

Unresolved evidence is disclosed on the page; affected deterministic calculations and price schema are withheld when the conflict is blocking.

View research methodology
Verified findingsNo permanent free Microsoft Purview DLP plan is published. Microsoft advertises a Microsoft Purview Suite trial, but that temporary broader-suite access is not a DLP pricing plan.
  • Microsoft does not publish Data Loss Prevention as a standalone SKU or edition ladder. Baseline Microsoft 365 workload DLP is an entitlement inside eligible licenses; advanced user-based DLP comes through Microsoft Purview Suite, Microsoft 365 E5, or equivalent licenses; selected non-Microsoft, browser, network, and at-rest protection uses Azure-linked consumption billing.
  • Central DLP policy store spanning supported Microsoft 365 workloads, endpoints, cloud apps, on-premises repositories, Fabric, Copilot, browser, and network locations Sensitive information types, regular expressions, validation, proximity, exact data match, document fingerprinting, trainable classifiers, labels, and OCR-supported text Policy templates, custom conditions, administrative units, workload and identity scope, simulation, and policy tuning Audit, policy tips, notifications, justified override, block, quarantine, access restriction, and location-specific enforcement Endpoint controls for clipboard, print, USB, network share, restricted apps, browser upload, and other supported egress activities DLP Alerts, Activity Explorer, Microsoft 365 audit records, Defender XDR incident correlation, hunting, and remediation Adaptive Protection using separate Insider Risk Management risk levels for eligible Exchange, Teams, and device policies
  • DLP is acquired through containing Microsoft licenses and, for selected extended data-security scenarios, pay-as-you-go billing. Microsoft 365 E3 supplies core Exchange Online, SharePoint Online, and OneDrive DLP. Microsoft Purview Suite adds advanced Purview capabilities to an eligible E3 base, while Microsoft 365 E5 contains the Purview Suite capabilities within a broader productivity and security bundle. Microsoft requires a license for each user benefiting from user-based protection. Browser, network, non-Microsoft, and at-rest scenarios can add Azure consumption charges and deployment prerequisites.
Verification notes and unresolved itemsEditorial price verification 2026-09-23: official U.S. broader-suite offers are USD 60.00 for Microsoft 365 E5 with Teams, USD 51.45 without Teams, and USD 12.00 for the Purview Suite add-on, each per user/month with yearly billing and an annual auto-renewing subscription. These are not standalone DLP prices
  • eligible base-license and consumption charges still apply. The three existing review texts and all score rationales were checked against this price-only correction: none rely on the two old E5 amounts, so their existing scope, suitability, and cost-complexity conclusions are retained. Model reviews were not regenerated. Product capability and other source verification dates remain unchanged.
  • Verified 2026-08-12 in the United States pricing context.
  • Microsoft's former dedicated DLP marketing URL now resolves to the broader Microsoft Purview Data Security page, so the exact-product Learn page is used as the current official product entry.
  • No standalone DLP SKU, exact-target plan ladder, permanent free plan, or standalone price was found, so pricing.plans and pricing.startingPrice are empty.
Sources checked

Sources checked

Microsoft Purview Data Loss Prevention source links

Microsoft Purview pricing — editorial price check 2026-09-23MicrosoftLevel A1Linked to 2 scored claimsChecked Sep 23, 2026
Configure and install the Microsoft Purview Information Protection scannerMicrosoft CorporationLevel A1Linked to 1 scored claimChecked Aug 12, 2026
Investigate data loss alerts with Microsoft Defender XDRMicrosoft CorporationLevel A1Linked to 1 scored claimChecked Aug 12, 2026
Learn about Adaptive Protection in Data Loss PreventionMicrosoft CorporationLevel A1Linked to 1 scored claimChecked Aug 12, 2026
Overview of optical character recognitionMicrosoft CorporationLevel A1Linked to 0 scored claimsChecked Aug 12, 2026
Reduce false positives by using SITs and advanced classifiersMicrosoft CorporationLevel A1Linked to 1 scored claimChecked Aug 12, 2026
Learn about Microsoft Purview Network Data SecurityMicrosoft CorporationLevel A1Linked to 1 scored claimChecked Aug 12, 2026
Understand Data Loss Prevention in Microsoft Edge for BusinessMicrosoft CorporationLevel A1Linked to 1 scored claimChecked Aug 12, 2026

FAQ

Microsoft Purview Data Loss Prevention FAQ

Is Microsoft Purview Data Loss Prevention sold as a standalone plan?

No standalone DLP plan or numeric standalone price is published. DLP rights come through eligible Microsoft 365, Office 365, Purview Suite, workload, or equivalent licenses, with pay-as-you-go billing for selected extended scenarios.

What DLP does Microsoft 365 E3 include?

Microsoft states that Microsoft 365 E3 includes core DLP for Exchange Online, SharePoint Online, and OneDrive for Business. Teams, Endpoint DLP, advanced policy tips, Copilot restrictions, and other advanced scenarios require eligible higher or add-on entitlements.

Does the USD 12 Microsoft Purview Suite price represent DLP alone?

No. USD 12 per user per month, paid yearly, is the U.S. price for the broader Microsoft Purview Suite. It contains DLP plus Information Protection, Insider Risk Management, Audit, eDiscovery, Communication Compliance, lifecycle, records, Compliance Manager, and Copilot protection, and requires an eligible E3 base.

Are Endpoint DLP and Microsoft Defender for Endpoint the same product?

No. Endpoint DLP is a Microsoft Purview DLP capability for onboarded supported devices. Defender for Endpoint is a separate endpoint-security product and can participate in onboarding and investigation workflows, but it is not the DLP product.

Are Information Protection and Insider Risk Management included DLP features?

They are separate Purview solutions that integrate with DLP. Information Protection supplies labels and classifiers used as policy conditions; Insider Risk Management supplies risk levels for Adaptive Protection when the necessary entitlements are present.

Does browser or network DLP require additional billing?

Often. Microsoft states that selected unmanaged-app browser protection and network data security use pay-as-you-go billing; managed-app Edge scenarios can be included with Microsoft 365 E5-equivalent licensing. Network deployment also needs a supported SASE or secure-browser integration.

Can Purview DLP protect on-premises repositories?

Yes, for supported file shares and SharePoint Server repositories through the Microsoft Purview Information Protection scanner. The scanner, Windows Server, SQL, service account, label, rights-management, and licensing prerequisites must be satisfied.

Does DLP include full AI-powered incident investigation?

DLP includes alerts, Activity Explorer, triage, and eligible Defender XDR and Sentinel workflows. Microsoft Purview Data Security Investigations and Security Copilot are separate capabilities or products and should not be assumed from a DLP entitlement.

Popular comparisons

Common Microsoft Purview Data Loss Prevention comparisons

Only high-scoring and nearby tools from the same subcategory are shown, avoiding comparisons between unrelated use cases.

VS #1
Microsoft Purview Data Loss PreventionvsNetskope One DLP
81Gap 180

Enterprise / Mid-market

VS #2
Microsoft Purview Data Loss PreventionvsForcepoint DLP
81Gap 378

Enterprise / Mid-market

VS #3
Microsoft Purview Data Loss PreventionvsNetwrix Endpoint Protector
81Gap 774

Enterprise / Mid-market