Secure and govern AI apps and agents with Microsoft Purview

The Microsoft Purview family is here to help you secure and govern data across third party IaaS and Saas, multi-platform data environment, while helping you meet compliance requirements you may be subject to. Purview brings simplicity with a comprehensive set of solutions built on a platform of shared capabilities, that helps keep your most important asset, data, safe.

Figure 1: Microsoft Purview discovers, protects, and governs your data

With the introduction of AI technology, Purview also expanded its data coverage to include discovering, protecting, and governing the interactions of AI apps and agents, such as Microsoft Copilots like Microsoft 365 Copilot and Security Copilot, Enterprise built AI apps like Chat GPT enterprise, and other consumer AI apps like DeepSeek, accessed through the browser. 

Figure 2: Microsoft Purview discovers, protects, and governs interactions for AI apps and agents

To help you view, investigate interactions with all those AI apps, and to create and manage policies to secure and govern them in one centralized place, we have launched Purview Data Security Posture Management (DSPM) for AI. You can learn more about DSPM for AI here with short video walkthroughs: Learn how Microsoft Purview Data Security Posture Management (DSPM) for AI provides data security and compliance protections for Copilots and other generative AI apps | Microsoft Learn

Purview capabilities for AI apps and agents

To understand our current set of capabilities within Purview to discover, protect, and govern various AI apps and agents, please refer to our Learn doc here: Microsoft Purview data security and compliance protections for Microsoft 365 Copilot and other generative AI apps | Microsoft Learn

Here is a quick reference guide for the capabilities available today:

Figure 3: Microsoft Purview capabilities to secure and govern Microsoft Copilot and agent experiences

Note that currently, DLP for Copilot and adhering to sensitivity label are currently designed to protect content in Microsoft 365. Thus, Security Copilot and Coplot in Fabric, along with Copilot studio custom agents that do not use Microsoft 365 as a content source, do not have these features available.

Figure 4: Microsoft Purview capabilities to secure and govern Enterprise AI apps

Figure 5: Microsoft Purview capabilities to secure and govern Other AI apps

Please see list of AI sites supported by Microsoft Purview DSPM for AI here

Conclusion

Microsoft Purview can help you discover, protect, and govern the prompts and responses from AI applications in Microsoft Copilot experiences, Enterprise AI apps, and other AI apps through its data security and data compliance solutions, while allowing you to view, investigate, and manage interactions in one centralized place in DSPM for AI.

Follow up reading

Check out the deployment guides for DSPM for AI

• How to deploy DSPM for AI - https://aka.ms/DSPMforAI/deploy
• How to use DSPM for AI data risk assessment to address oversharing - https://aka.ms/dspmforai/oversharing
• Address oversharing concerns with Microsoft 365 blueprint - aka.ms/Copilot/Oversharing

Explore the Purview SDK

• Microsoft Purview SDK Public Preview | Microsoft Community Hub (blog)
• Microsoft Purview documentation - purview-sdk | Microsoft Learn
• Build secure and compliant AI applications with Microsoft Purview (video)

References for DSPM for AI

• Microsoft Purview data security and compliance protections for Microsoft 365 Copilot and other generative AI apps | Microsoft Learn
• Considerations for deploying Microsoft Purview AI Hub and data security and compliance protections for Microsoft 365 Copilot and Microsoft Copilot | Microsoft Learn
• Block Users From Sharing Sensitive Information to Unmanaged AI Apps Via Edge on Managed Devices (preview) | Microsoft Learn as part of Scenario 7 of Create and deploy a data loss prevention policy | Microsoft Learn
• Commonly used properties in Copilot audit logs - Audit logs for Copilot and AI activities | Microsoft Learn
• Supported AI sites by Microsoft Purview for data security and compliance protections | Microsoft Learn
• Where Copilot usage data is stored and how you can audit it - Microsoft 365 Copilot data protection and auditing architecture | Microsoft Learn
• Downloadable whitepaper: Data Security for AI Adoption | Microsoft

Explore the roadmap for DSPM for AI

• Public roadmap for DSPM for AI - Microsoft 365 Roadmap | Microsoft 365PMPur