# Microsoft Purview - **Type:** Software product - **Website:** https://www.microsoft.com/en-us/security/business/microsoft-purview - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) Microsoft's data governance software inside Microsoft 365 and Azure, for organisations that want to watch sensitive data moving through Copilot and other AI apps. You run it yourself. ## Microsoft Purview scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 5/5 Purview Audit (Premium) and eDiscovery Premium are documented to capture, retain and legal-hold Copilot prompts/responses, and Compliance Manager maps controls to named regulatory templates for evidence assembly (learn.microsoft.com/en-us/purview/audit-copilot). ### Qualifications of the people who do the work: 4/5 Microsoft publishes verifiable SOC 1/2/3 and ISO 27001/27701/42001 certifications on its compliance hub, though a single named leader for the Purview AI-governance product specifically could not be confirmed at time of research. ### What it publishes about fees: 5/5 Microsoft's own pricing page lists a real published number, Purview Suite at $12.00/user/month paid yearly, not a 'contact sales' placeholder (microsoft.com/en-us/security/business/purview-suite-pricing). ### Knowledge of your sector: 3/5 Compliance Manager ships regulation-specific templates (e.g. HITRUST for healthcare, FedRAMP for government) but Purview itself remains a horizontal data-governance product rather than a set of named vertical modules. ### Independence from what it sells: 5/5 Purview's underlying SOC 1/2/3 and ISO 27001/27701/42001 attestations are independently audited third-party certifications listed on Microsoft's compliance hub, not self-declared claims. ### Who carries the risk if the advice is wrong: 5/5 Microsoft publishes a Data Protection Addendum (aka.ms/DPA) and an Online Services SLA schedule (aka.ms/CSLA) that set out liability and uptime commitments applicable to Purview as part of Microsoft 365/Azure. ## Sources for Microsoft Purview Every line carries the page it was read on and the date it was checked. - Parent company registration - Source: https://find-and-update.company-information.service.gov.uk/company/01624297 - Checked: 2026-07-17 - DSPM for AI product scope - Source: https://learn.microsoft.com/en-us/purview/dspm-for-ai - Checked: 2026-07-17 - Pricing disclosure - Source: https://www.microsoft.com/en-us/security/business/purview-suite-pricing - Checked: 2026-07-17 - UK government availability - Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-g-cloud-uk - Checked: 2026-07-17 - Certification portfolio - Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-home - Checked: 2026-07-17 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Published - Indemnity cover: Published - Credentials: Published - Independent accreditation: Published - Client results: Published - How it uses AI: Published ## Strengths - Publishes a real list price ($12/user/month for Purview Suite), rare among AI-governance vendors, most of which gate pricing behind a sales call - Backed by an extensive, independently audited certification portfolio (ISO 27001/27701/42001, SOC 1/2/3, FedRAMP High) - Native integration with Microsoft 365 Copilot, Entra and Azure AI Foundry means AI-activity logging doesn't require a separate agent or connector - Purview Audit (Premium) and eDiscovery Premium can capture and legal-hold Copilot prompts and responses for regulatory or litigation evidence ## Things to check Each one carries the factual basis it rests on. - The headline $12/user/month price is an add-on that requires an existing Microsoft 365 E3 (or Office 365 E3 + EMS E3) licence, and full AI-prompt capture for non-Copilot AI apps needs the pricier E5 tier, so the effective cost is higher than the sticker price implies. - Basis: Microsoft's pricing page states the Purview Suite price 'Requires: Microsoft 365 E3; or Office 365 E3 and Enterprise Mobility + Security E3', and Microsoft Learn ties full prompt capture to E5/E5 Compliance licensing (microsoft.com/en-us/security/business/purview-suite-pricing; learn.microsoft.com/en-us/purview/dspm-for-ai). - Microsoft's own documentation labels the described DSPM for AI capability as a 'classic' version being superseded by a newer release, meaning scope and terminology are still changing. - Basis: The Microsoft Learn DSPM for AI page itself flags the documented version as classic/being replaced (learn.microsoft.com/en-us/purview/dspm-for-ai). - No Purview-specific ISO/IEC 42001 certification was found; the AI-management-system certification Microsoft has published names Azure AI Foundry Models and Security Copilot as the certified scope, not Purview. - Basis: Microsoft's own announcement names 'Azure AI Foundry Models and Microsoft Security Copilot' as the certified scope, not Purview (azure.microsoft.com blog on ISO/IEC 42001:2023 certification). ## Where this firm appears - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Does the EU AI Act apply to a UK firm?](https://theassurancedesk.com/best/eu-ai-act-exposed) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Which data protection, AI governance and cyber security providers publish a price?](https://theassurancedesk.com/lists/providers-that-publish-a-price) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.