Implement capabilities from Microsoft Information Protection (MIP) to help you discover, classify, and protect sensitive information wherever it lives or travels.

Capabilities

Sensitivity labels

A single solution across apps, services, and devices to label and protect your data as it travels inside and outside your organization.

​

Azure Information Protection unified labeling client

For Windows computers, extends labeling to File Explorer and PowerShell, with additional features for Office apps if needed

Double Key Encryption

Under all circumstances, only your organization can ever decrypt protected content or for regulatory requirements, you must hold encryption keys within a geographical boundary.

Office 365 Message Encryption (OME)

Encrypts email messages and attached documents that are sent to any user on any device, so only authorized recipients can read emailed information.

​

Service encryption with Customer Key

Protects against viewing of data by unauthorized systems or personnel, and complements BitLocker disk encryption in Microsoft datacenters.

​

SharePoint Information Rights Management (IRM)

Protects SharePoint lists and libraries so that when a user checks out a document, the downloaded file is protected so that only authorized people can view and use the file according to policies that you specify.

​

Rights Management connector

Protection-only for existing on-premises deployments that use Exchange or SharePoint Server, or file servers that run Windows Server and File Classification Infrastructure (FCI).

​

Azure Information Protection unified labeling scanner

Discovers, labels, and protects sensitive information that resides in data stores that are on premises.

​

Microsoft Defender for Cloud Apps

Discovers, labels, and protects sensitive information that resides in data stores that are in the cloud.

​

Azure Purview

Identifies sensitive data and applies automatic labeling to content in Azure Purview assets. These include files in storage such as Azure Data Lake and Azure Files, and schematized data such as columns in Azure SQL DB, and Cosmos DB.

​

Microsoft Information Protection SDK

Extends sensitivity labels to third-party apps and services.

​

​

​