Microsoft Purview Information Protection Reviews

We primarily use it for data labeling, specifically for labeling documents and emails.

The automated labeling feature in Microsoft Purview Information Protection has greatly enhanced our organization's security. By ensuring correct labeling of documents and emails, we effectively prevent sensitive data from being shared externally. This feature has strengthened our data protection measures and instilled confidence in managing access to our sensitive information within the organization. Microsoft Purview has saved me time, especially with the auto-labeling feature. It spared me from manually labeling extensive amounts of data. Quantifying the time saved is tricky since it is more of a day-to-day tool once implemented, rather than a specific time-saving task.

The automated labeling feature in Microsoft Purview Information Protection has been incredibly valuable for us. Before using it, we had a lot of unlabeled data, and the tool helped us quickly and accurately label a large number of documents. This saved us time and ensured our data was properly categorized and protected.

There is room for improvement with the policy tips feature. It seems inconsistent, working well in some web applications but not as effectively in desktop applications. The experience is a bit hit-and-miss, so refining the policy tips functionality across all platforms would be a valuable enhancement.

We have been working with Microsoft Purview Information Protection for four years.

Overall, I find the product to be very stable, especially with the essential features. However, there are some instances, like the policy tips, where it doesn't feel entirely right to me since there is a slight instability in certain aspects. Nonetheless, the critical features remain stable.

The scalability has been good. We haven't encountered any issues with two or three million documents.

I would rate Microsoft's technical support as a five out of ten. The main issue for me is difficulty in getting a technical person right away when raising a ticket. It often involves explaining the issue multiple times before reaching the right person, which can be frustrating.

Neutral

From a technology standpoint, the initial setup was easy, but user adoption was a challenge. There was a need for extensive user training and communication to familiarize everyone with the labeling behavior. As users adapted, the system started understanding the changing user behavior better.

Microsoft Purview has helped us avoid potential financial issues, especially in terms of GDPR fines, by ensuring full compliance with regulatory requirements. It is more about preventing problems than directly saving money, but it is valuable nonetheless.

The pricing and licensing for the product are quite expensive. Some advanced features are included in the E5 licensing, and it might be beneficial to see some of those features integrated into E3 to make it more accessible.

Microsoft Purview, along with Information Protection tools, has been great for meeting rules like GDPR and HIPAA. We use features like sensitive information types, auto-labeling, and trainable classifiers to easily identify and manage data. If we need specific info, like PII data, the tool helps us quickly find and extract it. For us, it is very important that Purview Information Protection stops our sensitive corporate secrets and personal data from going into AI models. Before jumping into AI tech, we want to be sure all the safeguards are in place. Keeping our data secure within our system is crucial, and having everything set up right is a top priority for us. Microsoft Purview integrates seamlessly with the productivity and security tools we regularly use. It is essentially a one-stop solution for me. While we might have adopted a boundary-level technology, I wouldn't say it's necessary because the current tooling covers our needs well. Having a single solution for information protection is crucial for our operations. It is a complex task, and having everything under one umbrella is much easier for me than dealing with different solutions for different types of data. It simplifies things and works well for our needs. Overall, I would rate Microsoft Purview Information Protection as an eight out of ten.

Our primary use case is for applying sensitivity labels to sensitive content, including in emails, OneDrive, and SharePoint. 

Purview Information Protection helped to reduce the number of solutions we need to interact with each other, and it's very valuable to have in small to mid-sized organizations; that's where it shines the brightest. The effect on the complexity of data governance depends on the organization; if a company is only concerned about PII and Office 365 apps, then they don't need other services such as DLP tools, data classification tools, discovery tools, etc. Those can all be eliminated because Purview is a catchall product; you can classify data using sensitivity labels and integrate that with DLP. You can write DLP rules or policies based on what's specified in the sensitivity labels, so separate apps and tools could be unnecessary depending on the organizational requirements.   Reduced Number of Solutions/Complexity of Data Governance

The solution provides good visibility into our estate and is very helpful for gaining visibility into a client's Office 365 estate.  Visibility Into Estate

Purview enables us to show compliance in real time, though I have yet to be in a meeting with a compliance regulator.  Show Compliance in Real Time

The product helped reduce our time to action on insider threats, and it's great for that. We can specify who has access to specific labels, so if a group like HR doesn't have access, they won't be able to see the content. In terms of insider threat, Purview is a powerful tool.  Reduced Time to Action-Insider Threats

The solution is great for helping us stay on top of compliance; we can go through the compliance manager section in the app and use a risk assessment template. Purview recommends actions, so going through a cybersecurity framework is huge for compliance. It's also pretty straightforward to use.  Stay On Top Of Compliance

We can restrict access or specify who can see sensitivity labels, which can be based on the classification level. We can encrypt restricted content and limit who can see that from an internal view, too, so Purview is a powerful tool.

Purview delivers data protection across multi-platform and multi-cloud environments, including AWS and GCP, which is essential. It's definitely a meaningful integration. DLP Across Multi-cloud, Multi-platform Environments- Importance

The solution lets us connect to iOS, Mac, and Android devices, plus data from other SaaS apps. This is vital, as employees are not just accessing MS suite applications; they're typically going all over the internet using web-based or desktop apps. There's value in looking at Microsoft apps, but it's essential to see the whole landscape rather than just the 365 suite. Connect to iOS, Mac, Android Devices and SaaS apps- Importance

Purview's native and integrated compliance across Azure Dynamics 365 and Office 365 is good, and the classification is reasonable. Native and Integrated Compliance Across Other Microsoft- Importance 

The fact that Purview was built to take into account critical regulations from around the world is essential. It's necessary, as the more information we can protect, the better. Takes Into Account Critical Regulations- Importance

Regarding DLP for remediating policy violations, the product is excellent; we can alert on policy violations, block and so on. The current capabilities are typical, but we can get pretty deep in finding and specifying remediation outcomes using Boolean Logic. So, if content contains X, X, and X, we can trigger specific actions. The solution is beneficial in this regard, and the UI is easy to navigate.  DLP-Remediating Policy Violations- Importance

Purview's DLP is very good for educating users on how best to handle sensitive data, and it comes in the form of policy tips and email notifications. Policy tips are great; this capability alone is fantastic for spreading cybersecurity and data protection awareness. When the policy tips are implemented, it reinforces our organizational standards, which is excellent.  DLP-Educating Users On Handling Sensitive Data 

Our primary concern is third-party application visibility. Many people choose other DLP tools, as they can search the Office 365 suite and detect sensitive information across thousands of other apps. The product is weak compared to the competitors on the DLP front, but the classification is good; the tool needs a bit more maturation.

I want to see Microsoft being more flexible; Purview is excellent for an MS environment, but we can't use the DLP capabilities with third-party products, so it's limited there. We can use other tools for that, but it would be good if Microsoft implemented that.

I want to see more robust reporting capabilities; reporting in dashboards and navigating through alerts can be laborious. If Microsoft could develop the reporting, the product would be more beneficial.

We've been using the solution for about a year and a half.

I reached out to technical support once and didn't get a response. The tool is easy to use, and you don't need much background information to navigate the tenant, but the one time I reached out, they didn't get back to me. Therefore, I can't rate them as we've never interacted.

The product is affordable, and our clients agree. Sensitivity labels come with the MIP license at an additional $2 a month per user, an excellent deal for auto-labeling capabilities.

I rate the solution seven out of ten.