AI Defense Stack

GenAI data-leak prevention & privacy

Microsoft Purview Data Security Posture Management (DSPM) for AI: cloud data security posture service for AI use

Purview DSPM for AI is a cloud data security posture service for AI use from Microsoft. It is a commercial product offered as: SaaS, Browser extension. Pricing model: usage-based.

  • Last reviewed
Visit Purview DSPM for AI (opens in a new tab) Documentation (opens in a new tab)
Commercial Renamed Layer 5: Data protection

Best for

Microsoft 365 organizations that want AI usage reporting and DLP controls for Copilot and third-party AI apps inside the Purview portal

Ownership

Microsoft's docs say this article covers the classic version of DSPM for AI, which is now replaced with a new version named Data Security Posture Management. Source, checked October 21, 2026: learn.microsoft.com (opens in a new tab)

Consider instead if

  • You want AI data controls that run outside the Microsoft 365 and Purview ecosystem. See Nightfall.
  • You want a Google Cloud service that detects and de-identifies sensitive data through an API. See Google Cloud Sensitive Data Protection.

What Purview DSPM for AI does

Microsoft Purview Data Security Posture Management (DSPM) for AI is Microsoft's service for seeing and controlling how data is used with AI apps. It runs in the Microsoft Purview portal and reuses Purview's data loss prevention, sensitivity labels, audit and insider risk tools. The docs describe reports and an activity explorer for AI interactions, one-click policies that warn or block users from pasting sensitive data into third-party generative AI sites, and a weekly data risk assessment for oversharing in SharePoint. Third-party AI sites need devices onboarded to Purview, and visit discovery uses the Purview browser extension. The classic DSPM for AI has been replaced by a newer DSPM version. It is closed source, and AI apps other than Microsoft 365 Copilot need pay-as-you-go billing.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Vendor
Microsoft Source, checked October 21, 2026: learn.microsoft.com (opens in a new tab)
Status
Renamed Source, checked October 21, 2026: learn.microsoft.com (opens in a new tab)
Ownership
Microsoft's docs say this article covers the classic version of DSPM for AI, which is now replaced with a new version named Data Security Posture Management. Source, checked October 21, 2026: learn.microsoft.com (opens in a new tab)
Open source
No: closed source (proprietary) Source, checked October 21, 2026: learn.microsoft.com (opens in a new tab)
Latest release
Not documented in the sources we checked
Deployment
SaaS, Browser extension Source, checked October 21, 2026: learn.microsoft.com (opens in a new tab)
Pricing model
Usage-based: Docs: for AI apps other than Microsoft 365 Copilot and Microsoft Facilitator, pay-as-you-go billing must be set up. Monitoring Microsoft 365 Copilot needs a Microsoft 365 Copilot license. No prices are stated. (as listed on October 21, 2026; check the vendor for current pricing) Source, checked October 21, 2026: learn.microsoft.com (opens in a new tab)
Website
microsoft.com Source, checked October 21, 2026: microsoft.com (opens in a new tab)
Documentation
learn.microsoft.com Source, checked October 21, 2026: learn.microsoft.com (opens in a new tab)
API reference
Not documented in the sources we checked
Quickstart
learn.microsoft.com Source, checked October 21, 2026: learn.microsoft.com (opens in a new tab)
Security page
Not documented in the sources we checked
Attestations or disclosure
Not documented in the sources we checked

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Integrations

Where Purview DSPM for AI fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that Purview DSPM for AI covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L5 Data Data protection Primary Keep sensitive data out of prompts, uploads, retrieval and training data, or remove and tokenize it first. Follows its category, GenAI data-leak prevention & privacy
L2 Discovery Discovery and posture Also covers Documents a list of the AI apps and agents in use across the organization. Detects visits to third-party generative AI sites from browser activity and lists the AI apps and agents in use
L8 Monitoring Monitoring and response Also covers Documents prompts and responses recorded in the unified audit log and shown in an activity explorer. Records prompts and responses in the unified audit log and shows them in an activity explorer

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

OWASP LLM risks mapped to Purview DSPM for AI, with the capabilities each mapping rests on
RiskHow it appliesBased on
LLM02 Sensitive Information Disclosure Detects sensitive data in prompts and responses and applies DLP policies that warn or block sharing with AI apps. Warns or blocks users from sharing sensitive information with third-party generative AI sites in a browser; Finds sensitive data in prompts and responses using sensitive information types and trainable classifiers; Applies DLP policies in Edge, Chrome and Firefox to sensitive information pasted into AI sites; Provides ready-to-use one-click policies to protect data and prevent data loss in AI prompts

Not mapped in our analysis: LLM07, LLM08. These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.

Alternatives and related tools

More in GenAI data-leak prevention & privacy, ranked within the category by Coverage Score.

Protecto

Protecto

Commercial
  • SaaS
  • On-prem
  • API

Detects sensitive data and tokenizes or masks it before it reaches LLMs, RAG pipelines and agents.

Best for: Teams that want an API that tokenizes or masks sensitive data before it reaches LLMs and RAG pipelines and restores it afterwards

Coverage Score 70 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM08 Vector and Embedding Weaknesses

Reviewed

Presidio

Data Privacy Stack

Open sourceMIT
  • Library
  • Self-hosted

Finds and masks personal data in text, images and structured data, and you run it yourself.

Best for: Engineering teams that want a free, self-hosted library to detect and anonymize PII before text reaches a model or a log

Coverage Score 67 out of 100
  • LLM02 Sensitive Information Disclosure

Reviewed

Limina (Private AI)

Limina

Commercial Freemium Now Limina
  • Self-hosted
  • On-prem
  • API

Detects PII, PHI and PCI in text, files, images and audio in a container you run in your own environment.

Best for: Teams that need PII, PHI and PCI de-identification of text, files and audio that runs inside their own VPC or on-premises

Coverage Score 64 out of 100
  • LLM02 Sensitive Information Disclosure

Reviewed

Purview DSPM for AI FAQ

Is Purview DSPM for AI the same as Microsoft Purview AI Hub?

Microsoft's docs say DSPM for AI was named Microsoft Purview AI Hub while in preview. The DSPM for AI version is now labeled classic and replaced by a newer Data Security Posture Management version.

Is Purview DSPM for AI open source?

No. It is a Microsoft-hosted service used from the Purview portal, and we found no public source repository for it.

What does it need to monitor third-party AI sites?

The docs say devices must be onboarded to Microsoft Purview, and the Purview browser extension is needed to discover visits to third-party generative AI sites with an Insider Risk Management policy.

Key facts you can cite

We have no commercial relationship with Microsoft.

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.