New retention policy locations and expanded support for Copilots and AI apps

May 2025

Audit
New Audit pay-as-you-go billing requirements to support audit logging for certain kinds of Copilot data.

Collection policies
In preview: Create and Deploy collection policies with its first scenario on classifying network traffic.
In preview: Collection policies policy reference
Updated: Collection policies solution overview

Communication Compliance
New Communication Compliance pay-as-you-go billing requirements for support of generative AI interactions.

Data Governance

• Updated: Data governance roles and permissions is updated to reflect the new Global Catalog Reader role and Local Catalog Reader role, which replace the Data Catalog Reader role.
• In preview: Duplication checks on names for business concepts (data products, critical data elements, glossary terms, and OKRs) will warn users and suggest choosing another name during the creation or editing process.
• In preview: Data observability (preview) for stewards and data product owners to view across the entire catalog of glossary terms and data products to improve governance and reduce data issues.
• General Availability (GA): If your Snowflake source is running on a virtual network or behind a private endpoint, you can now use Microsoft Purview data quality virtual network enabled compute to connect and perform data quality assessments, including profiling and rule-based scanning. This feature is now in GA and supported across all regions.
• In preview: If your Fabric Lakehouse tenant is running on a virtual network or behind a private endpoint, you can now use Microsoft Purview data quality virtual network enabled compute to connect and perform data quality assessments, including profiling and rule-based scanning. This feature is now in preview and supported across all regions.
• General availability (GA): Data health controls in Unified Catalog are now generally available (GA). Data Health Controls are specific measures, processes, and tools implemented to monitor, maintain, and improve the quality, security, and overall health of an organization's data.
• General availability (GA): The Data health report in Unified Catalog is now generally available (GA). The comprehensive report evaluates and summarizes the quality of data in your data estate, and identifies areas that need more work to improve data quality.

Data Lifecycle Management

• In preview: Rolling out, new retention policy locations and expanded support for Copilots and AI apps. Teams chats have been separated from Microsoft 365 Copilot interactions, with a location just for Teams chat. Current locations that support Copilot and other AI apps:

1. Microsoft Copilot experiences: Microsoft 365 Copilot, Security Copilot, Copilot in Fabric, Copilot Studio
2. Enterprise AI Apps: Microsoft Entra-connected AI apps, ChatGPT Enterprise, Azure AI Services
3. Other AI Apps: ChatGPT, Google Gemini, Microsoft Bing, DeepSeek

• In preview: Retention for the Teams chats location now includes the Teams Facilitator features of moderation for meetings, and questions and answers for meetings. Previously, just AI-generated notes for chats were included.

Data Loss Prevention
-In preview: Learn about Microsoft Purview Network Data Security (preview)

Data Security Posture Management for AI

• In preview: Rolling out, the new recommendation to Extend insights into sensitive data in AI app interactions, which creates a one-click policy that uses network data security to detect sensitive info types shared with AI apps in browsers, applications, APIs, add-ins, and more, using a Secure Access Service Edge or Security Service Edge integration.
• In preview: Rolling out, a new Apps and agents page to view AI apps and their agents used across your organization so you can identify and manage any potential data security risks.
• In preview: Rolling out, the new recommendation to Secure interactions from enterprise apps, which creates a one-click policy to capture prompts and responses for regulatory compliance from Entra-connected AI Apps, ChatGPT Enterprise Connector, and applications built on Azure AI services.
• New: Rolling out, new recommendation to Secure data in Azure AI apps and agents, which has set up instructions to monitor prompts and responses for AI apps that use one or more Azure AI subscriptions.

Device Onboarding

• New: Any mobile device management tool for Microsoft Defender for Endpoint customers.
• New: Any mobile device management tool for customers without Microsoft Defender for Endpoint.

eDiscovery

• New eDiscovery article that outlines the pay-as-you-go billing requirements for data storage of non-Microsoft 365 AI data in eDiscovery cases.
• eDiscovery retirements: To improve security and help protect you and your data, we have accelerated the timeline for the retirement of some eDiscovery features and experiences.

The following eDiscover experiences and features are retired as of May, 26, 2025:

1. Content Search in the eDiscovery (classic) experience
2. eDiscovery (Standard) in the eDiscovery (classic) experience
3. Export-related parameters in the New-ComplianceSearchAction, Get-ComplianceSearchAction, and Set-ComplianceSearchAction PowerShell cmdlets

Insider Risk Management

• New Insider Risk Management pay-as-you-go billing requirements to support generative AI-related indicators.
• In preview: New support for a Microsoft Security Copilot Agent for Insider Risk Management. The Microsoft Purview Insider Risk Management Triage Agent provides an agent-managed alert queue where the alerts about the highest risk activities are identified and prioritized on the Alert Triage Agent dashboard (preview). For more information, see Security Copilot Agents in Microsoft Purview Overview (preview).

Microsoft Purview billing models

• Updated: The Microsoft Purview Billing Models article is updated for network data security meters.

Sensitive Information Types

• Updated: New parameter definitions and advanced checksum validator capabilities added to Sensitive information type TEGEX validators and additional checks.

Sensitivity labels

• New: Three new sensitivity label auditing events to help you identify failed labeling operations: Failed to apply file sensitivity label; Failed to change file sensitivity label; Failed to remove file sensitivity label. These events can be particularly helpful for monitoring auto-labeling policies. Refer to the new table for a description of FailureReason property values for these activities.

Microsoft Security Copilot Agents

• In preview: Security Copilot Agents in Microsoft Purview Overview (preview) Microsoft Security Copilot agents are now available in Microsoft Purview. These agents are AI powered processes that help you with specific role based tasks.
• In preview: Get started with the Microsoft Purview Agents This article includes the prerequisites, permissions, and procedures to roll out and configure the Microsoft Purview agents.