Azure Information Protection
Better protect your sensitive information—anytime, anywhere
Control and help secure email, documents, and sensitive data that you share outside your company. From easy classification to embedded labels and permissions, enhance data protection at all times with Azure Information Protection—no matter where it’s stored or who it’s shared with.
Classify your data based on sensitivity
Configure policies to classify, label, and protect data based on its sensitivity. Classification with Azure Information Protection is fully automatic, driven by users, or based on recommendation.
Protect your data at all times
Add classification and protection information for persistent protection that follows your data—ensuring it remains protected regardless of where it’s stored or who it’s shared with.
Add visibility and control
Track activities on shared data and revoke access if necessary. Your IT team can use powerful logging and reporting to monitor, analyze, and reason over data.
Collaborate more securely with others
Share data safely with coworkers as well as your customers and partners. Define who can access data and what they can do with it—such as allowing to view and edit files, but not print or forward.
Ease of use
Data classification and protection controls are integrated into Microsoft Office and common applications to secure the data you’re working on with one click. In-product notifications such as recommended classification help users make right decisions.
Deployment and management flexibility
Help protect your data whether it’s stored in the cloud or in on-premises infrastructures. You have the flexibility to choose how your encryption keys are managed, including Bring Your Own Key (BYOK) and Hold Your Own Key (HYOK) options.
"We sleep better at night knowing that the information is not accessible for parties who shouldn't access it. It's important for us to be sure that we can secure business critical data that we don't want to share with everybody else."
Related products and services
Azure Active Directory
Synchronize on-premises directories and enable single sign-on