Skip to main content
(844) 422-7000

What is data loss prevention?

Rules that spot a sensitive record leaving the company and stop it, as it is typed, sent or shared.

Two licenses grant it

Microsoft 365 Business Premium

Mail, SharePoint, OneDrive, Teams chat and devices.

$28

a seat, a month

Exchange Online Plan 2

Mail alone.

$10

a seat, a month

Who already has it

Microsoft 365 Business Premium is the only business plan that includes it. Business Basic, Apps for business and Business Standard do not, and neither frontline plan does.

Exchange Online Plan 2 is the cheaper answer where only mail is in scope.

What DLP rules do

Something sensitiveIN A FILE OR A MAILMatched by policyAS IT IS SENTWarned as they typeBEFORE IT GOESBlocked, or allowedWITH A RECORDED REASONLocked where it sitsMOVED TO QUARANTINENEW MAIL IS READ AS IT IS SENT, NOT MAIL ALREADY SITTING THERE
Something sensitiveIN A FILE OR A MAILMatched by policyAS IT IS SENTWHAT THE POLICY DOESWarned as they typeBEFORE IT GOESBlocked, or allowedWITH A RECORDED REASONLocked where it sitsMOVED TO QUARANTINEMAIL ALREADY SENT IS NOT RE-READ

Warning, blocking and quarantining are three settings on the same policy rather than three products. Which one applies is written into the rule.

  • Warn somebody, as they type, that what they are about to send looks sensitive.

  • Block the send outright, or allow it only with a written reason that is recorded.

  • Lock a file at rest and move it somewhere quarantined.

Which plans include it

Every plan compared on this site, and whether data loss prevention is part of it. Exchange Online Plan 2 is on the list because it answers for mail on its own.

PlanPer person, per monthIncluded
Microsoft 365 Business Basic
$9

Not included

Microsoft 365 Apps for business
$13

Not included

Microsoft 365 Business Standard
$18

Not included

Microsoft 365 Business Premium
$28

Included

Microsoft 365 F1
$4

Not included

Microsoft 365 F3
$13

Not included

Exchange Online Plan 2
$10

Included

Where it stops

It reads new mail as it is sent. It does not go back through mail already sitting in a mailbox or an archive. Files already in SharePoint and OneDrive are scanned.

Worth knowing

  • Covers mail, SharePoint, OneDrive, Teams chat, Windows and macOS devices, and on-premises file shares.

  • An on-premises file share needs a scanner deployed; a mailbox needs only a policy.

Common questions

Which plans include data loss prevention?

Business Premium and Exchange Plan 2. The frontline plans do not, and neither do Business Basic, Apps for business or Business Standard.

What does it cover?

Mail, SharePoint, OneDrive and Teams chat, plus Windows and macOS devices and on-premises file shares. That is the full set on Microsoft 365 Business Premium. Exchange Online Plan 2 covers mail on its own.

Does anything have to be installed?

A mailbox needs a policy and nothing else. An on-premises file share is the exception: it needs a scanner deployed to it.

How does this relate to Purview?

Purview is the area of Microsoft 365 where these rules are written and reported on. Data loss prevention is one of the things it holds, and the license that grants it is the one named above.

Related licensing questions

Requiring a second factor, or blocking a sign-in from an unexpected place or an unmanaged device.

Wiping a lost laptop, requiring a PIN, enforcing encryption.

Catching something that runs on a laptop, rather than something that arrives by mail.

The phone system inside Teams: numbers, voicemail, forwarding and call queues.

Microsoft’s assistant working inside Word, Excel, Outlook and Teams.

A Windows desktop that runs in the cloud and opens on whatever device is to hand.

Check it against the plan you are on

The comparison page prices every plan and shows which of them already includes this.

CloudCentric · Mount Pleasant, SC · serving Charleston and the Lowcountry(844) 422-7000