Published Dec 1, 2025
Microsoft is updating Purview Data Security Posture Management (DSPM) with unified visibility across traditional and AI environments, AI observability, enhanced reporting, and third-party data integration. Public preview starts December 2025; general availability begins June 2026. Existing policies remain unchanged; no admin action required.
Updated March 18, 2026: We have updated the timeline. Thank you for your patience.
Introduction
Microsoft is introducing a major evolution of Purview Data Security Posture Management (DSPM) to help organizations strengthen data security and confidently embrace AI. The new DSPM experience unifies visibility and control across traditional data and AI-driven environments, delivering outcome-based guided workflows that turn insights into actionable steps—so teams can prioritize risks and remediate faster. It brings AI observability, enhanced posture reporting, and intelligent Security Copilot agents to automate tasks like triage and policy management.
Purview now also extends coverage beyond Microsoft data with third-party signals from partners like BigID, Cyera, OneTrust, and Varonis, giving security teams a single, streamlined view of sensitive data across clouds and platforms. Additionally, Data Risk Assessments are extended to Fabric and item-level analysis with new remediation actions like bulk disabling of overshared SharePoint links.
This message is associated with Microsoft 365 Roadmap ID 532728.
When this will happen:
How this affects your organization:
What you can do to prepare:
Learn more:
Compliance considerations:
| Compliance Area | Explanation |
|---|---|
| AI/ML capabilities interacting with customer data | Security Copilot agents automate triage and policy management. |
| Integration with 3rd party software | Adds signals from BigID, Cyera, OneTrust, and Varonis. |
| Admin reporting and monitoring | Enhanced posture reporting and remediation actions introduced. |