What and Why
Data Security Posture Management (DSPM) in Microsoft Purview is now generally available. This capability helps organizations better understand, assess, and improve their data security posture across Microsoft 365 by identifying risks, surfacing insights, and guiding remediation actions. This release aligns with our continued investment in enterprise-ready security and compliance tools to help you protect sensitive data at scale.
This message is associated with Microsoft 365 Roadmap ID 542790.
Rollout Schedule
General Availability (Worldwide): Late-May 2026 – Late June 2026
Impact on Your Organization
Who is affected
- Admins and security/compliance teams using Microsoft Purview in Microsoft 365 tenants
Platforms/Services
- Microsoft Purview (web experience)
What will happen
- The Data Security Posture Agent will be generally available in DSPM.
- The feature provides centralized insights into data risks and posture across your environment.
- Admins will be able to view recommendations and take actions to improve data security posture.
- The experience transitions from preview to GA with no disruption to existing configurations.
- No change to existing policies or configurations is required.
- Availability is aligned with your tenant’s Microsoft Purview deployment.
Action Required / Recommendations
No action is required.
As a best practice, you may want to:
- Review DSPM capabilities in Microsoft Purview and assess how they fit into your data security strategy.
- Explore configuration and usage guidance:
- Notify your security and compliance teams of this availability.
- Update internal documentation if you reference Purview DSPM capabilities.
Learn more:
Compliance Considerations
| Question | Answer |
| Does the change alter how existing customer data is processed, stored, or accessed? | Yes. Data Security Posture Management (DSPM) analyzes existing data signals across the Microsoft 365 environment to generate insights and recommendations that help improve data security posture. |
| Does the change introduce or significantly modify AI/ML or agent capabilities that interact with or provide access to customer data? | Yes. The new data security posture agent introduces new agent-based analysis capabilities that evaluate organizational data signals and provide posture insights and recommended actions. |
| Does the change alter how admins can monitor, report on, or demonstrate compliance activities? | Yes. Admins gain access to new data security posture insights, dashboards, and recommendations within Microsoft Purview to help assess and improve compliance posture. |