Skip to content
North Ark

Microsoft Purview

Know where your sensitive data is, and keep it where it belongs.

Customer records, payroll, contracts and board papers spread across mailboxes, Teams and OneDrive. Regulators, customers and Copilot all raise the stakes. We configure Microsoft Purview so sensitive data is labelled, protected, retained correctly and discoverable when legal needs it.

Start with a Copilot and AI data readiness assessment
Records archive with one aisle of shelving opened.

What we configure

  • Sensitivity labels: a small, usable set with sensible defaults and encryption where it is needed
  • Data loss prevention that catches real risks without flooding people with alerts
  • Retention and records management that match your legal and regulatory obligations
  • eDiscovery and legal hold, ready before legal needs them
  • Audit logging configured and retained for investigations
  • Insider risk management where it is appropriate and agreed with HR and legal
  • Compliance Manager, to track progress against the frameworks you report on

Mapped to your obligations

The configuration is mapped to the obligations you carry: the Essential Eight, APRA CPS 234, the Privacy Act and the Notifiable Data Breaches scheme, customer contracts, and Australian Government protective markings for government suppliers. You get the evidence alongside the configuration.

How it runs

  1. Discover: where sensitive data lives, who uses it, and your retention and legal obligations.
  2. Design: labels, DLP policies, retention schedules and eDiscovery processes, agreed with legal and the business.
  3. Pilot: policies in simulation or with a pilot group, tuned before they are enforced.
  4. Roll out: in stages, with training material for the people who use labels.
  5. Operate: policies maintained under Managed Microsoft 365 and security.

Ready for Copilot

Labels and DLP are also how you control what Microsoft 365 Copilot can use. If Copilot is on your plan, the Copilot and AI data readiness assessment shows what to fix first.

Questions buyers ask

How many sensitivity labels do we need?

Fewer than most people expect. Four is a good start: Public, General, Confidential and Highly Confidential, with encryption only on the last.

Will DLP block people from working?

It shouldn't. Policies start in simulation, then warn users, and only block where the risk justifies it.

Which licences do we need?

Basic labelling, DLP and retention are in Business Premium and E3. Automatic labelling, advanced DLP, insider risk and premium eDiscovery need E5 or an E5 Compliance add-on.

Can you help with a legal hold now?

Yes. We can set up eDiscovery cases and holds quickly, then put a proper process in place.

Do you give legal advice on retention periods?

No. Your legal or records team sets the periods. We configure Purview to apply them and show the evidence.

Related

Start a conversation

Protect the data that would hurt most to lose.

Tell us what is driving the work.

Talk to an Engineer