Microsoft

Information Protection

Azure Information Protection

Microsoft Azure Information Protection (AIP) facilitates the discovery, classification, labeling, and protection of sensitive documents and emails. Admins can set rules for automatic label application, users can manually apply labels, or a combination of both methods can be employed. Azure Information Protection is a component of Microsoft Purview Information Protection, offering comprehensive discovery, classification, protection, and governance for sensitive information. AIP enhances labeling and classification functionalities with a unified labeling client, an on-premises scanner, and an SDK. Additionally, AIP includes the  encryption service Azure Rights Management, utilized by Microsoft Purview Information Protection.

Protect data wherever it lives

built in capabilities

Built-in capabilities

Experience built-in labeling and information protectionin Microsoft 365 apps and services and other Microsoft services.

Unified admin console

Configure and manage policies and views analytics across on-premises file shares, Microsoft 365 apps and services, and desktop and mobile devices in one place.
inteligent classifiers

Intelligent classifiers

Get accurate classification with machine learning-based trainable classifiers, exact data match, and more.
extensible plataform

Extensible platform

Extend a consistent protection experienceto popular non-Microsoft apps and services with an SDK.

Azure Information Protection (AIP) Overview

  • Azure RMS (Rights Management Service): Serves as the data protection technology for Azure Information Protection. It can be utilized in conjunction with classification and labeling or as a standalone service.
  • AIP Scanner or Client: Requires an Azure Information Protection plan for classification, labeling, and protection using the AIP scanner or client.
  • Calculator: Helps estimate monthly costs for Azure services. 
  • Documentation: Offers technical tutorials, videos, and additional resources.
  • Automatic Classification: AIP does not include rights to automatic classification based on Machine Learning (trainable classifiers).
  • Double Key Encryption: Double Key Encryption is available in the Information Protection: Double Key Encryption section.
  • Power BI: Included with Microsoft 365 E5/A5/G5; separate licensing is required for other plans.
  • Product Details: Further insights into Azure Information Protection.
  • Purchase FAQ: Answers to frequently asked questions about Azure pricing.
  • Scoping: Policies can be scoped to specific groups or users, and registries can be edited to restrict unlicensed users from running classification or labeling features, except when using the AIP scanner feature.
  • Sensitivity Labeling: Additional information on sensitivity labeling is available in the Information Protection: Sensitivity Labeling section.
  • Subscription Plans: Details on purchasing or evaluating Azure Information Protection, along with features available in subscription plans, can be found on the Azure Information Protection site.