Microsoft Purview compliance portal: Endpoint Data Loss Prevention - Ability to fetch the original file resulting in policy match as evidence (Microsoft Managed storage)

Archived update

This feature is not in the site's RSS build snapshot. The content, release status and dates below are from our saved archive and may be out of date. Check Microsoft for current availability.

Product: Microsoft Purview compliance portal
Saved release status: Launched
Original publication: July 22, 2025

Feature overview

With this capability, Admins can choose to store a copy of the file that resulted in a DLP policy match. The admin uses this data to analyze the contents to confirm the full set of data that was exfiltrated to assess severity. To configure Microsoft managed storage, similar to customer managed storage, the user can go to endpoint DLP settings and select Microsoft managed storage. As compared to customer managed storage - the admin need not configure any additional settings like adding a blob, assigning permissions, selecting storage in policy workflow.<br>

Archived release information

August CY2025

Source: Saved Microsoft roadmap archive Feature ID: 497838

RSS snapshot built October 15, 2026. Refreshed on rebuild and deployment.

View on Microsoft

Microsoft Purview compliance portalEndpoint Data Loss Prevention - Ability to fetch the original file resulting in policy match as evidence (Microsoft Managed storage)

Archived update

Feature overview

Archived release information

Microsoft Purview compliance portal
Endpoint Data Loss Prevention - Ability to fetch the original file resulting in policy match as evidence (Microsoft Managed storage)