Microsoft Azure Information Protection service description
Note
The AIP P1 standalone offer is no longer available for new customers as of January 2024.
Microsoft Azure Information Protection (AIP) is part of Microsoft Purview Information Protection (MIP) and helps organizations discover, classify, protect, and govern sensitive information wherever it lives or travels. For more information, see What is Microsoft Purview Information Protection?.
Azure Information Protection (AIP) has been on a multi-year modernization and integration journey with the goal of providing an advanced classification, labeling, and protection stack for our customers with Microsoft Purview Information Protection and Microsoft 365. As part of this journey, we have retired the AIP Unified Labeling add-in for Office in April 2024 and are encouraging customers who use it to migrate to the built-in labeling features within Office for better performance, reliability, and classification capabilities.
For more information on the AIP Unified Labeling add-in retirement, see this blog. For information on how to migrate from AIP to Microsoft Information Protection, go here. For information on how to migrate from AIP to Microsoft Information Protection, go here.
Available plans
For detailed plan information on subscriptions that enable users to utilize AIP service plans, see the Microsoft 365 business plan comparison, Microsoft 365 Enterprise plan comparison, and Microsoft 365 Education plan comparison pages.
For detailed plan information on subscriptions that enable users to utilize Microsoft Azure Information Protection service plans and are currently available in European Economic Area (EEA) countries and Switzerland, see the Microsoft 365 business plan comparison for EEA and Microsoft 365 Enterprise plan comparison for EEA.
Feature availability
The table below lists the Azure Information Protection features available across plans (certain caveats apply -- see the footnotes for further information).
| Feature | Purview Information Protection for Office 365 | Azure Information Protection Premium P1 | Azure Information Protection Premium P2 |
|---|---|---|---|
| Microsoft Purview Information Protection content consumption by using work or school accounts from policy-aware apps and services | Yes | Yes | Yes |
| Bring Your Own Key (BYOK) for customer-managed key provisioning life cycle1 | Yes | Yes | Yes |
| Custom templates, including departmental templates | Yes | Yes | Yes |
| Protection for on-premises Exchange and SharePoint content via Rights Management connector | Yes | Yes | Yes |
| Microsoft Purview Information Protection content creation by using work or school accounts | Yes | Yes | Yes |
| Integration with Microsoft Purview Message Encryption | Yes | Yes | Yes |
| Administrative controls2 | Yes | Yes | Yes |
| Protection for non-Microsoft Office file formats, including PTXT, PJPG, and PFILE (generic protection) | No | Yes | Yes |
| Manual, default, and mandatory document classification | No | Yes | Yes |
| Microsoft Purview Information Protection scanner for content discovery of on-premises files matching any of the sensitive information types | No | Yes | Yes |
| Microsoft Purview Information Protection scanner to apply a label to all files in an on-premises file server or repository | No | Yes | Yes |
| Document tracking and revocation | No | Yes | Yes |
| Microsoft Purview Information Protection software developer kit (SDK) to apply labels and protection to emails and files for all platforms – Windows, iOS, Mac OSX, Android, and Linux | No | Yes | Yes |
| Configure conditions for automatic and recommended classification | No | No | Yes |
| Microsoft Purview Double Key Encryption | No | No | Yes |
| Microsoft Purview Information Protection scanner for automated classification, labeling, and protection of supported on-premises files | No | No | Yes |
1 Azure subscription required to use configured key for Bring Your Own Key (BYOK).
2 Includes activating/deactivating the Rights Management service, onboarding controls for a phased deployment, usage logging, super user capability for eDiscovery and data recovery, bulk protect/unprotect of files using the client-side PowerShell on Windows.
Learn more
Microsoft Purview Information Protection details
- Azure RMS: The Azure Rights Management service (Azure RMS) provides the data protection technology for Microsoft Purview Information Protection. Azure RMS is used with classification and labeling.
- Microsoft Purview Information Protection scanner or client: You must have an Information Protection plan for classification, labeling, and protection using the Information Protection scanner or client. For more information, see: Microsoft 365 licensing guidance for security & compliance, Modern Work Plan Comparison (PDF download), Microsoft Entra pricing | Microsoft Security.
- Calculator: Estimate your monthly costs for Azure services.
- Documentation: Review technical tutorials, videos, and more resources.
- Double Key Encryption: For more information regarding Double Key Encryption, go to Information Protection: Double Key Encryption.
- Power BI is included with Microsoft 365 E5/A5/G5; in all other plans, Power BI must be licensed separately.
- Product Details: Learn more about Microsoft Purview Information Protection.
- Purchase FAQ: Review Azure pricing frequently asked questions.
- Scoping: Except when using the Information Protection scanner feature, policies can be scoped to specific groups or users and registries can be edited to prevent unlicensed users from running classification or labeling features.
- Sensitivity labeling: For more information, go to Information Protection: Sensitivity labeling.
- Subscription plans: For more information about how you can purchase or evaluate Microsoft Purview Information Protection, and the different features that are available for the subscription plans, see the Microsoft Purview Information Protection site.
General information
- Accessibility: Microsoft remains committed to the security of your data and the accessibility of our services. For more information, see the Microsoft Trust Center and the Office Accessibility Center.
- For questions: If your question is not answered here, review the Frequently asked questions for Microsoft Purview Information Protection.
- Licensing terms: For licensing terms and conditions for products and services purchased through Microsoft Commercial Volume Licensing Programs, see the Product Terms site.
- Messaging: To stay informed of upcoming changes, including new and changed features, planned maintenance, or other important announcements, visit the Message Center. For more information, see Message center.
- Support & SLA: If you have any questions or need help, visit Azure Support and open a support case. We guarantee that end users will be able to create and consume IRM documents and emails 99.9% of the time. To learn more, visit the SLA page. For support and SLA in Sovereign clouds, contact your local account.