← Back
(Updated) Microsoft Purview: New Purview Data Security Investigations (DSI) solution
MC1047912 · build prod-20251231-200323
Category
stayInformed
Severity
normal
Major change
False
Last modified
2025-11-14 21:54:06
Summary source
Azure OpenAI (gpt-4.1)
Action by (Graph)
Action by (AI)
Services
Microsoft Purview
Tags
Updated message, New feature, User impact, Admin impact
Master tags
Security
Roadmap IDs
485707

One-line summary

Microsoft Purview Data Security Investigations (DSI), an AI-powered tool for deep data security analysis and incident response, will reach general availability starting October 2025.

Similar updates

More like this
MC1187394 Microsoft Purview compliance portal: Data Security Investigations – Introducing new AI analysis capabilities
Microsoft Purview compliance portal: Data Security Investigations – Introducing new AI analysis capabilities Microsoft Purview Data Security Investigations adds AI-powered analysis and natural language search, enhancing investigative context, vector search, and content categorization. [Introduction] Microsoft Purview compliance portal’s Data.
MC1041756 (Updated) Microsoft Purview: IRM RBAC Change (related to Data Security Investigations) Preview
(Updated) Microsoft Purview: IRM RBAC Change (related to Data Security Investigations) Preview A new Data Security Investigation Contributor role is added to Purview Insider Risk Management, enabling investigators to launch AI-powered data security investigations from IRM cases. ...October 7, 2025: We have updated the timelineDSI is a new.
MC1199763 Microsoft Purview | Data Security Investigations – Introducing new purge mitigation action
Microsoft Purview | Data Security Investigations – Introducing new purge mitigation action Microsoft Purview Data Security Investigations will add a new purge mitigation action by early 2026, allowing admins to delete sensitive or overshared content during investigations. [Introduction] We’re introducing a new purge mitigation action in .
MC1186360 Microsoft Purview: Data Security Investigations – Introduction of cost estimator and transparency report
Microsoft Purview: Data Security Investigations – Introduction of cost estimator and transparency report Data Security Investigations adds a cost estimator and detailed usage report for storage and compute units to improve budget planning and billing transparency in Microsoft Purview. [Introduction] We’re introducing a Data Security.
MC1182008 Microsoft Purview: Inline protection for sensitive data shared over the network with non-Microsoft SASE integrations
Microsoft Purview: Inline protection for sensitive data shared over the network with non-Microsoft SASE integrations Purview DLP integrates with iboss and Netskope SASE platforms to inspect and protect inline web traffic, extending DLP to unmanaged cloud apps and generative AI, starting mid-November 2025. Microsoft Purview Data Loss Prevention.
MC1191257 New Microsoft Purview data security posture management experience
New Microsoft Purview data security posture management experience Microsoft Purview DSPM is evolving with unified data and AI security, AI observability, Copilot automation, third-party integrations, and enhanced reporting; rollout starts December 2025. [Introduction] Microsoft is introducing a major evolution of Purview Data Security Posture.

Details

RoadmapIds
485707
Summary
Microsoft Purview Data Security Investigations (DSI) is an AI-powered solution launching in public preview April–May 2025 and general availability October 2025–January 2026. It helps security teams identify, analyze, and mitigate data risks across Microsoft 365 with deep content analysis and collaboration tools.
Platforms
Web

Body (from Message Center)

Updated November 14, 2025: We have updated the timeline. Thank you for your patience.

Microsoft Purview Data Security Investigations (DSI) is a new AI-powered solution that enables data security teams to identify incident-related data, conduct deep content analysis, and mitigate risk within one unified solution.

This message is associated with Microsoft 365 Roadmap ID 485707.

[When this will happen:]

Public Preview: We will begin rolling out early April 2025 and expect to complete by mid-May 2025.

General Availability (Worldwide): We will begin rolling out early October 2025 (previously early August) and expect to complete by early January 2026 (previously late October 2025).

[How this will affect your organization:]

DSI enables data security admins to efficiently identify incident-relevant content by searching their Microsoft 365 data estate to locate emails, Microsoft Teams messages, Microsoft Copilot prompts and responses, and documents.

After an admin scopes an investigation, DSI’s generative AI capabilities allow admins to gain deeper insights into the impacted data, revealing critical security risks and sensitive information. Investigative capabilities include the ability to categorize evidence, perform vector searches, and examine impacted data for security and sensitive data risks.

DSI visualizes correlations between investigation data, users, and their activities. To mitigate identified risks, DSI facilitates secure collaboration between partner teams. Post-investigation learnings can be used to refine existing policies to strengthen your organization's security practices.

Get started with DSI on the overview page with information on enrollment and enabling RBAC (role-based access control):

admin controls

Categorize your data to identify highest risk items and plan mitigation actions accordingly:

admin controls

Understand investigation progress and insights with the Investigation summary view:

admin controls

[What you need to do to prepare:]

Learn more: Accelerate data security investigations with AI-powered deep content analysis | Microsoft Community Hub

Public Preview documentation: Learn about Data Security Investigations (preview) | Microsoft Learn

Get started on the Purview DSI overview page (coming soon) to complete setup and get oriented in a few simple steps:

  1. Enable access in Microsoft Purview > Permission for DSI admins, DSI investigators and DSI reviewers in your organization.
  2. Complete the DSI first-run experience including:
    1. Enrolling your Purview subscription for non-AI storage and processing meter
    2. Enrolling for AI consumption using security compute units
  3. Get started with your first investigation.

Raw JSON (for debugging)

Expand/collapse the full payload below.
Show/hide raw
{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Enable DSI permissions for relevant roles",
      "Enroll Purview subscription for required metering",
      "Prepare for DSI setup and onboarding",
      "Review documentation for DSI features"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Microsoft Purview Data Security Investigations (DSI), an AI-powered tool for deep data security analysis and incident response, will reach general availability starting October 2025.",
    "ai_topics": [
      "Purview",
      "Teams",
      "Copilot",
      "Outlook",
      "SharePoint",
      "OneDrive"
    ],
    "category": "stayInformed",
    "details_map": {
      "Platforms": "Web",
      "RoadmapIds": "485707",
      "Summary": "Microsoft Purview Data Security Investigations (DSI) is an AI-powered solution launching in public preview April\u2013May 2025 and general availability October 2025\u2013January 2026. It helps security teams identify, analyze, and mitigate data risks across Microsoft 365 with deep content analysis and collaboration tools."
    },
    "id": "MC1047912",
    "importance": 1,
    "is_major_change": false,
    "last_modified": "2025-11-14T21:54:06Z",
    "ms_products": [
      "Purview"
    ],
    "platforms": "Web",
    "roadmap_ids": [
      "485707"
    ],
    "services": [
      "Microsoft Purview"
    ],
    "severity": "normal",
    "tags": [
      "Updated message",
      "New feature",
      "User impact",
      "Admin impact"
    ],
    "title": "(Updated) Microsoft Purview: New Purview Data Security Investigations (DSI) solution"
  }
}