--- title: "Microsoft AI Security for SMBs: Purview Coverage Explained" description: See what Microsoft Purview covers for AI security, where additional controls may help, and how Acronis GenAI Protection supports SMBs and MSPs. canonical_url: https://www.acronis.com/en/blog/posts/microsoft-ai-security-for-small-teams/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # Microsoft AI Security for SMBs: Purview Coverage Explained See what Microsoft Purview covers for AI security, where additional controls may help, and how Acronis GenAI Protection supports SMBs and MSPs. [Try Now](https://www.acronis.com/en/products/cloud/trial/) [![Image 2: Acronis Editorial Team](https://staticfiles.acronis.com/images/content/d85707ae91461544212d39836dc32b42.png)](https://www.acronis.com/en/blog/authors/acronis/ "Acronis Editorial Team") [Acronis Editorial Team](https://www.acronis.com/en/blog/authors/acronis/) 9 min read Last updated 30 September 2026 You already pay for Microsoft 365. Before adding AI security, check which tools, accounts and activities your existing controls protect. Then decide what your IT team or managed service provider will manage. **Microsoft AI security includes Purview controls for supported third-party AI discovery, sensitive-data protection and [prompt-injection](https://www.acronis.com/en/blog/posts/what-is-prompt-injection/) detection. Purview may meet your requirements when its licensed and configured controls cover your workflows. An additional endpoint service may help address a demonstrated coverage or management need. Using both can be appropriate when you need broader data governance alongside managed GenAI protection.** ## The question SMBs are actually asking about Microsoft AI security **"We already pay for Microsoft 365. Are we covered?" The answer depends on your actual AI workflows, not just the subscription name.** For a small IT team, "Is Copilot safe?" comes down to practical questions: Where does business information go? Who can retrieve it? Does the existing license include the controls you need? Separate the provider's data-handling commitments from your own permissions and [rules for AI submissions](https://www.acronis.com/en/blog/posts/ai-usage-policy-template/). A promise not to train models on business data does not tell you whether an employee should upload a payroll spreadsheet. Microsoft's enterprise documentation distinguishes service protections from organizational access controls. (Source [14](https://www.acronis.com/en/blog/posts/microsoft-ai-security-for-small-teams/#source-14)) Base the buying decision on three questions: Does the control cover the tools, accounts and devices your team uses? Does it enforce the rules for sensitive submissions? Who will investigate alerts and handle exceptions? Include essential work, such as summarizing client documents, so the assessment reflects business needs rather than a feature list. ## What Microsoft Purview covers for AI interactions **Purview provides AI visibility, sensitive-data controls and prompt-injection detection. Detecting an attack and blocking it are different functions.** The current Purview experience is **Microsoft Purview Data Security Posture Management (DSPM)**. Microsoft calls the earlier AI-specific experience **DSPM for AI (classic)**. Older AI Hub policy names can remain from the preview. ### Shadow AI visibility Purview can discover [shadow AI](https://www.acronis.com/en/blog/posts/what-is-shadow-ai/) through supported third-party AI site activity. Microsoft's site directory includes ChatGPT, Gemini, Claude and Perplexity. A listed domain establishes supported-site scope, not identical functionality for every control. The documented Windows browser-discovery workflow uses device onboarding and the relevant browser extension. Direct Edge integration and network collection have their own prerequisites. ### GenAI data leakage Endpoint data loss prevention (DLP) can warn or block sensitive information shared with third-party AI sites. Microsoft's policy documentation describes Windows paste and upload controls across Edge, Chrome and Firefox, plus a separate Edge control that inspects prompts inline and can block sensitive content. Some recommended policies initially run in audit or test mode. ### Prompt injection and harmful prompts Purview's Risky AI usage template detects activity including prompt-injection attacks. Microsoft describes this template as a detection and user-risk assessment control. For inline blocking across third-party AI tools, ask which deployed control stops a malicious prompt before submission. Microsoft also documents safeguards in Microsoft Copilot and a separate Entra prompt-injection protection control. Those protections sit outside the Purview risky-usage template, so assess the specific controls you deploy rather than treating Microsoft AI security as one feature. ## The entitlement and deployment reality for smaller teams **Match each control to its license and deployment route. There is no single subscription answer for every Purview AI scenario.** Microsoft lists Endpoint DLP under E5-class, Purview Suite and qualifying information-protection entitlements, not plain Microsoft 365 E3. An E5 upgrade is therefore not the only purchasing route. (Source [6](https://www.acronis.com/en/blog/posts/microsoft-ai-security-for-small-teams/#source-6)) Microsoft's current U.S. list prices are **$10 per user per month, paid yearly**, for Purview Suite for Microsoft 365 Business Premium, requiring Business Premium, and **$12 per user per month, paid yearly**, for enterprise Purview Suite. The enterprise add-on requires Microsoft 365 E3 or Office 365 E3 plus Enterprise Mobility + Security E3. These are add-on prices, not complete AI-security quotes. Match the quoted subscription to the controls you plan to deploy. Selected Purview functions for third-party AI require an active Azure subscription and pay-as-you-go setup. Usage charges depend on the function, integration and applicable preview terms. Enabling billing does not mean every Endpoint DLP action incurs a separate fee. The endpoint and browser route involves device onboarding, browser configuration or extension deployment and policy activation. Intune is one option, not a universal prerequisite. Audit and test policies must not be mistaken for active blocking. Microsoft 365 Lighthouse provides multitenant MSP management. Its overview and baseline guidance do not describe a unified cross-client Purview AI-policy workflow. Ask the provider to demonstrate that workflow rather than assuming general tenant management covers it. ## Where additional requirements may arise **Purview's boundaries are implementation-specific. It is neither Microsoft-only nor exclusively browser-based.** Microsoft also documents network DLP through supported integrations, including AI activity in applications. Capability axis Microsoft Purview Additional endpoint service Notes Shadow AI visibility Supported third-party site discovery and AI activity reporting. Verify which applications and browsers the product discovers. A site inventory is not universal AI visibility. GenAI data leakage Browser and endpoint DLP, Edge inline controls and network-integration routes. Verify pre-submission inspection and supported content types. Compare the same workflow and enforcement mode. Prompt injection and harmful prompts The Risky AI usage template detects attacks and informs user-risk assessment; confirm inline blocking separately. Require an explicit malicious-prompt detection and blocking capability. Sensitive-data blocking is not the same as blocking a prompt-injection attack. Microsoft entries summarize documented capabilities. The additional-service column lists purchasing criteria, not promises about every endpoint product. Keep Purview when it meets your tested requirements. Evaluate another control when a specific workflow or operating-model need remains unmet, not simply because employees use a non-Microsoft chatbot. Keep useful existing controls in place while testing the added layer. Overlap alone is not a reason to remove them. ## When an additional endpoint service may help **An additional endpoint service may help when it meets a requirement your current deployment does not. Purview already uses endpoint controls, so device-side architecture alone does not set a service apart.** Evaluate four areas: application access control for supported desktop AI tools and content inspection for documented supported interactions; consistent enforcement across your chosen browsers; centralized MSP management across clients; and protection that does not need a separate API connection to each AI provider. Cover all four areas in one demonstration. Distinguish allowing or blocking an application from inspecting its prompts. Test supported browsers and interactions, and include multitenant policies, events and reports. The service still needs documented support for the tools you use. These are not exclusive gaps in Purview. Its endpoint and browser controls already operate without a connector to every AI provider, while network integrations offer another application-coverage route. Start with your [AI data-leakage policy](https://www.acronis.com/en/blog/posts/prevent-ai-data-leakage/) and use the demonstration to check where those rules are enforced. That keeps the decision focused on protecting work rather than buying another dashboard. ## How Acronis GenAI Protection compares **[Acronis GenAI Protection](https://www.acronis.com/en/products/cloud/cyber-protect/genai-protection/) provides the underlying endpoint-based capabilities managed through [Acronis Cyber Platform (formerly Acronis Cyber Protect Cloud)](https://www.acronis.com/en/products/cloud/cyber-protect/). MSPs deliver these capabilities to businesses as Acronis Managed GenAI Protection.** The comparison is about supported AI interactions on protected workstations, not replacement of Purview's complete governance and compliance portfolio. ### Comparable capability areas **Shadow AI visibility and governance.** Acronis monitors browser-based GenAI usage by user, tool and frequency, with anomaly detection and downloadable reports. Application-access policies let MSPs allow or block web and desktop GenAI applications by application name or associated domain. These allowlist and blocklist policies do not require URL filtering. URL-level blocking through [EDR](https://www.acronis.com/en/products/cloud/cyber-protect/security-edr/)/[XDR](https://www.acronis.com/en/products/cloud/cyber-protect/extended-detection-and-response/) remains a separate option. Blocking access to an application is different from inspecting its prompts. These access controls do not establish prompt-inspection support for every desktop app. **Sensitive data protection for AI interactions.**[Prompt inspection](https://www.acronis.com/en/blog/posts/what-is-ai-dlp/) identifies personally identifiable information (PII), protected health information (PHI), payment card data covered by PCI-DSS and confidential content. Published coverage includes text, documents, presentations, spreadsheets and archives, with detect-only or block mode. Inspection applies to supported interactions and formats, which should be included in the pilot. **Harmful prompt and AI abuse prevention.** Acronis documents detection and blocking of malicious prompts, including prompt injection originating from users or external content entering a prompt flow. Harmful-prompt protection can operate in detect-only or block mode. ### Deployment and fit The MSP configures protection plans and reviews GenAI events, reports and widgets in Acronis Cyber Platform (formerly Acronis Cyber Protect Cloud). Providers already using the platform do not need another stand-alone AI-security console. You still need the appropriate GenAI entitlement and supported workstations. Agree with your MSP who reviews policies and handles questions about blocked work. Your MSP can use reporting to advise you as AI use changes. Agree who tunes rules, investigates alerts and handles exceptions rather than assuming the service name settles those responsibilities. Acronis also publishes its [Responsible AI principles](https://www.acronis.com/en/trust-center/responsible-ai/), separately from product support specifications. Evaluation point Microsoft Purview Acronis GenAI Protection Buyer fit Organizations operating data-security and compliance policies. SMBs obtaining GenAI protection through an MSP. Enforcement point Endpoint and browser, service and supported network-integration paths. Supported GenAI interactions on protected endpoints. Third-party AI Supported sites, applications and integration paths. Web and desktop application access control; content inspection for supported interactions. Platforms Endpoint DLP supports Windows and macOS; individual controls differ. The [GenAI support guide](https://www.acronis.com/en/support/documentation/CyberProtectionService/configuring_generative_ai-protection.html) specifies Windows 11 and Windows 10 version 1809 or later, 64-bit editions only. MSP operations Lighthouse provides multitenant management; ask for a demonstrated cross-client Purview AI-policy workflow. Multitenant policy management and client reporting in Cyber Platform. Policy modes Audit, test and enforcement options depend on the policy. Allowlist or blocklist for app access; detect-only or block for the described content controls. Reporting DSPM observability and activity investigation. GenAI events, widgets and downloadable reports. Licensing Workload-specific entitlements and applicable usage billing. GenAI-capable entitlement required; existing platform access alone is insufficient. The table reflects documented product scope and delivery models, not complete feature equivalence. **Key takeaways**Purview already covers supported third-party AI discovery and data-leakage prevention.Prompt-injection detection and malicious-prompt blocking are separate evaluation points.Licensing, deployment paths and applicable usage charges depend on the control.An additional managed service should meet a tested need, with supported applications and an owner for ongoing operations. [Compare coverage for your stack](https://www.acronis.com/en/products/cloud/cyber-protect/genai-protection/). Ask your MSP to demonstrate coverage for your browsers, desktop applications and approved test cases. ## Frequently asked questions **Check account context, data handling and administrative access as well as protection features.** ### Is Microsoft Purview free with Microsoft 365? Some capabilities are included, but that does not make every Purview capability free. Audit Standard, for example, is listed for Business Basic, Business Standard and Business Premium. Microsoft also requires appropriate licenses for users who benefit from licensed controls, not merely the administrator configuring them. (Source [6](https://www.acronis.com/en/blog/posts/microsoft-ai-security-for-small-teams/#source-6)) ### Does Microsoft 365 Copilot use my business data to train foundation models? No. Microsoft says enterprise-protected prompts, responses and Microsoft Graph data are not used to train foundation models. Its documentation now calls the business service Microsoft Copilot, although older experience and license names can remain during the transition. The commitment applies to the documented business service, not every consumer AI account. ### Can Copilot web search send information outside Microsoft 365? Yes. With web search enabled, Copilot can generate queries for Bing, a separate service with different data-handling terms. Microsoft says it removes user and tenant identifiers and does not use these queries to train its foundation models. Administrators can control web search. Removing identifiers is not the same as preventing sensitive words from entering a query. ### Can administrators read employees' third-party AI prompts? Yes, when supported interactions have been collected with content capture and the reviewer has the required content-viewing permissions. General administrator access alone is not enough. Microsoft's DSPM permissions table specifies additional content-viewing roles. Decide who needs that access and include prompt collection in your employee-notice planning. ### Do we need paid Copilot licenses to monitor third-party AI? Not as a general prerequisite. Microsoft separates the licensing requirement for monitoring Microsoft Copilot and agents from the prerequisites for third-party AI interactions. For those interactions, validate the relevant Purview workload rights, collection setup and applicable billing instead. ### How should we pilot a Microsoft Purview AI alternative? During a buyer-led pilot, ask AI security vendors to run agreed tests with synthetic data: typed text, pasted records and supported uploads. Test application-access rules separately from prompt inspection. Record whether each event is logged or blocked, who receives it and how exceptions work. Also measure any disruption to legitimate work. [Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/) [MSP cybersecurity](https://www.acronis.com/en/blog/tags/msp-cybersecurity/) [Corporate cybersecurity](https://www.acronis.com/en/blog/tags/corporate-cybersecurity/) [Cloud security](https://www.acronis.com/en/blog/tags/cloud-security/) [Vulnerability management](https://www.acronis.com/en/blog/tags/vulnerability-management/) [Threat detection](https://www.acronis.com/en/blog/tags/threat-detection/) [Phishing](https://www.acronis.com/en/blog/tags/phishing/) [M365 Security & Protection](https://www.acronis.com/en/blog/tags/m365-security-protection/) ## Written by ![Image 3: Acronis Editorial Team](https://staticfiles.acronis.com/images/content/d85707ae91461544212d39836dc32b42.png) Acronis Editorial Team Acronis is a global cyber protection company that provides natively integrated cybersecurity, data protection, and endpoint management for managed service providers (MSPs), small and medium businesses (SMBs), and enterprise IT departments. [Previous post](https://www.acronis.com/en/blog/posts/edr-vs-siem-key-differences-and-when-you-need-both/) [EDR vs SIEM: key differences and when you need both](https://www.acronis.com/en/blog/posts/edr-vs-siem-key-differences-and-when-you-need-both/) [Next post](https://www.acronis.com/en/blog/posts/what-are-the-lessons-of-cybersecurity-awareness-month/) [What are the lessons of Cybersecurity Awareness Month?](https://www.acronis.com/en/blog/posts/what-are-the-lessons-of-cybersecurity-awareness-month/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 4: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 5: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read ![Image 6: Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://staticfiles.acronis.com/images/blog-card/c2467c28c0278609eb3560cb2a8a4d53.png) [Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-v17-improving-cyber-resilience-across-people-data-and-infrastructure/) Acronis Cyber Protect v17 Q3 2026 expands integrated cyber protection with new capabilities that strengthen security awareness, improve backup operations and extend protection across more virtual environments. The result is stronger cyber resilience, simplified operations and broader protection delivered through a single platform. **October 05, 2026**4 min read