Compliance is not optional for most businesses anymore. GDPR, HIPAA, SOC 2, PCI DSS, and industry-specific regulations require organizations to protect sensitive data, retain records, and respond to legal investigations. Microsoft Purview Compliance Portal is the single interface where all of this happens in Microsoft 365.
This guide covers the four core compliance modules, an 8-phase setup workflow, and answers to the most common compliance questions. Whether you are a new admin or an experienced security professional, this is the reference you will keep open while configuring your tenant.
Have questions about this topic?
Our migration specialists can help. Chat live or request a free consultation.
Microsoft Purview Compliance Portal
The unified hub for all compliance activities in Microsoft 365.
Track compliance posture across regulations (GDPR, HIPAA, SOC 2, ISO 27001). Built-in assessment templates and improvement actions with Microsoft-managed and customer-managed controls.
Create policies that prevent sensitive data (credit cards, SSNs, passport numbers, custom patterns) from being shared outside your organization. Covers Exchange, SharePoint, OneDrive, Teams, and Endpoint DLP.
Classify content as Public, Internal, Confidential, or Highly Confidential. Labels apply encryption, watermarks, and headers. Travel with content across M365 apps and even when files leave the tenant.
Retain content for legal or regulatory requirements. Delete content after a specified period. Different policies for different locations (Exchange, SharePoint, Teams, OneDrive, Yammer).
Search across all M365 content for legal investigations. Core eDiscovery for up to 10 cases. Premium eDiscovery with AI-powered predictive coding, analytics, and custodian management.
Supervise communications for policy violations (harassment, sensitive info sharing, conflicts of interest). Uses machine learning to flag risky messages in Teams, email, and Yammer.
Detect risky user activities before they become security incidents. Correlates signals from HR systems, security alerts, and user behavior analytics. Requires E5 or add-on license.
Prevent specific groups from communicating with each other. Critical for financial services (SEC 17a-4), healthcare, and government organizations with segregation requirements.
Have questions about this topic?
Our migration specialists can help. Chat live or request a free consultation.
Frequently Asked Compliance Questions
The Microsoft Purview Compliance Portal (compliance.microsoft.com) is the centralized dashboard for managing all compliance, governance, and risk activities in Microsoft 365. It replaces the older Office 365 Security & Compliance Center and combines compliance management, DLP, retention, eDiscovery, audit, insider risk, and communication compliance into a single interface.
Need Help with Microsoft 365 Compliance?
Our Microsoft-certified security consultants configure DLP, sensitivity labels, retention policies, and eDiscovery for organizations of all sizes. SOC 2, HIPAA, GDPR — we handle the compliance so you handle the business.
Get a Free Migration Quote
No spam, just expert advice.
Related Guides
Need Microsoft 365 Compliance Help?
Our Microsoft-certified consultants configure DLP, sensitivity labels, retention policies, eDiscovery, and audit logging to meet your regulatory requirements. SOC 2, HIPAA, GDPR, PCI DSS — we have done them all.