Skip to Content

MC1249424 Microsoft Purview DLP: Unmanaged cloud app protection with Microsoft Purview and the Island Enterprise Browser

Summary

  • Microsoft Purview network data security now integrates with Island, enhancing data protection for browser-based workflows.
  • This integration allows for the configuration of DLP policies to inspect data shared with unmanaged cloud apps.
  • It requires admin action to enable; the feature is not activated by default.
  • Existing Purview policies will apply automatically if the integration is enabled.
  • The change introduces compliance considerations related to AI, data processing, and admin monitoring.

Admin Impact: Medium
User Impact: Low
Release Start: 30 Jun 2026
Release End: 31 Jul 2026
Services: Purview
Category: Stay informed
Tags: New Feature, User Adoption

History

3/12/2026 Item Added to Message Center

Microsoft Message

Introduction

Microsoft Purview network data security now integrates with Island, extending protection to Island’s browser-based workflows at the point of user interaction. With this integration, new and existing Island customers can configure Microsoft Purview collection and data loss prevention policies to detect and protect data shared with unmanaged cloud apps through the Island Enterprise Browser, the Island Extension, and browser add ins via HTTP and HTTPS, using the same classifiers, sensitive information types, and sensitivity labels used in other Purview policies. Island provides visibility and control at the presentation layer, including typed and pasted input, file transfers, and extension activity, so data can be inspected before it ever leaves the browser.

This integration further enriches Purview Data Security Posture Management (DSPM), Insider Risk Management (IRM) risk score, enables data security and compliance for AI interactions, and more.

This message is associated with Microsoft 365 Roadmap ID 558437.

When this will happen

  • Public Preview: Rollout will begin in late March 2026 and is expected to complete by late April 2026.
  • General Availability (Worldwide): Rollout will begin in late June 2026 and is expected to complete by late July 2026.

How this affects your organization

Who is affected:

  • Organizations using Microsoft Purview
  • Customers using or planning to use the Island Enterprise Browser, Island Extension, or supported browser add-ins.
  • Microsoft 365 administrators managing Purview collection and DLP policies.

What will happen:

  • The Island integration will automatically appear in the Purview DLP Security Store as the feature rolls out.
  • The integration is not enabled by default. Administrators must explicitly enable it before it can be used in policies.
  • Once enabled, admins can use existing or new Purview collection and DLP policies to inspect and protect data shared through Island-managed browser activity.
  • There is no impact to end users unless administrators enable the integration and configure network data security policies in Purview.
  • Existing network data security collection and DLP policies will automatically apply if the integration is enabled.

What you can do to prepare

  • Confirm that Purview pay-as-you-go is enabled and configured for your tenant, as it is required to use this integration. Learn more: Enable pay-as-you-go billing for Microsoft Purview.
  • Review your existing Purview collection and DLP policies to determine where network-based data inspection may be appropriate.
  • Inform other data security and compliance administrators in your organization about this upcoming capability.
  • After rollout, enable the Island integration from the Purview DLP Security Store when you are ready to use it.

Learn more:

  • Microsoft Purview collection policies
  • Microsoft Purview data loss prevention
  • Microsoft Purview network data security
  • Purview Security Store

Compliance considerations

Compliance area: New customer data processed

Explanation: When the integration is enabled, browser-based activity metadata and inspection results may be processed as part of Microsoft Purview network data security.

Compliance area: Changes to existing customer data processing

Explanation: Existing Purview classifiers, sensitive information types, and sensitivity labels are applied to data shared through Island-managed browser workflows.

Compliance area: AI and ML interaction with customer data

Explanation: The integration supports data security and compliance for AI interactions occurring within browser-based workflows.

Compliance area: Purview DLP and information protection capabilities

Explanation: Purview collection and DLP policies are extended to inspect and protect data at the browser presentation layer when configured by an administrator.

Compliance area: Admin monitoring and compliance reporting

Explanation: Signals from browser-based inspections can contribute to Purview Data Security Posture Management and Insider Risk Management insights.

Compliance area: Third-party integration

Explanation: This change introduces an integration between Microsoft Purview and Island browser technologies.

Compliance area: Admin control

Explanation: The integration is admin-controlled and must be explicitly enabled from the Purview DLP Security Store.