Microsoft lists Microsoft Purview Network Data Security as generally available in September 2026 for the integration with Microsoft Entra Global Secure Access. This means organizations can inspect sensitive data not only in Exchange, SharePoint, OneDrive, or Teams, but also in network traffic to unmanaged cloud and AI applications such as ChatGPT, Gemini, Claude, Dropbox, Box, Google Drive, Gmail, Google Forms, Facebook, or X. For small and midsize companies, this matters now because many data leaks no longer pass through classic Microsoft 365 locations. They happen through browsers, apps, add-ins, and APIs.
What Microsoft changed in September 2026
The Microsoft Purview “What’s new” page lists the integration of Microsoft Entra Global Secure Access with Purview as generally available in September 2026. Microsoft describes the purpose precisely: protect text, files, and AI interactions at the network layer, enforce DLP actions based on Purview policies, and detect risky user activity through Insider Risk Management. The technical documentation was updated on 16 September 2026; the announcement does not give an exact publication day for general availability, so the safe reference point is the month.
- Purview uses the same classifiers that are already configured in other Microsoft Purview policies.
- Inspection can run through Entra Global Secure Access or supported SASE and secure browser solutions.
- The feature covers unmanaged cloud apps, generative AI, cloud storage, webmail, online forms, and social networks.
Which data movements become visible
Network Data Security extends Purview classification to HTTP and HTTPS traffic from endpoint devices to websites, cloud apps, and generative AI services. Microsoft names four supported activities: text sent to or shared with cloud or AI apps, files uploaded to or shared with those apps, text received from cloud or AI apps, and files downloaded from them. For unmanaged apps, administrators can use adaptive app scopes or entries from the Defender for Cloud Apps catalog; Microsoft refers to more than 35,000 discoverable cloud apps. For companies that already use Data Loss Prevention in Microsoft 365, this extends the same protection logic to additional outbound channels.
Why this matters for SMBs
In organizations with 10 to 250 users, data risk rarely starts with a large shadow IT project. Often a browser tab is enough: a proposal is pasted into an AI tool, a customer file is uploaded to personal cloud storage, or a spreadsheet is sent through webmail. Microsoft explicitly says Network Data Security can identify, block, and alert on sensitive content in these interactions. The boundary is just as important: this is not legal assessment and not licensing advice. It gives technical teams evidence about real data flows and enforceable policy decisions.
Deadlines, waiting times, and limits
Microsoft does not name a retirement deadline, but it does document concrete operating times and limits. After the integration between Purview and the network security solution is configured, policy distribution to the network solution and first data availability can take up to 24 hours. Once the services communicate fully, audit log and Activity explorer entries for a request can take up to 30 minutes to appear. Microsoft also states that the policies do not apply to B2B guest users. Inline evaluation is limited to up to 4 MB for text activities and files up to 3 MB for upload and download activities. Blocking rules should therefore start with pilot groups and clear test cases.
Practical next steps
- Inventory which teams use unmanaged AI, cloud storage, webmail, or online form services.
- Define which sensitive information types and sensitivity labels should apply to those channels.
- Choose the integration path: Entra Global Secure Access or a supported SASE or secure browser solution from the Security Store.
- Test the policy in audit mode first and review Activity explorer with the “Enforcement plane: Network” filter.
- Enable blocking only where exceptions, ownership, and DLP alerts are clearly defined.
Official Microsoft sources
- Microsoft Learn: What’s new in Microsoft Purview
- Microsoft Learn: Learn about Microsoft Purview Network Data Security
- Microsoft Learn: Use Network Data Security to help prevent sharing sensitive information with unmanaged AI
- Microsoft Learn: Create content policies for network content filtering
Whether Purview Network Data Security fits your data flows, and how pilot groups, DLP rules, Conditional Access, and alerts should work together, is something we review as part of a Microsoft Security Assessment – get in touch.
What does this mean for your environment?
Assess the topic in the context of your Microsoft 365 environment and define a practical next step.
You speak directly with Sebastian Kerssen – working in the Microsoft ecosystem since 2014, with personal consulting and a dedicated point of contact.
