Microsoft Purview: Veri Yönetişimi ve Uyumluluk Platformu

What is Microsoft Purview?

Microsoft Purview is a comprehensive data governance, risk, and compliance solution that helps organizations discover, classify, and manage their data across on-premises, multi-cloud, and SaaS environments. By unifying data governance capabilities under a single platform, Purview enables enterprises to maintain regulatory compliance while maximizing the value of their data assets.

Core Components of Microsoft Purview

Data Map and Data Catalog

The Purview Data Map automatically scans and classifies data across your entire estate — Azure SQL, Blob Storage, Amazon S3, Power BI datasets, and even on-premises SQL Server instances. The Data Catalog provides a searchable business glossary so analysts and data engineers can discover trusted datasets without filing IT tickets. With over 200 built-in classifiers for PII, financial data, and healthcare records, sensitive information is tagged the moment it enters your environment.

Data Estate Insights

Purview delivers real-time dashboards showing data distribution by source type, classification breakdown, and glossary adoption rates. Decision-makers can identify orphaned datasets, spot ungoverned data stores, and measure compliance posture across the organization on a single pane of glass.

Information Protection

Sensitivity labels created in Microsoft 365 Compliance Center extend into Purview, allowing consistent classification across emails, documents, SQL columns, and Power BI reports. Data Loss Prevention (DLP) policies can be enforced at the source, preventing sensitive records from leaving governed boundaries without approval.

Compliance Manager

Purview Compliance Manager offers pre-built assessment templates for more than 350 regulations — GDPR, HIPAA, ISO 27001, SOC 2, KVKK, and PCI-DSS among them. Each template maps specific Microsoft 365 controls to regulatory articles, calculates a compliance score, and recommends improvement actions with step-by-step remediation guidance. Automated evidence collection reduces manual audit preparation by up to 70%.

Communication Compliance

Machine-learning models monitor Teams chats, Outlook messages, and Yammer conversations for policy violations, insider risk signals, and regulatory breaches. Configurable policies can detect harassing language, unauthorized data sharing, and conflicts of interest, routing flagged items to compliance investigators with full context.

Data Lifecycle Management

Retention policies and retention labels govern how long content is kept and when it is disposed of. Records management capabilities support declaration of records, disposition review workflows, and proof-of-disposal certificates — all critical for industries like banking and government where immutable record-keeping is a legal requirement.

eDiscovery and Audit

When litigation arises, Purview eDiscovery (Premium) enables legal teams to place content holds, collect evidence from Exchange, SharePoint, OneDrive, and Teams, and apply AI-powered review sets to reduce document populations by 60-80%. Unified Audit Log captures every user and admin action across Microsoft 365, supporting forensic investigations and regulatory inquiries.

Integration with Azure Services

Purview integrates natively with Azure Synapse Analytics for lineage tracking — you can trace a Power BI visualization back through Synapse pipelines to its raw source in Data Lake Storage. Azure DevOps integration allows data stewards to submit classification changes as pull requests, maintaining version control over governance policies.

Pricing Considerations

Microsoft Purview uses a consumption-based model for data governance features and per-user licensing for compliance features included in Microsoft 365 E5 plans. The Data Map charges per data asset scanned, while storage and compute for the catalog are billed separately. Organizations on E3 plans can add compliance modules à la carte.

Best Practices for Implementation

  • Start with classification: Deploy auto-labeling policies on your most sensitive workloads first — financial databases, HR systems, and customer PII stores.
  • Define a glossary early: A business glossary with clear ownership accelerates adoption and reduces duplicate classification efforts.
  • Integrate with DevOps: Treat governance policies as code; store classification rules in version control and deploy them through CI/CD pipelines.
  • Monitor compliance score: Set quarterly targets for your Microsoft Compliance Score and assign improvement actions to specific teams.
  • Leverage lineage: Use Purview lineage views in Synapse and Data Factory to satisfy auditor questions about data provenance.

Frequently Asked Questions

Is Purview only for Azure data?

No. Purview connectors support AWS S3, Google BigQuery, Oracle, SAP HANA, Teradata, and dozens of other sources. Multi-cloud governance is a core design principle.

How does Purview differ from Azure Policy?

Azure Policy enforces infrastructure rules (VM SKUs, allowed regions), while Purview governs data classification, lineage, and compliance. They are complementary — Policy for infrastructure guardrails, Purview for data guardrails.

Can small businesses benefit from Purview?

Absolutely. Any organization handling personal data under GDPR or KVKK can use Purview Compliance Manager to automate assessment workflows and demonstrate compliance during audits.

Key Features and Capabilities

The following are the core capabilities that make this technology essential for modern cloud infrastructure:

Data Map

Automated metadata scanning across Azure, AWS, GCP, on-premises SQL, SAP, and 100+ data sources creating a unified enterprise data catalog

Data Classification

AI-powered identification of 300+ sensitive information types (PII, PHI, PCI) with built-in and custom classifiers for industry-specific patterns

Data Lineage

End-to-end tracking of data transformation from source to consumption across Azure Data Factory, Synapse, Databricks, and Power BI pipelines

Data Estate Insights

Dashboard analytics showing data asset distribution, classification coverage, governance compliance scores, and data steward activity metrics

Access Policies

Centralized access governance allowing data owners to grant table-level and column-level access across Azure Storage, SQL, and Analytics services

Real-World Use Cases

Organizations across industries are leveraging this technology in production environments:

Data Governance Program

A bank cataloged 50,000 data assets across 3 clouds, assigned data stewards to each domain, and achieved 95% data classification coverage within 6 months

GDPR Data Mapping

A retailer traced personal data flows from web forms through ETL pipelines to analytics databases, documenting processing purposes for GDPR Article 30 records

Self-Service Analytics

Business analysts discover trusted datasets through the Purview portal search, reducing time from data request to insight from 2 weeks to 2 hours

M&A Data Discovery

During acquisition due diligence, Purview scanned the target company data estate in 48 hours, identifying sensitive data locations and compliance risks

Best Practices and Recommendations

Based on enterprise deployments and production experience, these recommendations will help you maximize value:

  • Start with automated scanning of production data sources — Purview data map needs real data to demonstrate value to stakeholders and data stewards
  • Assign data stewards per business domain (not IT) who approve glossary terms, validate classifications, and manage access requests
  • Create a business glossary BEFORE scanning — standardized terms (Customer, Revenue, Product) make discovered assets immediately understandable
  • Scan incrementally (weekly) rather than full scans to reduce load on source systems and enable near-real-time catalog freshness
  • Integrate Purview with Microsoft 365 Sensitivity Labels for consistent classification between structured data and documents/emails
  • Monitor data estate insights weekly to track governance KPIs: classification coverage, scan health, steward response times, and glossary adoption

Frequently Asked Questions

What data sources does Purview support?

Purview supports 100+ data sources including Azure (SQL, Storage, Synapse, Databricks), AWS (S3, RDS, Glue), GCP (BigQuery, Cloud Storage), on-premises (SQL Server, Oracle, SAP HANA), and SaaS (Power BI, Salesforce). Custom connectors can be built using the Atlas REST API for any additional source.

How does Purview differ from Azure Data Catalog?

Azure Data Catalog is being replaced by Purview. Purview adds automated scanning, AI classification, data lineage, governance policies, and multi-cloud support. Data Catalog required manual registration. Organizations on Data Catalog should plan migration to Purview for continued feature development and support.

What is the cost of Microsoft Purview?

Purview governance charges per data asset scanned (~$0.25/asset/month) and per vCore-hour for scanning compute (~$0.55/vCore/hour). A typical mid-size deployment scanning 10,000 assets costs $2,500-$5,000/month. The Microsoft 365 compliance features (DLP, retention, eDiscovery) are licensed separately through E5 or compliance add-ons.

You must be logged in to post a comment.
🇹🇷 Türkçe🇬🇧 English🇩🇪 Deutsch🇫🇷 Français🇸🇦 العربية🇷🇺 Русский🇪🇸 Español