Microsoft Purview Audit
Power your forensic and compliance investigations.
Go Beyond Data Protection with Microsoft Purview
Discover new capabilities that will transform how you secure your organization's data across clouds, devices, and platforms.
Power your forensic and compliance investigations
Support forensic investigations
Determine the scope of compromise, and access audit logs to support investigations.
Preserve audit logs to meet regulatory requirements
Retain audit records for one year with the option to retain for up to 10 years.
Gain high-bandwidth access to data
Get a dynamic bandwidth quota to access your auditing data.
Key features of Microsoft Purview Audit (Premium)
Customized retention policies
Create customized audit log retention policies to retain audit records based on the service where the audited activities occur, specific audited activities, or the user who performs an audited activity.
Longer retention of audit records
Retain audit log records for Exchange, SharePoint, and Microsoft Entra ID for one year by default and 90 days for all other activities. Retain audit log records for up to 10 years with an add-on license.
Support investigations by providing visibility to events such as when mail items were accessed, replied to and forwarded, or when and what a user searched for in Exchange Online and SharePoint Online.
Higher bandwidth to the Office 365 Management Activity API
Organizations are initially allocated a baseline of 2,000 requests per minute, where this limit will dynamically increase depending on an organization's seat count and their licensing subscription, resulting in about twice the bandwidth as organizations with Audit (Standard).
How Audit powers your investigations
Audit provides crucial event data that can help you investigate possible breaches and determine the scope of compromise.
Microsoft 365 E5 Compliance
Originally starting from €11.20 now starting from €11.20
(annual subscription–auto renews)
Microsoft Purview Audit is a part of Microsoft 365 E5 Compliance Suite
Microsoft offers comprehensive compliance and data governance solutions to help your organization manage risks, protect and govern sensitive data, and respond to regulatory requirements.
* Customers currently licensed with Enterprise Mobility Security + Office E3 or Microsoft 365 E3 are eligible to purchase or try E5 Compliance. You must be a global, compliance, or billing admin to initiate this trial.
Get more information about Microsoft Purview Audit—formerly Advanced Audit in Microsoft 365.
Check out the blog for the latest updates and insights around Audit.
Explore the interactive guide to better understand how to conduct forensic investigations with Audit.
Learn more about audit scenarios
Dive into the Audit module to track user and admin activities on Microsoft Learn.
Frequently asked questions about Audit
Get answers to common questions about Audit.
Make your future more secure. Explore your security options today.