Anzenna adds AI DLP and usage control for Microsoft Purview users

Anzenna launched a new AI DLP and usage control layer for Microsoft Purview environments on August 12, aiming to cut DLP alert volume and expose AI data movement that Purview cannot inspect. The product auto-investigates alerts, claims a 90% reduction in volume, and covers browser AI, IDE, MCP and OAuth channels.

Why it matters: - Microsoft customers using Purview can keep existing compliance workflows and add visibility into AI-driven data loss paths that Purview does not inspect. - Anzenna says the product reduces alert fatigue by automatically investigating cases and closing the benign majority. - The launch targets a fast-growing risk area: employee use of AI tools, coding agents and OAuth-connected apps.

What happened: - Anzenna announced AI DLP & Usage Control for Microsoft Purview environments on August 12, 2026. - The product connects to Microsoft 365, ingests Purview alerts and works each one automatically. - Anzenna says the approach cuts alert volume by 90 percent. - The product is available now and can be seen in a live environment at the company’s website.

The details: - The tool is designed to keep Purview for content inspection and compliance while adding AI visibility and investigation. - Anzenna says Purview cannot see prompts pasted into browser AI tools, credentials accessed by coding agents in the IDE, files moved through MCP servers or OAuth grants to AI apps. - When a Purview alert fires, an investigative agent gathers identity, data, destination, HR context and departure status, then assembles a finished case. - Benign alerts close automatically, and only the cases that need a human are escalated with evidence attached. - Anzenna also discovers AI tools, agents and MCP servers across a fleet, audits prompt-level activity, and classifies and blocks sensitive data at the browser and IDE level. - Each action ties back to the human or non-human identity behind it and the person who owns it. - The product requires no Purview license and works with any Microsoft 365 tier. - Remediation routes through Microsoft Defender, Intune and Entra ID, and can also work with Okta and CrowdStrike in multi-vendor environments. - Setup is agentless and takes about 15 minutes.

Between the lines: - The product is aimed at organizations that already invested in Microsoft security tools but still need visibility into AI usage outside traditional data boundaries. - The claim of a 90% alert reduction suggests Anzenna is positioning automation as a response to DLP overload, not just another monitoring layer. - The pitch also reflects a broader shift in enterprise security: the relevant control point is moving from file-only inspection to prompt-level and identity-linked behavior.

What’s next: - Anzenna says teams can adopt the new capability without replacing Purview. - The company is steering buyers toward a live demo and its Microsoft Purview solution brief. - The product’s value will likely be measured by whether it can keep alert volume down while catching AI-related exposure in real enterprise deployments.

The bottom line: - Anzenna is betting Microsoft customers want to preserve Purview and add a layer that sees the AI channels Purview misses.