Files and email
Apply appropriate labels to supported documents and messages. Configure protection around who may open or use them, and train staff to select the right classification.
The interactive site could not finish loading. You can still read this page and follow the links below.
Data Sensitivity
Give sensitive information the protection it needs.
Make data handling expectations clear and enforce them with the right controls. Lambda Link connects classification, identity, and sharing policies across your Microsoft environment.
Classification with practical protection
Microsoft Purview sensitivity labels let an organization classify content with categories such as Public, Internal, Confidential, or Highly Confidential. Depending on the service and settings, a label can apply markings, encryption, or usage restrictions. A label used only for classification does not itself restrict access.
Sites and workspaces
Use supported container settings for SharePoint sites and Teams. Plan document protection separately from site settings.
Identity and policies work together
Microsoft Entra ID establishes who is signing in and can evaluate access conditions. Application and site permissions determine what they can reach. Labels and DLP policies add information-specific protections and controls over supported sharing actions.
- Agree a small, understandable classification scheme with business owners.
- Pilot policies with realistic internal and external collaboration.
- Review policy exceptions, usage, and changes to permissions.
Prepare for responsible AI access
Copilot uses permissions and supported information protection controls. We review oversharing, encrypted content access, and DLP behavior before rollout. AI governance and user training help keep the policy effective as new tools are introduced.
Data Sensitivity: common questions
What can a sensitivity label enforce?
Depending on the service and configuration, labels can apply content markings, encryption, usage rights, or container settings. A classification-only label identifies sensitivity without restricting access, so its settings must match the intended protection.
How do labels affect Microsoft Copilot?
Copilot integrates with supported permissions and information protection controls. We review existing sharing, encrypted content access, and DLP behavior for the selected Copilot experience rather than assume that labeling alone secures every integration.
Discuss your next project
Tell us about your systems, priorities, and timeline. We will help define the next step.