Microsoft Purview Pricing in 2026: What DLP Really Costs on E3, E5, and the Purview Suite Add-On

Answer first: Microsoft Purview DLP is not a line item. Its real price is a per-seat uplift on every user, either the jump to Microsoft 365 E5 (list price $60 per user per month, annual commitment) or the Purview Suite add-on on top of E3 ($12 per user per month), plus pay-as-you-go meters for anything outside Microsoft 365. Because Purview's reach stops at Microsoft's own apps and endpoints, most mid-size companies end up paying twice: once for the uplift, and again for a second tool that covers everything else. dope.security covers every app from one on-device agent with published pricing.

Purview pricing confuses people because Microsoft never sells Purview DLP by itself. It arrives inside a license tier, and the question "what does Purview cost" is really the question "what does it cost to get every user onto the tier that unlocks the DLP feature I need." If you want the feature-level view first, our review of where Microsoft Purview DLP is strong and where it needs help covers coverage. This post covers the bill.

Prices below are Microsoft's published US list prices as reported in November 2026 and are rounded. Your region, your enterprise agreement, and your renewal date all change the number, so treat these as the starting point for a quote, not the quote.

The three ways to pay for Purview DLP

There are three licensing paths, and the one you pick shapes the whole budget.

• Microsoft 365 E5. The full bundle, listed at $60 per user per month on an annual commitment (a no-Teams variant lists around $51.45). E5 includes Purview DLP across Exchange, SharePoint, OneDrive, Teams chat, and endpoint DLP for Windows and recent macOS, plus Insider Risk Management, auto-labeling, and the rest of the compliance stack.
• Purview Suite add-on on E3. Formerly named Microsoft 365 E5 Compliance, renamed in Microsoft's October 2025 Product Terms with no change to service or price. It lists at $12 per user per month and requires an E3 base license. This is the path most mid-size companies take when they want DLP without paying for E5 security and voice features they will not use.
• Pay-as-you-go meters. Purview features that reach data outside Microsoft 365 are billed on consumption through an Azure subscription rather than a seat license. Published meters have varied by feature and date; one example cited across third-party guides is an In Transit Protection meter of roughly $0.50 per 10,000 requests effective May 1, 2025. Check Microsoft's Azure pricing sheet for current rates, because the meters change more often than the seat prices.

Two details catch teams off guard. Endpoint DLP is not part of E3, so the moment you want to stop a file leaving a laptop rather than a mailbox, you are on an uplift path. And the add-on is built for E3 base licenses, so if your 250 to 1,000 person company runs on Business Premium, confirm eligibility before you budget; the path may be a plan change rather than an add-on.

What the uplift costs at mid-market scale

Run the arithmetic for a company with 500 users who already hold E3. The Purview Suite add-on costs 500 users times $12 times 12 months, which is $72,000 per year. Moving the same 500 users to full E5 at list costs 500 times $60 times 12, which is $360,000 per year in total license spend, and the incremental over E3 depends on the E3 rate on your agreement.

Now add two realities. First, the uplift applies to every user, including the ones who never touch sensitive data, because DLP policy cannot be licensed only for the finance team. Second, the pay-as-you-go meters land on top, and they scale with traffic you do not fully control. Our guide to what data loss prevention really costs per user puts those numbers next to the dedicated DLP vendors, and it is why the Purview conversation usually ends with "and what else do we need."

What you get for the money, and where it stops

Purview is a good product inside Microsoft's world. It classifies and labels data in Exchange, SharePoint, OneDrive, and Teams, and endpoint DLP can stop copy, print, and upload actions on Windows and supported macOS devices. If your entire data estate lives in Microsoft 365 and your users only ever use Edge, it is a credible single answer.

That estate does not exist at most companies. Here is where Purview DLP stops, based on Microsoft's own feature documentation and what customers report:

• Non-Microsoft SaaS. Uploads to Google Drive, Dropbox, Slack, Salesforce, or a random web form are outside Purview's native scope unless you route them through Edge and the cloud app DLP features, which historically carried their own licensing requirements. A Microsoft Message Center note reported by third parties in September 2026 described removing a pay-as-you-go requirement for Edge-based cloud app DLP; we have not confirmed that against Microsoft's own documentation, so verify before planning around it.
• AI apps. A paste into ChatGPT Desktop, Claude Desktop, or Cursor is not a Microsoft 365 event. Purview's AI coverage is strongest for Copilot and for browser sessions under Edge policy; it has far less to say about the desktop AI clients where source code and contracts actually get pasted.
• Browsers other than Edge. Customers report that endpoint DLP enforcement in Chrome depends on a Microsoft extension and that Firefox and other browsers fall into "unallowed browser" handling, which is a blunt instrument.
• Classification approach. Purview leans on sensitive information types, patterns, and trainable classifiers that you configure and tune. Customers report the tuning burden and the false-positive rate as the top operational complaints, which is a cost that never appears on the invoice.

Our comparison of Purview DLP alternatives for mid-size companies goes through six options for closing those gaps.

Purview DLP vs dope.security Dopamine DLP: head to head

Two different ideas of where DLP should live and how it should decide. Here is the comparison that decides the budget.

Microsoft Purview DLP

Licensed as part of E5 or as the $12 Purview Suite add-on on E3, applied to every seat, with consumption meters for data outside Microsoft 365. Strongest inside Exchange, SharePoint, OneDrive, and Teams, with endpoint DLP on Windows and supported macOS. Classification is rule-based: sensitive information types, patterns, and trainable classifiers that an admin builds and tunes. Coverage of non-Microsoft SaaS and desktop AI apps is partial and browser-dependent. Deep integration with Microsoft labels and Copilot is the genuine advantage.

dope.security Dopamine DLP

Included in the dope.security platform with published pricing, not a per-feature uplift. Runs on the device as part of a single agent under 100 MB of RAM, so it sees every upload and every AI prompt regardless of app, browser, or destination: Google Drive, Dropbox, Slack, ChatGPT, Claude, Perplexity, Abacus, Copilot, and the web form nobody listed. Classification is done by an LLM that reads the content and decides by meaning, so there are no regex rules to write and no classifier to train; text is extracted on the device and classified with zero data retention. Detects PII, PCI, PHI, and intellectual property, with a plain-language Dopamine Summary on every detection. Three modes: Block, Monitor, Off. CASB Neural extends the same approach to data at rest in Google Workspace and Microsoft 365 with one-click activation.

The paired view

• How you pay: Purview is a per-seat tier uplift plus meters; dope.security is one published platform price that includes DLP.
• Where it runs: Purview runs in Microsoft's cloud with an endpoint component for Microsoft paths; Dopamine DLP runs on the device for every path.
• What it covers: Purview covers Microsoft 365 and Edge-centric paths well; Dopamine DLP covers every app and every browser on the endpoint.
• How it decides: Purview matches patterns and classifiers you configure; Dopamine DLP classifies by meaning with no configuration.
• Time to value: Purview needs policy design and tuning; Dopamine DLP delivers detections on day one with zero policy configuration.

Three scenarios and what they cost

Budget conversations go better with scenarios than with feature lists.

• All-Microsoft, Edge-only, 300 users on E3. The Purview Suite add-on is $43,200 per year and covers most of what you need. This is the best case for Purview, and it is rarer than it sounds.
• Microsoft 365 plus Google Drive, Slack, and a dozen SaaS tools, 800 users on E3. The add-on is $115,200 per year, and it still leaves the non-Microsoft uploads and the desktop AI apps uncovered, so a second DLP tool follows. This is the paying-twice case, and it is the common one.
• Mixed fleet of Macs and Windows with heavy AI adoption, 1,500 users. The add-on is $216,000 per year before meters, and the gaps are the exact places data leaks in 2026. An on-device DLP that treats ChatGPT Desktop and a web form the same way is the primary control here, and Purview labels become a nice-to-have.

A Fortune 100 company that deployed dope.security on more than 18,000 devices pushed the agent silently through Intune with no configuration before install, which is the opposite of a Purview policy rollout. The point is not that Microsoft's tool is bad. It is that the price of a tier uplift buys coverage of Microsoft's estate, and your data does not stay in Microsoft's estate.

The hidden line items

Three costs never show up on the Purview quote. The first is admin time: sensitive information types, trainable classifiers, and policy scoping take weeks to design and months to tune, and every false positive that blocks a legitimate email lands as a ticket. The second is the Edge dependency: getting consistent endpoint enforcement often means standardizing on Edge or deploying and maintaining the Purview browser extension, which is a change-management project of its own. The third is the second tool. When the first non-Microsoft upload slips past, the budget request for a dedicated DLP arrives, and it arrives after you have already paid the uplift on every seat. Put those three next to the $12 and the picture changes. Our guide to why on-device DLP beats network DLP explains why the second tool should be the one on the endpoint.

Questions to ask before you upgrade for DLP

Ask your Microsoft rep which specific DLP capability requires which tier, in writing, because the answer changes between E3, the Purview Suite add-on, and E5 more often than the marketing pages suggest. Ask which Purview features bill through Azure consumption and what the current meter is. Ask whether endpoint DLP will enforce in the browsers your users actually run. Then ask yourself whether the uplift covers the two places your data leaves most in 2026: non-Microsoft SaaS and AI apps. If the answer is no, you are budgeting for two tools, and the second one should be the one that sees everything.

The bottom line

Microsoft Purview pricing is a tier decision disguised as a product price: $12 per user per month on top of E3, or the jump to E5 at $60, applied to every seat, plus meters for anything that leaves Microsoft 365. That buys strong DLP for Microsoft's own apps and partial coverage of everything else, which is why mid-size companies so often pay for Purview and a second DLP anyway. dope.security's Dopamine DLP runs on the device, covers every app and every AI tool, needs no rules, and is included in one published price. Start a free trial and compare what each one catches in a week.

Frequently Asked Questions

Is Microsoft Purview DLP free with Microsoft 365?

No. Basic DLP for Exchange, SharePoint, OneDrive, and Teams is part of E3 and above, but endpoint DLP, Insider Risk Management, and the advanced classification features require Microsoft 365 E5 or the Purview Suite add-on on E3. Purview features that reach outside Microsoft 365 bill on Azure consumption. dope.security includes Dopamine DLP in its published platform price.

What is the Microsoft Purview Suite and how much does it cost?

The Purview Suite is the add-on formerly called Microsoft 365 E5 Compliance, renamed in Microsoft's October 2025 Product Terms with no change to service or price. It lists at $12 per user per month, requires an E3 base license, and adds endpoint DLP, Insider Risk Management, auto-labeling, and related compliance features.

Does Purview DLP cover uploads to Google Drive, Dropbox, or ChatGPT?

Only partially. Purview's native scope is Microsoft 365 and Microsoft endpoints, with cloud app coverage dependent on Edge policies and, historically, additional licensing. Desktop AI apps such as ChatGPT Desktop or Claude Desktop fall outside it. dope.security's Dopamine DLP runs on the device and classifies uploads and prompts to any app by meaning before they leave.

Do I need E5 to get Purview endpoint DLP?

You need either Microsoft 365 E5 or the Purview Suite add-on on E3. Endpoint DLP is not included in E3 alone, and the add-on is designed for E3 base licenses, so Business Premium tenants should confirm eligibility with Microsoft. That makes endpoint DLP a per-seat uplift across the whole company, whichever path you choose.

How does Purview DLP pricing compare to dope.security?

Purview is a tier uplift of $12 per user per month (Purview Suite on E3) or the move to E5 at $60, applied to every user, plus consumption meters for data outside Microsoft 365. dope.security publishes its pricing on its website and includes Dopamine DLP, CASB Neural, and the on-device SWG in one agent with no per-feature uplift. Request a quote for both on the same user count and compare coverage, not just seat price.

Can I run Purview and dope.security together?

Yes. Many teams keep Purview for Microsoft 365 labels and Copilot governance and run dope.security on the endpoint for everything that leaves through non-Microsoft SaaS, browsers, and AI apps. The question is which one is your primary control; for data in motion across every app, that is the on-device agent.