Azure Information Protection for Office 365

Protect corporate data by allowing more secure access to company resources and enabling safe sharing of sensitive information inside and outside your organization.



annual commitment

Or try for free now

Price does not include tax.
Monitor showing an email encrypted with Microsoft Azure Rights Management.
Two women looking at a laptop

Protect information from unauthorized access—internal and external

Azure Information Protection for Office 365 provides a comprehensive policy-based enterprise solution to help protect your valuable information, no matter whom you share it with. For {O365WARMMonthSubAnn|price} per user per month, you get protection capabilities such as Do Not Forward and Company Confidential, as well as Office 365 Message Encryption, which allows you send encrypted emails to anyone!

A man working in Outlook on a Microsoft Surface Book

Easily enforce policies to improve data security

Both Azure Information Protection for Office 365 and Office 365 Message Encryption are policy based and designed to work with the Exchange transport rule engine. That means Azure Information Protection for Office 365 allows you to set up complex policy restrictions easily, with just a single action.

A man working in Outlook on a Microsoft Surface Book
Five people in a shared work environment, using desktop PCs or meeting with each other.

Simple and convenient communication management

Azure Information Protection for Office 365 is built to work across multiple workloads such as Exchange, SharePoint, and Office documents, and it makes it easier to set restrictions and provide permissions. Office 365 Message Encryption comes with a modern user interface that makes it easy to use.

Azure Information Protection for Office 365 includes:

Azure Information Protection for Office 365 (AIP)

Help protect data across different workloads such as SharePoint, Exchange, and Office documents by easily applying Information Rights Management to set up policy-based permissions rules.
  • Help protect emails against unauthorized access by applying different AIP options to your email messages.
  • Enhance security of your SharePoint libraries by using AIP to set up appropriate permissions.
  • Help keep your information safe, online or offline, because your files are protected whether they’re viewed using Office Online or downloaded to a local machine.
  • Seamless integration with all Office documents helps guard your organization’s intellectual property.
  • Apply custom templates based on your business needs in addition to using default protection templates.

Office 365 Message Encryption

Easily share protected emails with anybody—inside or outside your organization
  • Provide strong, automated encryption with a cost-effective infrastructure.
  • Easily manage sensitive data using single-action Exchange transport rules.
  • Decrypt and read encrypted email with confidence, without installing client software.
  • Send encrypted and rights protected messages to people inside and outside your organization (including users of Office 365, non-Office 365 email applications, and web-based email services such as and

Frequently asked questions

Show all

Active Directory Rights Management Services (ADRMS) has been available for many years as an on-premises solution for customers to protect Office documents. Azure Information Protection for Office 365 is a cloud-based solution designed to deliver similar protection to customers using Office 365.

Azure Information Protection for Office 365 is available for purchase at {O365WARMMonthSubAnn|price} per user per month through these channels:

  • Direct from Microsoft
  • From an Advisor partner
  • With an enterprise agreement
  • Syndication

Azure Information Protection for Office 365 is included in the Office 365 Enterprise E3 and E4 plans. It can also be purchased as a standalone with these plans: Office 365 Enterprise E1, Office 365 Enterprise K1, Exchange Online Plan 1, Exchange Online Plan 2, and Exchange Online Kiosk.

The requirements for using Office Message Encryption are as follows:

  • If you’re using Office 365, you must be on the newest (Wave 15) version of Exchange Online.
  • If you’re using on-premises mailboxes, you must be using Exchange Online Protection or hybrid mail-flow.

Note: Forefront Online Protection for Exchange (FOPE) customers cannot use the new encryption service until they are transitioned to Exchange Online Protection.

We will be upgrading all customers using Exchange Hosted Encryption to the new Office 365 Message Encryption offer. If you already have a subscription for Azure Information Protection for Office 365, you will get encryption service by default, because Office 365 Message Encryption is included with Azure Information Protection for Office 365. For more information, please visit