What Changed in September 2025 — and What Did Not
Microsoft's September 2025 decision to rebrand E5 Compliance as the Microsoft Purview Suite was primarily a naming and packaging change, not a capability change. The compliance tools that were previously bundled under the E5 Compliance add-on are the same tools now available under the Purview Suite name. Microsoft also discontinued the E5 Compliance SKU as a new purchase option — existing customers grandfathered on E5 Compliance can continue to use it, but new purchases use the Purview Suite designation.
The Purview Suite at $12 per user per month ($144 per user per year) includes Microsoft's enterprise compliance capabilities: Microsoft Purview Data Loss Prevention (DLP) with advanced policy capabilities, Microsoft Purview Insider Risk Management, Microsoft Purview Communication Compliance, Microsoft Purview eDiscovery Premium (formerly Advanced eDiscovery), Microsoft Purview Advanced Audit, Microsoft Purview Information Barriers, Microsoft Purview Customer Lockbox, and Microsoft Purview Data Lifecycle Management with intelligent retention.
What the Purview Suite does not include is the basic Purview functionality available in M365 E3. E3 includes standard DLP policies, basic retention policies, basic eDiscovery, standard audit logs, and Microsoft Information Protection with basic sensitivity labelling. The Purview Suite extends these capabilities significantly in each category — but organisations that only need the basic compliance tier should not be purchasing the Purview Suite add-on. The E3 compliance baseline is sufficient for many organisations, particularly those without strong regulatory requirements for advanced audit, insider risk monitoring, or complex eDiscovery workflows.
The Prerequisites Change That Affected SMBs
One of the most consequential changes in 2025 was the modification to Purview Suite eligibility prerequisites. As of October 1, 2025, Microsoft 365 Business Premium is no longer an eligible prerequisite for the Purview Suite enterprise add-on. Previously, Business Premium customers could purchase the Purview Suite (formerly E5 Compliance) as an add-on, giving SMBs access to enterprise-grade compliance tools.
This change significantly affects organisations in the 50 to 300 seat range that used Business Premium as their M365 subscription and had purchased E5 Compliance to meet regulatory requirements. These organisations now need to either upgrade their base subscription to an enterprise plan (E3 or higher) to retain eligibility for the Purview Suite, or reassess which compliance capabilities they genuinely need and identify alternative standalone options. For many, the Business Premium-to-E3 upgrade represents a substantial cost increase that must be weighed against the compliance capability requirement.
Reviewing your Purview licensing after the September 2025 rebrand or the October prerequisite changes?
Our Microsoft licensing advisory specialists provide independent compliance licensing analysis with no Microsoft commercial incentive.What Your E3 Subscription Already Includes
Before assessing whether the Purview Suite add-on is necessary, every organisation should take inventory of what their M365 E3 subscription already includes in the compliance domain. The E3 compliance baseline is materially more capable than most IT teams recognise, and the most common driver of unnecessary Purview Suite spending is purchasing the add-on to access capabilities that already exist in E3.
M365 E3 includes the following Purview capabilities at no additional charge:
- Data Loss Prevention — Standard DLP policies across Exchange Online, SharePoint, OneDrive, and Teams, with out-of-box sensitive information types and custom policies. This is not the advanced DLP of the Purview Suite, but covers the standard regulatory requirements for most organisations not subject to complex data residency or financial services regulations.
- Information Protection — Microsoft Purview Information Protection with sensitivity labelling across M365 applications. Manual and recommended labelling (auto-labelling based on content scanning) requires a Purview Suite or Azure Information Protection P2 add-on, but manual sensitivity labelling and basic label enforcement are included in E3.
- eDiscovery Standard — Content search, eDiscovery cases, and litigation holds. Advanced eDiscovery (now eDiscovery Premium in Purview Suite) with intelligent review sets, AI-assisted document tagging, and custodian management requires the Purview Suite.
- Standard Audit — 90-day audit log retention across M365 services. The Purview Suite extends this to 1-year audit retention (with optional 10-year extension) and adds Advanced Audit with higher-value audit events and custom log policies.
- Retention Policies — Standard retention policies and retention labels for data lifecycle management across Exchange, SharePoint, OneDrive, and Teams. Adaptive scope policies and intelligent retention based on machine learning classification require the Purview Suite.
For an organisation whose compliance requirements are met by this E3 baseline — standard DLP, basic retention, standard eDiscovery, 90-day audit — the Purview Suite at $12 per user per month per year is $144 per user per year in spending that does not address an unmet requirement. For a 1,000-user organisation, that is $144,000 per year in unnecessary compliance spending.
What the Purview Suite Adds That E3 Does Not Have
The Purview Suite's incremental value over the E3 compliance baseline is concentrated in five areas. Understanding which of these areas your organisation actually requires is the core of the Purview licensing decision.
Insider Risk Management
Microsoft Purview Insider Risk Management is a behavioural analytics capability that uses machine learning to detect patterns of potentially risky activity by users — data exfiltration before resignation, policy violations related to sensitive data, sabotage patterns, or compliance violations. It integrates with HR systems (Workday, SuccessFactors) to correlate high-risk periods (resignation dates, performance improvement plans) with anomalous data activity.
Insider Risk Management is the Purview Suite capability most often cited by security and compliance teams as the primary justification for the add-on. It is also the capability with the highest implementation overhead: the alerts generated by Insider Risk Management require trained analysts to review and disposition, and organisations without a dedicated security operations function frequently find that they generate alerts they cannot act on. The capability is genuinely valuable — but only for organisations with the analyst capacity to operationalise it.
Communication Compliance
Microsoft Purview Communication Compliance monitors communications across Exchange, Teams, and third-party connectors for regulatory violations, policy breaches, and conduct issues. It is required by financial services regulators in many jurisdictions for supervision of communications by regulated individuals. For organisations in financial services, healthcare, and government contracting, Communication Compliance may be a regulatory requirement, not a discretionary capability. For organisations without those regulatory drivers, it is unlikely to justify the Purview Suite investment on its own.
eDiscovery Premium
eDiscovery Premium (formerly Advanced eDiscovery) extends the standard eDiscovery capability in E3 with intelligent review sets, near-duplicate detection, email threading, conversation reconstruction, and custodian legal hold workflows that scale to complex litigation with millions of documents. Legal teams at organisations with significant litigation exposure consistently rate eDiscovery Premium as the highest-value Purview Suite component. Organisations with minimal litigation activity and small discovery workloads rarely need it.
Advanced Audit and 1-Year Log Retention
Advanced Audit extends audit log retention from E3's 90 days to 1 year (with optional 10-year extension at additional cost), adds high-value audit events for specific activities (such as MailItemsAccessed and Send in Exchange, which are critical for breach investigation), and provides audit log export capabilities for SIEM integration. For regulated organisations with incident response requirements that mandate longer audit retention, this is frequently a genuine requirement.
Advanced Data Lifecycle and Auto-Labelling
The Purview Suite's advanced data lifecycle capabilities include adaptive retention scope policies that dynamically update retention scope based on user attributes, trainable classifiers for content-based auto-labelling, and exact data match for sensitive information type detection. For large organisations with complex data classification and retention requirements, these capabilities reduce manual overhead significantly. For smaller or less regulated organisations, the E3 standard retention policies are sufficient.
The Standalone Purview Option: The Alternative Microsoft Under-Advertises
Microsoft offers individual Purview capabilities as standalone add-ons that allow organisations to purchase specific compliance tools without acquiring the entire Purview Suite. The standalone approach delivers approximately 80% of compliance requirements at 40 to 50% of the Purview Suite cost for the majority of organisations — a claim supported by the fact that most enterprises deploy only a subset of Purview Suite capabilities even after purchasing the full bundle.
The Microsoft Purview Suite for Business Premium at $10 per user per month covers the core Purview capabilities for Business Premium-eligible customers (noting the October 2025 prerequisite change). Individual Purview add-on pricing for specific capabilities varies; independent compliance assessments that map regulatory requirements to the minimum necessary Purview capabilities consistently find that targeted standalone purchasing is the commercially optimal approach for organisations subject to one or two specific regulatory requirements rather than a broad compliance programme.
The standalone approach also avoids the Purview Suite's broad population coverage requirement. The Purview Suite add-on must be licensed for all users who generate or access content subject to the compliance policy — which in practice means most M365 users. Insider Risk Management, by contrast, may genuinely need to be deployed only for specific user populations (those with access to sensitive IP, financial data, or regulated information). Targeted purchasing for the specific population that requires coverage is not always possible with the Purview Suite bundle, which is designed for broad deployment.
Purview Licensing Within the M365 SKU Hierarchy
The M365 SKU hierarchy as of 2026 runs from F1 and F3 for frontline workers through E3, E5, and the new E7 at the top. E7, available from May 1, 2026 at $99 per user per month, bundles E5 Security and the E5 Compliance capabilities (as the Purview Suite component) alongside Copilot, Agent 365, and the Entra Suite.
For organisations on E5 that are already paying $12 per user per month for E5 Compliance (now the Purview Suite), the E7 upgrade economics require a careful assessment. If E5 plus Purview Suite plus Copilot are already the target configuration — at $57 (E5) + $12 (Purview Suite) + $30 (Copilot) = $99 per user per month — E7 at $99 represents the same effective cost with Agent 365 and the Entra Suite added at no marginal cost. This is a straightforward case for E7 if Agent 365 and Entra Suite provide independent value.
However, if E5 Compliance or the Purview Suite has been purchased as a broad deployment when only targeted compliance coverage is required, the E7 upgrade path embeds that overcoverage into a higher baseline SKU. The right sequence is: first optimise the Purview licence to cover only what is needed, then evaluate E7 as a bundle from the correctly sized compliance baseline.
The bottom line on Purview licensing in 2026: most organisations over-deploy the Purview Suite relative to their actual compliance requirements. The September 2025 rebrand created a natural checkpoint to reassess. The standard process — mapping regulatory obligations to specific Purview capabilities, then licensing only what is required — consistently produces 30 to 50% compliance cost reductions without any loss of regulatory coverage.
In one engagement, a 12,000-seat enterprise on Microsoft 365 E3 was evaluating the E5 Compliance add-on at $12 per user per month — a $1.7M annual commitment — to gain access to Advanced eDiscovery and Insider Risk Management. Redress mapped their actual compliance use cases and found that 80% of their requirements were covered by existing E3 entitlements and two targeted standalone Purview modules. The optimised licensing cost $380,000 per year — a saving of $1.3M annually.