Video information protection & risk management

In this article, we inform you of the tools available to protect video content stored in Microsoft 365. More specifically, we walk through how video works hand in hand with Microsoft Purview, so that admins can organize, manage and protect video files in their company.

Microsoft Purview is a suite of solutions that allows organizations to discover, govern, and protect their data stored on SharePoint.

Purview helps your organization to:

  • Gain visibility into data assets across your organization
  • Enable access to your data, security, and risk solutions
  • Safeguard and manage sensitive data across clouds, apps, and endpoints
  • Manage end-to-end data risks and regulatory compliance
  • Empower your organization to govern, protect, and manage data in new, comprehensive ways

Audit logs

Microsoft Purview auditing solutions provide integrated solutions to help organizations effectively respond to security events, forensic investigations, internal investigations, and compliance obligations. Thousands of user and admin operations performed in dozens of Microsoft 365 services and solutions are captured, recorded, and retained in your organization's unified audit log. Audit records for these events are searchable by security ops, IT admins, insider risk teams, and compliance and legal investigators in your organization. This capability provides visibility into the activities performed across your Microsoft 365 organization.

For more information about auditing solutions, see Audit (Premium) and Audit (Standard).

How it works with video

Stream (on SharePoint) logs fall under the File and Page activities category. Audit logs UI screenshot

The Microsoft Stream filter category refers to Stream (Classic) and will be deprecated with Stream (Classic). Audit logs deprecated Stream filter screenshot


If you're looking for all activities related to a file type, add an asterisk before the file name to return all entries for that file. For example, for .mp4 files: *.mp4

Here are some of the key actions that are logged against video files as part of Stream (on SharePoint). This isn't a complete list, there are many other events that are logged against video files:

User Action Audit log operation
Created or uploaded video FileUploaded
File and metadata changes to video FileModified
Deleted video FileDeleted
Downloaded video FileDownloaded
Viewed video FileAccessed
Shared video SharingSet
Commented on video CommentCreated
Deleted video comment CommentDeleted
Uploaded captions / transcripts FileTranscriptCreated
Downloaded transcript FileTranscriptContentAccessed
Uploaded thumbnail CustomThumbnailUploaded

You can see an extensive list of SharePoint audit log events in Purview's help documentation.

The sections relevant to video are:

Communications Compliance

Protecting sensitive information and detecting and acting on workplace harassment incidents is an important part of compliance with internal policies and standards. Microsoft Purview Communication Compliance helps minimize these risks by helping you quickly detect, capture, and take remediation actions for email and Microsoft Teams communications. These include inappropriate communications containing profanity, threats, and harassment and communications that share sensitive information inside and outside of your organization.

How it works with video

Communications compliance doesn't capture general video files in Microsoft 365. However, there's work in progress to capture and review transcripts saved as part of Teams meeting recordings: Microsoft 365 Roadmap Item #109534

Data Lifecycle Management (Retention labels)

Microsoft Purview Data Lifecycle Management (formerly Microsoft Information Governance) provides you with tools and capabilities to retain and delete content across Exchange, SharePoint, OneDrive, Microsoft 365 Groups, Teams, and Viva Engage.

Retaining and deleting emails, documents, and messages are often needed for compliance and regulatory requirements. However, deleting content that no longer has business value also reduces your attack surface.

How it works with video

Retention policies and Retention Labels are currently supported for video files, as with any other file stored in SharePoint.

Retention Label UI screenshot See this help article for more information on how to apply retention labels to files in OneDrive and SharePoint.

Retention labels on Teams meeting recordings

You can also automatically apply retention labels to meeting recordings.

Data Loss Prevention

Unintentional sharing of sensitive items can cause financial harm to your organization and may result in a violation of laws and regulations. Microsoft Purview Data Loss Prevention can help protect your organization against unintentional or accidental sharing of sensitive information both inside and outside of your organization. In a data loss prevention policy, you:

Define the sensitive information you want to monitor for, like financial, health, medical, and privacy data. Where to monitor, like Microsoft 365 services or Windows and macOS devices. The conditions that must be matched for a policy to be applied to an item, like items containing credit card, driver's license, or social security numbers. The actions to take when a match is found, like audit, block the activity, and block the activity with override.

How it works with video

DLP UI screenshot The DLP alerts are triggered when checking for the keywords in the title, transcript, or other information in the video metadata. If there's a match, a tool tip displays in OneDrive or in the SharePoint page in which the file is stored.


DLP tool tips only show in OneDrive and SharePoint libraries, they do not show directly on the Stream web app player page.


eDiscovery is the process of identifying, collecting, and auditing electronic information for legal, regulatory, or business reasons. You can use Microsoft Purview eDiscovery solutions to search for data and content in Exchange Online, OneDrive for Business, SharePoint Online, Microsoft Teams, Microsoft 365 Groups, and Viva Engage communities. You can search mailboxes and sites within an eDiscovery search, and then export the search results for analysis and review.

To learn more about eDiscovery solutions, check out the help documentation.

How it works with video

eDiscovery UI screenshot with ability to preview video found

eDiscovery currently supports video search, playback, and export. The file can be identified and collected by searching specific SharePoint or OneDrive locations, or alternately, searching for the video title or words in the transcript.

Coming soon, video metadata such as transcripts, chapters, custom thumbnails will be supported in eDiscovery for review and export. See Microsoft 365 Roadmap Item #106101 and the blog post Inspect transcripts for Microsoft Teams meeting recordings for more info.

Information Protection (Sensitivity labels)

There are many capabilities that you can use from the Microsoft Purview Information Protection solution to help protect your data, wherever it's stored and however it's accessed.

However, sensitivity labels are the foundational capability that both provide protection actions and interact with other Purview solutions and capabilities. To learn more about sensitivity labels, check out the following help documentation.

How it works with video

Currently, sensitivity labels aren't supported in Microsoft 365 for video files. We know this is a key capability needed and we're investigating how this can be supported in the future.