Forum Discussion
A Quick Look at Purview Data Security Investigations
During the quiet holiday period, I tested the new Purview Data Security Investigations (DSI) solution, which seems to be put together from bits of Microsoft 365 together with Security Copilot and some generative AI. Assembling new solutions from existing components makes sense because it reduces engineering effort. Without real data, it's hard to know how effective DSI is, but the cost of an investigation came as a real surprise.
https://office365itpros.com/2026/01/06/data-security-investigation/
1 Reply
I agree that the “cost per investigation” angle can be a bit misleading if you compare DSI to other Microsoft-internal features 1:1.
DSI feels much closer to the investigation / review platform space (Relativity, Nuix, etc.) than to “just another M365 capability.” And in that world, competitors often charge ongoing monthly fees plus storage/processing for as long as the matter runs — which can easily end up multiples higher than a consumption-based run in DSI.
The real takeaway for me isn’t “DSI is expensive,” but: pay-as-you-go needs guardrails (budgets, alerts, scoped investigations, clear runbooks) and ideally a realistic PoC with representative data volumes. Without that, even small tests can look surprisingly costly.
