Microsoft 365 Compliance Licensing Comparison
Solution Feature
Microsoft 365 E5
1
Microsoft 365 E5
Compliance
2
(See footnote 2
regarding blank
Microsoft 365
E5/A5 Info
Protection &
Governance
3
Microsoft 365 E5
Insider Risk
Management
4
Microsoft 365 E5
eDiscovery and
Audit
4
Microsoft 365 E3 Microsoft 365 F3 Microsoft 365 F1
Microsoft 365 F2
Office 365 E5 Office 365 E3 Office 365 E1 Office 365 F3
Office 365
Advanced
Compliance
(No longer
Office 365 Data
Loss Prevention
(DLP)
Exchange Online
Archiving
Enterprise
Mobility +
Secuirty (EMS) E5
EMS E3
Azure Info
Protection (AIP)
Plan 1
AIP Plan 2
(No longer
available for new
subscriptions)
Apply sensitivity labels manually in Microsoft 365 Apps (Office 365 ProPlus/Business client apps) using built-in labeling
l l
l
6
l
6
l l l
l
6
l
6
l
6
l
6
Apply sensitivity labels manually in Microsoft 365 Apps (Office 365 ProPlus/Business client apps) on Windows using AIP plug-in
l l
l
6
l
6
l
l
6
l
6
l
6
l
6
Apply sensitivity labels manually in Office for the Web and Office Mobile
l l l l l l
Apply sensitivity labels manually for SharePoint sites, Teams, and Microsoft 365 Groups (Preview)
l l
l
7
l
7
Apply sensitivity labels manually to data in 3rd party clouds
l
l
8
l
8
l
8
l
8
l
l
8
l
8
l
8
Apply sensitivity labels automatically in Microsoft 365 Apps (Office 365 ProPlus/Business client apps), Office for the Web, and Office Mobile based on sensitive information types
l l l l l
Apply sensitivity labels automatically to data in Office perpetual and SharePoint Server on-premises using AIP client (incl. AIP scanner)
l l l l l
Apply sensitivity labels automatically to files in SPO or to EXO email (Preview)
l l l l l
Auto-labeling policy simulation (Preview)
l l l l
Apply sensitivity labels automatically to data in 3rd party clouds
l l l l
l
8
Classify data automatically based on Exact Data Match
l l l l
Classify data automatically based on Machine Learning (trainable classifiers) (Preview)
l l l
Enable 3rd party integration into Microsoft Information Protection (MIP) using MIP SDK
l l l l l l l l l
Apply non-record retention labels manually
l l l l l l l l l
Apply a default retention label for SharePoint/Teams/OneDrive for business libraries, folders, and document sets and Microsoft 365 Groups
l l l l l
Apply a basic retention policy to the entire organization, specific locations or users
l l l l
Apply retention policies automatically based on specific conditions (e.g., keywords or sensitive information)
l l l l l
Apply retention policies automatically based on Machine Learning (trainable classifiers)
l l l
Apply retention policies automatically based on an event
l l l l l
Retention labels disposition review
l l l l l
Records Management (record labels, file plan manager, records versioning) (Preview)
l l l l l
Protection for on-premises Exchange and SharePoint content via Rights Management connector
l l l l l l l l l l l l l
Set labels to automatically apply pre-configured S/MIME protection in Outlook
l l l l l
Control oversharing of information when using Outlook (warn, justify or block emails)
l l l l l
3rd-party data connectors
l l l l l
Preservation Lock
l l l l l
Email archiving
l l
l
10
l
9
l
9
l
10
l
10
Import PST
l l
l
9
l
9
l
10
Content and Activity Explorer (Preview)
l l l l l
Analytics Overview (Preview)
l l l l
Basic Office 365 Message Encryption
l l l l l l l l l l
Advanced Office 365 Message Encryption
l l l l l
Office 365 DLP for files and email
l l l l l
Communication DLP (Teams chat and channel conversations)
l l l l l
Cloud App Security
l l l
l
11
l
Customer Key for Office 365
l l l l l
Bring Your Own Key (BYOK) for customer-managed key provisioning life cycle
12
l l l l l l l l l
Hold Your Own Key (HYOK) that spans Azure Information Protection and Active Directory (AD) Rights Management for highly regulated scenarios (Preview)
l l l l l
Insider Risk Management
l l l
Communication Compliance (incl. Supervision policies)
l l l l l
Information Barriers
l l l l l
Customer Lockbox
l l l l l
Privileged Access Management
l l l l l
Content Search
l l l l l l l l l
Core eDiscovery (incl. Hold and Export)
l l l l
l
13
Advanced eDiscovery
l l l l l
Custodian management (mapping content to custodian)
l l l l
Custodian communications
l l l l
Deep crawling/indexing
l l l l
Review data (query data, tags, smart tags, dashboard) and annotate (redact)
l l l l
Analyze data (near duplicate identification, email threading, themes)
l l l l
Non-Office 365 ingestion and processing (e.g. OCR)
l l l l
Advanced eDiscovery Export (download, export, add to another review set)
l l l l
Basic Audit
l l l l l l l l l
Advanced Audit
l l l l
Compliance Manager (Preview)
l l l l l l l l l
Compliance Score (Preview)
l l l l l l l l l
9
Each user initially receives 100 GB of storage in the archive mailbox. When auto-expanding archiving is turned on, additional storage is automatically added when the 100 GB storage capacity is reached.
Note: A dot (l) indicates that the rights to benefit from the feature are specifically conveyed through the license. Microsoft 365 E5 Compliance, Microsoft 365 E5 Information Protection and Governance, Microsoft 365 E5 Insider Risk
Management, and Microsoft 365 E5 eDiscovery and Audit are supplemental (add-on) licenses that have pre-requisite license requirements and convey only the rights to benefit from advanced (E5) features only, and not the rights to benefit from
underlying features (e.g. Microsft 365 E3 features), which must be licensed separately.
10
Archive mailbox limited to 50 GB
11
Office 365 Cloud App Security only
12
Azure subscription required to use configured key for Bring Your Own Key (BYOK).
5
Requires EMS E5, E5 Security, Windows 10 E5, Microsoft Defender ATP, or Microsoft Cloud App Security.
6
Microsoft 365 Apps must be licensed separately.
7
Requires Azure Active Directory Premium Plan 1
8
Requires Microsoft Cloud App Security
©2020 Microsoft Corporation. All rights reserved. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY. This document is provided "as-is." Information and views expressed in
this document, including URL and other Internet Web site references, may change without notice. This document does not provide you with any legal rights to any intellectual property in any Microsoft product. Some information relates to pre-released
product which may be substantially modified before it’s commercially released. Original webpage: https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-
1
E5 Compliance value shown. Includes additional value.
2
Requires Microsoft 365 E3 or [Office 365 E3 + EMS E3]. All listed features with blank cells are not specifically included in Microsoft 365 E5 Compliance, but are included in the pre-requisite licenses. For example, the combination of Microsoft 365 E3 + Microsoft 365 E5 Compliance includes all of the listed features.
3
Requires [AIP Plan 1 or EMS E3] + [ Exchange Online, SharePoint Online or OneDrive for business]
4
Requires Exchange Online, SharePoint Online or OneDrive for business
Information
Protection &
Governance
Insider Risk
Management
Compliance
Management
Discover &
Respond