# Browser data loss prevention is enabled for AI apps via Edge for Business

Microsoft Purview Data Loss Prevention (DLP) monitoring and protection are built right into the Microsoft Edge for Business browser.

Source: https://maester.dev/docs/tests/ZTA.35041

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

## Overview

Microsoft Purview Data Loss Prevention (DLP) monitoring and protection are built right into the Microsoft Edge for Business browser. You don’t need to onboard the device into Microsoft Purview. This integration helps you stop users from sharing sensitive information to and from cloud apps using Edge for Business. With the rise of AI applications, this capability is crucial to help prevent users from sharing sensitive information with unmanaged AI apps through Edge for Business, which could lead to data leaks and compliance risks. By enabling browser DLP for AI apps via Edge for Business, you can extend your data protection policies to cover web-based interactions, ensuring that sensitive data is safeguarded even when accessed through the browser.

## Remediation

- [Help prevent sharing via Microsoft Edge for Business to unmanaged AI apps from managed devices](https://learn.microsoft.com/purview/dlp-create-policy-block-to-ai-via-edge?wt.mc_id=zerotrustrecommendations_automation_content_cnl_csasci)

## Run it

The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:

```powershell
Install-Module ZeroTrustAssessment -Scope CurrentUser
Connect-Maester
Invoke-Maester -Pack ZTA -SkipBuiltIn
```

Leave out `-SkipBuiltIn` to run Maester's own checks in the same run.

<details>
<summary>About this check</summary>

| | |
| --- | --- |
| Severity | Medium |
| Effort to fix | High |
| Impact on users | Medium |
| Pillar | Data, AI |
| Category | Data Security Posture Management |
| Product | [Purview](/docs/tests/products/purview) |
| Feature | Data loss prevention |
| Area | Data protection |
| ATT&CK | [T1567](/docs/tests?mitre=T1567) Exfiltration Over Web Service |
| Licence | RMS_S_PREMIUM2, Microsoft 365 E5, Microsoft Purview PAYG |
| Tenant | Workforce |

Product, feature, area and ATT&CK are Maester's: the assessment does not record them, so Maester keeps them in the pack's `taxonomy.json`.

</details>

<p class="mt-ms-note not-content"><svg class="mt-ms-note__logo" viewBox="0 0 21 21" aria-hidden="true"><rect width="10" height="10" fill="#f25022"/><rect x="11" width="10" height="10" fill="#7fba00"/><rect y="11" width="10" height="10" fill="#00a4ef"/><rect x="11" y="11" width="10" height="10" fill="#ffb900"/></svg><span>A Microsoft check, part of the <a href="/docs/tests/packs/zero-trust-assessment">Zero Trust Assessment</a> pack. Text from ZeroTrustAssessment 3.1.0, © Microsoft, <a href="/docs/tests/packs/zero-trust-assessment#licence">MIT licence</a>.</span></p>
