Office 365 Security & Compliance Center

  • 5 minutes to read

The Office 365 Security & Compliance Center is designed to help you manage compliance features across Office 365 for your organization. Links to existing SharePoint and Exchange compliance features bring together compliance capabilities across Office 365.

Note

Currently, many of the compliance features are still accessible through service-specific management interfaces, such as the Exchange admin center (EAC). However, this will change in the future as more service-independent compliance features are added to the Security & Compliance Center.

Security & Compliance Center availability for Business and Enterprise plans
Feature
Office 365 Business Essentials
Office 365 Business Premium
Office 365 Enterprise E1
Office 365 US Government G1
Office 365 Enterprise E3
Office 365 US Government G3
Office 365 Enterprise E5
Office 365 Enterprise F1
Office 365 US Government F1
Access to the Security & Compliance Center
Yes
Yes
Yes
Yes
Yes
Yes
Office 365 Cloud App Security
No
No
No
No
Yes
No
Threat management such as mail filtering and anti-malware
Yes
Yes
Yes
Yes
Yes
Yes
Advanced threat management, such as threat explorer for phishing campaigns6
No
No
No
No
Yes
No
Customer Lockbox
No
No
No
No
Yes
No
Mobile device management
Yes
Yes
Yes
Yes
Yes
Yes
Data loss prevention for Exchange Online, SharePoint Online, and OneDrive for Business7, 9
 No
No
No
Yes
Yes
No
Data loss prevention for Microsoft Teams chat and channel messages
No
No
No
No
Yes
No
Sensitivity labels10 No
No
No
Yes
Yes
No
Information barriers
No
No
No
No
Yes
No
Data governance1
Yes
Yes
Yes
Yes
Yes
Yes
Advanced data governance2
No
No
No
No
Yes
No
Content search
Yes
Yes
Yes
Yes
Yes
Yes
eDiscovery cases
Yes
Yes
Yes
Yes
Yes
Yes
eDiscovery holds (including query-based eDiscovery holds)
No
No
No
Yes
Yes
No
eDiscovery export
No
No
No
Yes
Yes
No
Advanced eDiscovery5
No
No
No
No
Yes
No
Archiving
Yes3
Yes3
Yes3
Yes4
Yes4
No
Unified auditing8
 Yes
Yes
Yes
Yes
Yes
Yes
Retention policies
No
No
Yes11
Yes
Yes
Yes11
Supervision policies
No
No
No
No
Yes
No

1 Data governance lets users create, publish, and manually apply labels to documents; import data using drive shipping or over the network.
2 Advanced data governance allows you to retain important information and delete unimportant information by classifying information based on a retention or deletion policy or both. It includes intelligent/automated actions such as recommending policies, automatically applying labels to data, applying labels based on sensitive data types or queries, disposition review, and use of smart import filters. It also includes the Supervision feature for reviewing employee communications for security and compliance purposes.
3 50 GB limit.
4 Unlimited.
5 Advanced eDiscovery is supported in the United States and in the Western Europe (Netherlands) region. (Customer data from Canada and Asia Pacific is exported to the United States. Customer data from Europe, the Middle East, and Africa is exported to Western Europe [Netherlands].)
6 Advanced Threat Protection is available in Office 365 Enterprise E5 and as a standalone service for Office 365 Enterprise E1 and Office 365 Enterprise E3.
7 Includes files stored in Microsoft Teams repositories.
8 You can also use the Office 365 Management Activity API to retrieve events from the unified audit log.
9 A DLP add-on is available that can be added to any SKU that has either Exchange or SharePoint/OneDrive.
10 Sensitivity labels are also included in Azure Information Protection P1 and P2.
11 An Exchange Online Plan 2 license is required to apply a retention policy to a user mailbox.

Security & Compliance Center availability for Standalone plans
Feature
Exchange Online Plan 1
Exchange Online Plan 2
Exchange Online Kiosk
SharePoint Online Plan 1
SharePoint Online Plan 2
Skype for Business Online Plan 1
Skype for Business Online Plan 2
Access to the Security & Compliance Center
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Office 365 Cloud App Security
No
No
No
No
No
No
Yes
Threat management, such as mail filtering and anti-malware
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Advanced threat management, such as threat explorer for phishing campaigns
No
No
No
No
No
No
No
Customer Lockbox
No
No
No
No
No
No
No
Mobile device management
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Data loss prevention for Exchange Online, SharePoint Online, and OneDrive for Business9
No
Yes
No
No
Yes 7
No
Yes
Data loss prevention for Microsoft Teams chat and channel messages
No
No
No
No
No
No
No
Information barriers
No
No
No
No
No
No
No
Data governance1
Yes2
Yes
Yes
Yes
Yes
Yes
Yes
Advanced data governance3
No
No
No
No
No
No
No
Content search
Yes
Yes
Yes
Yes
Yes
Yes
Yes
eDiscovery cases
Yes
Yes
Yes
Yes
Yes
No
No
eDiscovery export
No
Yes
No
No
Yes
No4
No4
eDiscovery holds (including query-based eDiscovery holds)
No
Yes
No
No
Yes
No4
No4
Advanced eDiscovery5
No
No
No
No
No
No
No
Archiving6
Yes
Yes
No
Yes
Yes
No
No
Unified auditing8
 Yes
Yes
Yes
Yes
Yes
No
No
Retention policies
No
Yes
No
Yes
Yes
Yes
Yes
Supervision policies
No
No
No
No
No
No
No

1 Data governance lets users create, publish, and manually apply labels to documents; import data using drive shipping or over the network.
2 Requires purchase of Exchange Online Archiving add-on.
3 Advanced data governance allows you to retain important information and delete unimportant information by classifying information based on a retention or deletion policy or both. It includes intelligent/automated actions such as recommending policies, automatically applying labels to data, applying labels based on sensitive data types or queries, disposition review, and use of smart import filters. It also includes the Supervision feature for reviewing employee communications for security and compliance purposes.
4 Skype conversations are stored as part of the mailbox.
5 Advanced eDiscovery requires Office 365 Enterprise E5 or an add-on license.
6 Skype archiving is within the user's mailbox.
7 Includes files stored in Microsoft Teams repositories.
8 You can also use the Office 365 Management Activity API to retrieve events from the unified audit log.
9 A DLP add-on is available that can be added to any SKU that has either Exchange or SharePoint/OneDrive.

Security & Compliance Center availability in Office 365 operated by 21Vianet

The Security & Compliance Center is not available in any plans for Office 365 operated by 21Vianet.

Security & Compliance Center availability in Office 365 Germany

The Security & Compliance Center is available for Office 365 Germany. For information about Office 365 Germany, see Office 365 Germany.