For detailed information about supported subscriptions, see the Message policy and compliance service description.

Your organization must have a subscription that includes Microsoft Purview Advanced Message Encryption. The following articles describe how you set up and use Advanced Message Encryption. Get started with Microsoft Purview Advanced Message Encryption You can only revoke and set an expiration date for emails sent to external recipients. Also, admins can further control encrypted emails accessed externally through a secure web portal by revoking access to the mail at any time. Once you've configured the policies, you pair policies with custom branded email templates and then add an expiration date for extra control of emails that fit the policy. You configure these policies to identify sensitive information types such as PII, Financial, or Health IDs, or you can use keywords to enhance protection. With Advanced Message Encryption in Office 365, you can control sensitive emails shared outside the organization with automatic policies and track those activities through the encrypted message portal access logs. If your organization has a subscription that does not include Microsoft Purview Advanced Message Encryption, you can purchase it with the Microsoft 365 E5 Compliance SKU add-on for Microsoft 365 E3, Microsoft 365 E3 (Nonprofit Staff Pricing), or the Office 365 Advanced Compliance SKU add-on for Microsoft 365 E3, Microsoft 365 E3 (Nonprofit Staff Pricing), Office 365 SKUs, or the Microsoft 365 E5/A5 Information Protection and Governance SKU add-on for Microsoft 365 A3/E3.Īdvanced Message Encryption helps customers meet compliance obligations that require more flexible controls over external recipients and their access to encrypted emails. Microsoft Purview Advanced Message Encryption is included in Microsoft 365 Enterprise E5, Office 365 E5, Microsoft 365 E5 (Nonprofit Staff Pricing), Office 365 Enterprise E5 (Nonprofit Staff Pricing), and Office 365 Education A5.

Microsoft secure email solutions