MC1429010 Plan for changeMajor changeUser impactAdmin impactRetirement

Retirement notice: Instances policy location in Microsoft Purview Data Loss Prevention

What the notice says

Microsoft's text, with its sections, lists and tables; source markup removed

What and Why

Microsoft is retiring the Instances policy location in Microsoft Purview Data Loss Prevention (DLP) on January 6, 2027. Policies created using the Instances location currently rely on Microsoft Defender for Cloud Apps file policy infrastructure for enforcement. To provide a unified, enterprise-ready compliance experience, Microsoft is introducing dedicated policy locations within Microsoft Purview for supported non-Microsoft applications including Google Workspace, Box, Dropbox, Salesforce, ServiceNow, AWS, and Cisco Webex.

Migration guidance: Migrate file policies to Microsoft Purview | Microsoft Learn

Rollout Schedule

Dedicated application locations introduced prior to retirement.
Retirement rollout begins in early January 2027 and completes by mid-January 2027.
Instances location retirement date is January 6, 2027.

Impact on Your Organization

Who is affected

Microsoft Purview administrators.
Organizations currently using the Instances location.
Organizations protecting data in Google Workspace, Box, Dropbox, Salesforce, ServiceNow, AWS, or Cisco Webex.

Platforms/Services

Microsoft Purview Data Loss Prevention
Microsoft Purview Information Protection
Microsoft Defender for Cloud Apps
Google Workspace
Box
Dropbox
Salesforce
ServiceNow
AWS
Cisco Webex

What will happen

The Instances policy location will remain available until January 6, 2027.
After this date:
If your organization currently uses the Instances location, policies created using the Instances location should be reviewed and, if still required, recreated using the corresponding dedicated application location in Microsoft Purview before January 6, 2027.
After January 6, 2027, policies that continue to rely on the retired Instances location may no longer be enforced or supported.
If your organization does not use the Instances location:

New policies can no longer be created using the Instances location.
Existing policies configured using the Instances location will no longer be supported.
Dedicated non-Microsoft app locations for supported applications are being introduced in Microsoft Purview over the coming weeks.
Customers should use the dedicated non-Microsoft app locations in Microsoft Purview for future DLP and auto-labeling policies.

No action is required.
You can continue creating DLP and auto-labeling policies using supported Microsoft Purview locations and future dedicated non-Microsoft app locations as they become available.

Action Required/Recommendations

Review existing DLP policies that use the Instances location.
Review existing auto-labeling policies that use the Instances location.
Identify affected non-Microsoft applications.
Recreate policies using dedicated application locations.
Validate policy behavior before retiring legacy policies.
Complete migration before January 6, 2027.
Update internal documentation and operational procedures.
Communicate this change to compliance and support teams.

Learn more

Compliance Considerations

Compliance Consideration	Explanation
Existing customer data processing changes	Data protection enforcement transitions from Defender for Cloud Apps file policy infrastructure to Microsoft Purview dedicated policy locations.
DLP policies or enforcement affected	The Instances policy location is retired and existing policies must be recreated using dedicated application locations.
Information Protection labels or auto-labeling affected	Existing auto-labeling policies should be recreated using dedicated application locations.
Compliance monitoring and reporting changes	Administrators will manage policies through dedicated application locations in Microsoft Purview.
Third-party integrations added or changed	Dedicated policy locations are introduced for Google Workspace, Box, Dropbox, Salesforce, ServiceNow, AWS, and Cisco Webex.
Administrative controls	Administrators manage DLP and auto-labeling policy creation, scope, testing, and enforcement through Microsoft Purview.

What changed

Between the versions this installation saw, newest first

This installation has seen one version of this notice, first on 19 Oct 2026. Later changes will show here.

Linked documentation

Microsoft pages the notice links to

The notice links to no Microsoft Learn or Support page that this installation reads.

Not confirmed here

What this page cannot tell you

Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
Versions before 19 Oct 2026: this installation first saw the notice after Microsoft posted it.