Azure Information Protection plans
| FEATURE | FREE | AZURE INFORMATION PROTECTION FOR OFFICE 365 | AZURE INFORMATION PROTECTION PREMIUM P1 | AZURE INFORMATION PROTECTION PREMIUM P2 |
| Azure Information Protection content consumption by using work or school accounts from AIP policy-aware apps and services | Available | Available | Available | Available |
| Protection for Microsoft Exchange Online, Microsoft SharePoint Online, and Microsoft OneDrive for Business content | Not available | Available | Available | Available |
| Bring Your Own Key (BYOK) for customer-managed key provisioning life cycle2 | Not available | Available | Available | Available |
| Custom templates, including departmental templates | Not available | Available | Available | Available |
| Protection for on-premises Exchange and SharePoint content via Rights Management connector | Not available | Available | Available | Available |
| Azure Information Protection software developer kit for protection for all platforms – Windows, Windows Mobile, iOS, Mac OSX, and Android | Not available | Available | Available | Available |
| Protection for non-Microsoft Office file formats, including PTXT, PJPG, and PFILE (generic protection) | Not available | Available | Available | Available |
| Azure Information Protection content creation by using work or school accounts | Not available | Available | Available | Available |
| Office 365 Message Encryption | Not available | Available | Available | Available |
| Administrative control3 | Not available | Available | Available | Available |
| Manual, default, and mandatory document classification | Not available | Not available | Available | Available |
| Azure Information Protection scanner for content discovery of on-premises files matching any of the sensitive information types | Not available | Not available | Available | Available |
| Azure Information Protection scanner to apply a label to all files in an on-premises file server or repository | Not available | Not available | Available | Available |
| Rights Management connector with on-premises Windows Server file shares by using the File Classification Infrastructure (FCI) connector | Not available | Not available | Available | Available |
| Document tracking and revocation | Not available | Not available | Available | Available |
| Configure conditions for automatic and recommended classification | Not available | Not available | Not available | Available |
| Hold Your Own Key (HYOK) that spans Azure Information Protection and Active Directory (AD) Rights Management for highly regulated scenarios | Not available | Not available | Not available | Available |
| Azure Information Protection scanner for automated classification, labeling, and protection of supported on-premises files | Not available | Not available | Not available | Available |
See Azure active directory plans for enhanced security and access management services.
