MC1289726 – Microsoft Purview: eDiscovery – CMK (Customer managed key) for eDiscovery direct export

Product:

eDiscovery, Purview, Purview Communication Compliance

Platform:

Online, Web, World tenant

Status:

In development

Change type:

New feature, Admin impact

Links:

557684

Details:

Summary:
Microsoft Purview eDiscovery Direct Export will support Customer-managed key (CMK) encryption for tenants with Data Encryption Policies via MDEP. Starting May 2026, export packages will be automatically encrypted with tenant-owned keys without changing the user experience. Enablement requires Microsoft Support assistance and proper CMK setup.

Details:
[Introduction]
To strengthen customer control over sensitive investigation data, Microsoft is extending Customer-managed key (CMK) protection to Microsoft Purview eDiscovery Direct Export. For tenants that have configured Data Encryption Policies (DEPs) using the Microsoft 365 Data-at-Rest Encryption Platform (MDEP), eDiscovery export packages will now be automatically encrypted using your organization's CMK. This helps ensure exported investigation data remains protected under customer-controlled encryption policies throughout the export lifecycle, without changing the existing eDiscovery user experience.
This message is associated with Microsoft 365 Roadmap ID 557684.
[When this will happen:]
Public Preview: We will begin rolling out early May 2026 and expect to complete by early June 2026.
General Availability (Worldwide): We will begin rolling out mid-June 2026 and expect to complete by mid-July 2026.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2026-04-24

updated:
2026-04-24

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Encryption Configuration Failure
If the Customer-managed key (CMK) is not properly configured before the change, direct export jobs will proceed without CMK encryption, potentially exposing sensitive data during export.
   - roles: Admins, Investigators
   - references: https://learn.microsoft.com/purview/customer-key-set-up?tabs=akv#create-two-new-azure-subscriptions" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/purview/customer-key-set-up?tabs=akv#create-two-new-azure-subscriptions, https://learn.microsoft.com/purview/edisc-search-export " target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/purview/edisc-search-export

Support Dependency
The enablement of CMK for eDiscovery Direct Export requires Microsoft Support assistance, which may lead to delays in implementation if not requested in advance, impacting the timeline for secure data exports.
   - roles: Admins, Investigators
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=557684, 557684: Microsoft Purview: eDiscovery- CMK (Customer managed key) for eDiscovery direct export

User Experience Disruption
Although the change is designed to be transparent, any misconfiguration or delay in support could lead to unexpected behavior in the eDiscovery process, affecting user trust and efficiency.
   - roles: Admins, Investigators
   - references: https://learn.microsoft.com/purview/edisc-search-export, https://learn.microsoft.com/purview/customer-key-set-up?tabs=akv#create-two-new-azure-subscriptions" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/purview/customer-key-set-up?tabs=akv#create-two-new-azure-subscriptions

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only