Govern your data without handing it to the governor.
Prismara Gov is SovSec's replacement for Microsoft Purview and Priva. Data is classified and policies are enforced where the data lives, in Work, Mail, Talk, Spaces, the browser and on endpoints, so the hub only ever sees signed labels and decisions, never content. Sensitive steps such as eDiscovery and record disposal need a custodian quorum.
What Prismara Gov does
Classification
Built-in sensitive data types for Austria, Germany, the UK and the EU, plus exact data match and document fingerprinting.
Labels and data loss prevention
Signed sensitivity labels and DLP decisions made by the same engine in every app, compiled natively and to WebAssembly.
Retention and records
Retention policies, records with quorum-gated unlocking, and disposal by crypto-shredding with signed certificates.
Legal holds and eDiscovery
Holds that preserve content, plus review with de-duplication, threading, tagging and redaction, and exports in EDRM XML and Concordance formats.
Insider risk
Pseudonymised alerts that only an insider investigator can reveal, with a recorded reason.
Coming next
Communication compliance, information barriers, compliance manager, data security posture and privacy management.
How it's secured
Prismara Gov follows the engineering rules shared across the suite, plus these product-specific measures.
Hub never sees content
Classification runs at the edge. The hub receives signed labels, counts and decisions only.
Compliance escrow
Content keys are released only for the user-months named in a quorum-signed case, sealed to the reviewer's browser.
Custodians verify for themselves
Custodians approve only what they have checked locally, with passkeys in the browser.
Post-quantum throughout
Hybrid Ed25519 and ML-DSA-65 signatures, ML-KEM-768 sealing and X25519MLKEM768 TLS only.
Connects to the rest of the suite
Want SovSec to run it for you?
SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.