CompareMicrosoft Purview

A scanner you own, not a tenant feature you license

Microsoft Purview is the data governance and compliance suite built into Microsoft 365 and Azure: classification, sensitivity labels, DLP, retention, and eDiscovery, administered from the cloud and licensed through your tenant. PII Crawler is a standalone binary that scans files, shares, and database files on any machine, with no tenant and no cloud. They overlap on PII detection. They diverge on what you have to buy into.

Last reviewed October 2026, based on publicly available information.
PII Crawler
  • $497 one-time license, perpetual
  • Single binary, for Mac, Windows and Linux
  • No tenant, no Azure subscription, no E5
  • Air-gapped, no network calls during a scan
  • Files, network shares, database files
Download free trial
Microsoft Purview
  • Licensed via Microsoft 365 E5 / E5 Compliance
  • Azure consumption for Data Map scanning
  • Cloud-administered, tied to your tenant
  • Classification, labels, DLP, retention, eDiscovery
  • Strongest inside the Microsoft estate (M365, Azure)
Based on public information as of October 2026.

One governs the Microsoft estate. The other scans whatever you point it at

Purview was built to govern and protect data across Microsoft 365 and Azure: sensitivity labels that travel with Office documents, DLP enforced in Exchange, SharePoint, OneDrive, Teams, and on Windows endpoints, plus retention, eDiscovery, audit, and a compliance-posture dashboard. It's administered from the cloud, and its licensing rides on Microsoft 365 (typically E5) and Azure consumption. If your organization lives in Microsoft 365, it's the native answer.

PII Crawler answers a narrower, ecosystem-agnostic question: "Where is PII sitting on these files, shares, and database files, including the Linux server, the legacy NAS, and the air-gapped subnet, and can I get an answer without a tenant or a cloud?"

If your data and your stack are Microsoft, Purview's native integration is hard to beat. If you need to scan the systems Purview doesn't reach cleanly, or you'd rather not depend on a tenant and a licensing tier to find PII, PII Crawler is the simpler tool.

How they compare on the things that matter to a buyer

PII Crawler
Microsoft Purview
Cost & commitment
Pricing model
$497 one-time, perpetual license
Bundled into Microsoft 365 E5 / E5 Compliance, plus Azure consumption for Data Map
Renewals
None: the binary is yours
Tied to your Microsoft 365 subscription
Cost as you grow
Flat, unlimited users & scans
Per-user licensing + per-scan Azure consumption
Already paying for it?
n/a, standalone purchase
Yes, if you already license E5 / E5 Compliance
Deployment & data flow
Architecture
Single signed binary, no agent, no daemon
Cloud-administered service in your Microsoft tenant
Microsoft tenant / Azure subscription required
No, runs entirely standalone
Yes, it is part of Microsoft 365 / Azure
Where data is processed
On the machine running the scan
In your Microsoft cloud tenant
Air-gapped capable
Yes, no network calls during a scan
No, cloud-administered by design
Time to first scan
Minutes, no configuration
Configure portal, policies, roles, and scan sources first
Remote / isolated machine workflow
Copy the binary over ssh and run the TUI locally, no cloud needed
Source must be reachable and registered with the tenant
Discovery coverage
Local files (PDF, Office, CSV, archives)
Yes, with OCR
Via registered sources, not arbitrary local disk
Network shares (SMB / NFS)
Yes
Limited, via Data Map source registration
Database files
Yes, SQLite, Microsoft Access, and dBase/FoxPro files
Azure SQL & registered sources via Data Map
Microsoft 365 (Exchange, SharePoint, OneDrive, Teams)
Not yet, on the public roadmap
Yes, native and a core strength
Cross-platform standalone (Linux, Mac, non-MS stacks)
Yes, no Microsoft dependency
Centered on the Microsoft ecosystem
Detection approach
Pattern matching with validation and name/address rules, 30+ PII types
Sensitive Information Types + trainable classifiers
Governance & compliance
Sensitivity labels & persistent classification
No, point-in-time findings export
Yes, labels travel through Office apps
DLP enforcement across M365
No, reports findings, you act on them
Yes, across Exchange, SharePoint, Teams, and endpoints
Retention / records management
No
Yes, data lifecycle management
eDiscovery, audit, insider risk
No
Yes, part of the suite
Compliance-posture dashboard
CSV / JSON exports out of the box
Yes, via Compliance Manager
Operations & integration
CI/CD integration
CLI emits JSON or CSV; --fail-on-findings fails the build
Possible via Graph API; not the primary motion
Reports for GDPR / HIPAA / CCPA
CSV / JSON exports out of the box
Prebuilt assessments & reporting
Support
Email support from the people who build it
Microsoft support plans, partner ecosystem
Trust
Source of compliance evidence
Verifiable on your own host (tcpdump the binary)
Microsoft attestations, Service Trust Portal
If you stop paying
Binary keeps working forever
Purview features turn off with the subscription
Comparisons reflect publicly available information about Microsoft Purview as of October 2026, plus our own product. Microsoft and Microsoft Purview are trademarks of the Microsoft group of companies. PII Crawler is not affiliated with Microsoft.

We think one of these is wrong for you

Pick Microsoft Purview if
  • Your data and workflows live in Microsoft 365 and Azure, and you want native classification and labels that travel through Office apps.
  • You need DLP enforced across Exchange, SharePoint, OneDrive, Teams, and Windows endpoints.
  • You need retention, records management, eDiscovery, audit, or insider risk as part of one compliance program.
  • You already license Microsoft 365 E5 (or E5 Compliance) and want to use what you're paying for.
  • You want a compliance-posture dashboard (Compliance Manager) across Microsoft services.
  • You have an admin team to configure the Purview portal, policies, and roles.
Pick PII Crawler if
  • You need to scan files, shares, and database files that aren't in Microsoft 365: Linux servers, legacy NAS, Mac machines.
  • You don't have (or don't want to depend on) an E5 license or Azure subscription just to discover PII.
  • Your security review says nothing sensitive leaves the network, and you need an air-gapped scan a cloud-administered service can't do.
  • You want a one-time price you can expense, not licensing tied to per-user M365 tiers and Azure consumption.
  • You need an answer this week without configuring a tenant, policies, and roles.
  • You want PII checks embedded in CI/CD, or a quick standalone audit on a single box.
Download free trial

Questions buyers ask us about Microsoft Purview

Purview is excellent for data that lives inside Microsoft 365 and Azure. PII Crawler is for the data it doesn't reach cleanly: non-Microsoft file servers, Linux boxes, legacy NAS, database files, and air-gapped subnets. It's also useful for fast standalone scans without configuring Purview's scanning or paying Azure Data Map consumption. Many teams use both.
No, that's Purview's home turf, and it does it natively. PII Crawler scans local files, network shares, and database files. For PII inside Microsoft 365 content, Purview is the right tool.
No. PII Crawler is a standalone binary with no tenant, no cloud, and no subscription. That's the point: you can scan a machine that has nothing to do with Microsoft, including one with no internet access at all.
No. PII Crawler reports where PII is and exports the findings; it doesn't classify-and-label documents or enforce DLP policies. If you need labeling that travels through Office apps and DLP enforced across Microsoft services, Purview is built for exactly that.
Yes, that's a design goal. PII Crawler has no cloud dependency, so it runs on isolated subnets and air-gapped hosts. Purview is cloud-administered through your Microsoft tenant, so it can't scan an environment cut off from Microsoft's cloud.
Yes, and they complement each other well. Run Purview for the Microsoft estate (M365 content, labeling, DLP, retention) and reach for PII Crawler for everything outside it: non-Microsoft servers, database files, and air-gapped environments. The CSV / JSON exports drop cleanly into a broader workflow.

One price. Yours to keep

Enterprise discovery platforms bill per user or per gigabyte, every year, after months of procurement. PII Crawler is a single purchase that fits on a company card, so you can buy it today and scan this afternoon.

The average data breach costs $4.44M (IBM, 2025). Most start with a file nobody knew was there.

PII Crawler license
$497one-time
  • Unlimited users, machines and scans
  • Every future update included
  • macOS, Windows and Linux
  • Desktop app, web UI and CLI
  • Email support from the people who build it
Buy a license Start the free trial

14-day money-back guarantee, no questions asked.

Run it on a real share before you decide

Full trial. No credit card. Runs on your laptop or server.

macOS
Apple Silicon (M1 and later). App and command line.
Download for macOS
Signed and notarized by Apple
Windows
64-bit installer. App and command line.
Download for Windows
Authenticode-signed. Or get the portable .zip
Linux
x86-64. A single static binary.
Download for Linux
No installer and no dependencies