EY accelerates secure AI development using Microsoft Purview SDK | Microsoft Customer Stories
Scaling AI development often comes with compliance and data governance challenges. This customer story shows how EY Global Services used Microsoft Purview SDK to meet internal security requirements while enabling rapid AI development across teams. Read the story to see how they balance innovation with control and contact PRIVAXI to discuss how this approach could support your development pipeline.
What is the purpose of Microsoft Purview SDK for EY?
EY uses Microsoft Purview SDK to embed data security, compliance, and governance directly into their AI applications. This integration allows them to apply policy-based controls, monitor AI interactions, and log activities, which helps in maintaining compliance and ensuring secure deployment at scale.
How has EY improved its development process with Purview SDK?
By adopting Microsoft Purview SDK early in the development cycle, EY has reduced the time needed to build secure features by 25% to 30%. This allows their teams to design with data security and compliance in mind, leading to faster rollouts of GenAI tools in regulated environments.
What benefits does EY's Dragonfly platform offer?
EY's Dragonfly platform, which integrates with Microsoft Purview SDK, provides a low-code environment for creating and managing AI workflows with built-in data security and compliance. It centralizes data interactions, offers visibility into data risks, and supports auditability for security investigations, ensuring that security concerns do not hinder development.

EY accelerates secure AI development using Microsoft Purview SDK | Microsoft Customer Stories
published by PRIVAXI
Our Mission:
A Managed Security Services Provider, a Compliance Firm, and a Risk Management/Readiness and Remediation Assessor – All Under One Roof.
Looking for a comprehensive solution to your security and compliance needs? That’s why we created Privaxi. There was a gap in the market, and we filled it. Privaxi isn’t just a managed security service provider or a compliance firm. Our firm bridges the divide between information security practices and regulatory compliance. Many firms offer information security services, while others provide compliance-related solutions.
We integrate both, providing security and compliance-related services, and we’re a HITRUST Readiness and Remediation assessor. That means we help our clients strengthen their security by identifying cyber risks and vulnerable processes within their operations. We also help our clients meet compliance standards, including HIPAA, HITRUST, PCI-DSS, NIST 800-53, and ISO27001.
Our cloud security team delivers best-in-class services to safeguard your data against threats while maintaining data security best practices and compliance standards.
No two businesses face the same threats. We develop tailor-made strategies to minimize vulnerability to cyber threats and ensure compliance.