This is the Trace Id: 0bba3ee97b0e66d986e869ba155e2dcf
5/19/2025

Infosys uses Microsoft Purview SDK to strengthen GenAI data security and compliance

Infosys wanted to accelerate GenAI adoption without compromising data security, violating enterprise policies, or increasing regulatory risk. It needed built-in controls to protect sensitive information and ensure compliant AI use across industries.

They use Microsoft Purview SDK to apply data security and compliance policies to GenAI interactions, block risky prompts, preserve sensitivity labels, and provide visibility into AI activity through telemetry and Microsoft Purview Data Security Posture Management for AI.

 

The company has built security and compliance into GenAI workflows, giving teams confidence to scale adoption. Policies are enforced, prompts audited, and sensitive data detected across a growing number of real-world use cases.

Infosys

Infosys is one of the world’s largest digital services and consulting firms, with more than 300,000 employees supporting thousands of clients across 50-plus countries. It helps organizations navigate complex transformations in cloud, AI, and enterprise modernization, with a strong focus on security, compliance, and trust. As clients rush to adopt generative AI (GenAI), Infosys recognized that security and compliance were lagging. Its leaders wanted to help clients move faster with AI, but without exposing sensitive data, violating internal policies, or increasing regulatory risk. The company needed a way to close that gap without slowing innovation.

“We’re using sensitivity labels and DLP policies to stop things like file transfers or firewall-related queries. And because the Purview SDK is part of the app, users can’t bypass it. That gives our teams and clients a lot more confidence.”

Mayank Agarwal, Head of Cybersecurity, North America, Infosys

Designing GenAI systems for data security, compliance, and oversight

That effort centered on Cyber Next, Infosys’s cybersecurity platform, built to strengthen enterprise security posture through automation, insights, and policy-based controls. As demand for GenAI grew, Infosys expanded the platform by building Microsoft Purview SDK capabilities into Cyber Advisor, a GenAI-powered assistant built within Cyber Next. Cyber Advisor helps analysts surface policy information, accelerate investigations, and reduce onboarding time. With the Microsoft Purview SDK, Infosys has been able to apply data protection policies, block risky prompts, and preserve sensitivity labels across GenAI interactions. “A lot of the risk is not in what comes out of a GenAI tool but what gets put in,” says Ashish Adhvaryu, Vice President of Cybersecurity at Infosys. “Security leaders want to offer GenAI access to the business, but only if they know it can be done safely, with data protection built in. That’s what we’re using the Purview SDK to support.”

Purview SDK gives Infosys’s developers API-based controls to evaluate prompts before they reach the AI model. Queries attempting to access restricted data are flagged or blocked. Sensitivity labels follow content through the system, helping ensure any output aligns with protection requirements. Mayank Agarwal, Head of Cybersecurity, North America at Infosys, says this approach helps teams move quickly without compromising trust. “We are giving the power back to developers,” he says. “They can use the Purview SDK as a service and make sure that data protection is part of the design, not something that is bolted on later.” 

To strengthen oversight, Infosys added a telemetry pipeline from Cyber Advisor into Purview. Using Microsoft Purview Data Security Posture Management for AI, security teams gain visibility into GenAI usage across users, data, and apps. This helps them detect risky activity around sensitive data, apply policies, and mitigate data oversharing and leakage. According to Agarwal, this structure gives teams confidence that controls are working as intended. “We’re using sensitivity labels and DLP policies to stop things like file transfers or firewall-related queries,” he explains. “And because the Purview SDK is part of the app, users can’t bypass it. That gives our teams and clients a lot more confidence.”

“The ability to use data protection as a service through the Purview SDK helps us move faster. It’s like the brakes in a car. If you know they are working, you can go faster with more confidence.”

Mayank Agarwal, Head of Cybersecurity, North America, Infosys

Scaling secure AI adoption across industries

Cyber Advisor with Microsoft Purview SDK is already in use across sectors including energy, healthcare, and manufacturing. One mining firm is onboarding analysts through interactive scenarios grounded in company policies, while others are streamlining investigations with consistent, policy-driven controls. Adhvaryu says visibility is critical. “Each query goes through the SDK and into Purview, so we have visibility, we can detect it, and we can prove compliance,” he says. “That kind of oversight is what customers expect, especially in regulated sectors.”

“Each query goes through the SDK and into Purview, so we have visibility, we can monitor it, and we can prove compliance. That kind of oversight is what customers expect, especially in regulated sectors.”

Ashish Adhvaryu, Vice President of Cybersecurity, Infosys

These early implementations are laying the foundation for more consistent visibility, faster onboarding, and secure AI use across industries. Infosys’s work with the Purview SDK shows how data protection and compliance can be built into custom GenAI applications, bringing enterprise-grade governance to environments. “We are putting the guardrails into the application itself,” Adhvaryu says. “That makes security feel like part of the platform, not a separate process.” Agarwal adds that this approach is possible because of how Purview SDK delivers protection through code-level services. “The ability to use data protection as a service through the Purview SDK helps us move faster,” he says. “It’s like the brakes in a car. If you know they are working, you can go faster with more confidence.”

“A lot of the risk is not in what comes out of a GenAI tool but what gets put in. Security leaders want to offer GenAI access to the business, but only if they know it can be done safely, with data protection built in. That’s what we’re using the Purview SDK to support.”

Ashish Adhvaryu, Vice President of Cybersecurity, Infosys

Discover more details

CUSTOMER
SERVICES AND SUPPORT
Take the next step

Fuel innovation with Microsoft

Talk to an expert about custom solutions

Let us help you create customized solutions and achieve your unique business goals.

Drive results with proven solutions

Achieve more with the products and solutions that helped our customers reach their goals.

Follow Microsoft