Discovery AI deploys entirely inside your Azure tenant. We provide the software. You keep the data, the infrastructure, and the keys to both.
The app, your documents, processing and AI models all run inside your Azure tenant. Users sign in with Microsoft Entra ID. Discovery AI is bought and billed through Azure Marketplace, and the Purview review set connector links directly to Microsoft Purview eDiscovery (Premium). Basic health and usage data comes back to Discovery AI, with no document content.
Approving Discovery AI should feel like approving one more workload, not a new vendor holding your most sensitive data. Documents are never copied into Discovery AI's environment for review. Agents call models deployed in your own Azure AI Foundry. No model is trained on your data, and nothing is shared across customers, including for product improvement. IT's existing sign-in rules, like MFA, apply. Each AI call cites its source and records who did what, when and why.
Every decision is traceable, from the agent's reasoning to the reviewer's sign-off.