A unified data governance solution that helps manage, protect, and discover data across your organization
The behavior you are seeing is due to policy scope mismatch between Microsoft Purview DLP and your Entra-registered application. Your DLP policies are currently configured for Microsoft 365 workloads such as Exchange, SharePoint, OneDrive, Teams, and Devices. These policies are enforced only within those workloads and are not automatically applied to content sent through Microsoft Graph APIs like compute and processContent from a custom or Entra-registered app.
Because no Purview DLP policy is targeting your application, the Graph APIs do not find any applicable rules during evaluation. As a result, the response consistently shows executionMode: "evaluateOffline", policyActions: [], and protectionScopeState: "notModified" even when the content includes sensitive information like SSNs. This does not indicate a failure in detection; it indicates that no applicable policy is evaluating your app’s content.
The compute API determines which protection scopes and execution modes apply, but it does not enforce DLP actions. The processContent API evaluates content against applicable policies and returns actions such as restrictAccess only when a matching policy exists for the application. In your current setup, since the policies are not scoped to your Entra app, no enforcement is triggered.
To enable DLP enforcement (for example, detecting or restricting SSN content), you need to configure a Microsoft Purview policy that explicitly targets your Entra-registered application using the supported app/AI integration model. Once such a policy is in place, the APIs can return enforcement actions when matching content is detected.
Helpful References:
https://dotnet.territoriali.olinfo.it/en-us/purview/ai-entra-registered
https://dotnet.territoriali.olinfo.it/en-us/graph/api/userprotectionscopecontainer-compute?view=graph-rest-1.0
https://dotnet.territoriali.olinfo.it/en-us/graph/api/userdatasecurityandgovernance-processcontent?view=graph-rest-1.0&tabs=http
https://dotnet.territoriali.olinfo.it/en-us/purview/developer/use-the-api
https://dotnet.territoriali.olinfo.it/en-us/purview/dlp-learn-about-dlp
Hope this helps. Please let us know if you have any questions or concerns. If this solves your issue, kindly click “Accept Answer” so it can help others in the community.