New Proofpoint Prism Investigator and Human Communications Intelligence capabilities help organizations investigate risk faster and understand intent across human and AI interactions
- Prism Investigator now connects directly to Microsoft 365 email, Teams, and files without requiring content to first reside in an archive.
Prism Investigator now connects directly to Microsoft 365 email, Teams, and files without requiring content to first reside in an archive.
- Human Communications Intelligence now brings AI interactions into insider threat investigations.
Human Communications Intelligence now brings AI interactions into insider threat investigations.
- Enhancements are part of Proofpoint's unified platform for data and AI security, insider risk, and digital communications governance, replacing stitched-together tools.
Enhancements are part of Proofpoint's unified platform for data and AI security, insider risk, and digital communications governance, replacing stitched-together tools.
SUNNYVALE, Calif. – September 10, 2026 – Proofpoint, Inc., a global leader in human and agent cybersecurity, today announced new communications intelligence capabilities that help security, compliance, and legal teams investigate the human and AI context behind potential insider risk. Proofpoint Prism Investigator now connects directly to Microsoft 365 for AI-driven investigations, while Proofpoint Human Communications Intelligence (HCI) agents incorporate AI communications governance signals into insider risk investigations.
Generative AI, copilots, and AI agents are increasingly embedded in how people work, and insider risk is no longer limited to human activity alone. Prompts, responses, and interactions with AI systems are becoming part of the communications trail that can reveal intent and explain why an event occurred. As employees increasingly use AI to communicate, create content, make decisions, and conduct business, organizations need to capture AI interactions, preserve them as business records, and monitor them for regulatory and compliance risk. Understanding what happened, as well as the intent and circumstances behind it, is becoming critical to making faster, more informed decisions.
“Security teams don’t need another disconnected alert,” said Harry Labana, SVP and general manager, Digital Communications Governance, Proofpoint. “While an alert can indicate what happened, it’s communications intelligence that can explain the why. Like a cockpit voice recorder, it gives investigators more than a simple audio file, providing extensive details to piece together the events and intent behind them. By extending intelligence across Microsoft 365 and interactions with AI, we’re bringing that same depth of context to security, compliance, and legal investigations.”
Extending AI-Driven Investigations Directly to Microsoft 365
In addition to analyzing content from Proofpoint Archive, Prism Investigator now connects to Microsoft 365, bringing its AI-driven investigations to email, Teams messages, and files without requiring content to first reside in an archive.
Prism Investigator determines what an investigation requires and retrieves relevant Microsoft 365 content as the matter develops, reducing the manual export and staging that can slow analysis. It can correlate those communications with archived content, data, logs, and other business records to piece together events and produce a defensible case narrative. The result is a faster path from investigation to understanding with the auditability required for regulatory and legal matters.
Bringing AI Communications Context to Insider Risk
Proofpoint is also extending HCI agents to incorporate AI communications governance signals into Proofpoint Insider Threat Management, bringing interactions with copilots, generative AI applications, and AI agents into the context used to investigate potential insider risk.
Capturing what someone enters into an AI tool can identify potential data exposure. Adding a person’s communications and behavior can reveal whether the activity reflects routine use, a policy violation, or potentially malicious intent. Proofpoint combines communications context with behavioral and data activity to help organizations better understand intent and determine the appropriate response.
Together, these innovations expand Proofpoint communications intelligence into a broader layer for understanding human and AI activity, integrated across Proofpoint’s unified platform for data and AI security, insider risk, and digital communications governance.
Availability
Proofpoint HCI agents are currently available as an add-on to Proofpoint Capture powered by Nuclei. Proofpoint Prism Investigator connectivity to Microsoft 365 is expected in Q4 2026.
For more information about Proofpoint Prism Investigator and Proofpoint Human Communications Intelligence, visit: https://www.proofpoint.com/us/blog/compliance-and-archiving/context-to-insider-risk-and-ai-investigations
About Proofpoint, Inc.
Proofpoint, Inc. is a global leader in human and agent cybersecurity, securing how people, data, and AI agents connect across email, cloud, and collaboration tools. Proofpoint is a trusted partner to over 80 of the Fortune 100, over 14,000 large enterprises, and millions of smaller organizations in stopping threats, preventing data loss, and building resilience across people and AI workflows. Proofpoint’s collaboration and data security platform helps organizations of all sizes protect and empower their people while embracing AI securely and confidently. Learn more at www.proofpoint.com.
Connect with Proofpoint on LinkedIn
Proofpoint is a registered trademark or tradename of Proofpoint, Inc. in the U.S. and/or other countries. All other trademarks contained herein are the property of their respective owners.
