As part of our strategy to provide end-to-end protection of sensitive data, Microsoft is using the Azure Information Protection scanner to automatically discover, label, and protect our sensitive data in on-premises data stores—even in PDFs and RMS-encrypted files.