Skip to main content
Draftable Legal and Draftable Business can compare Word, Excel, PowerPoint and PDF files encrypted by Microsoft Purview sensitivity labels or Azure Rights Management. Protected-file support is off by default; ask your administrator to enable it before you use it.
Comparison output is unprotected. The original file’s sensitivity label and encryption do not carry over to a redline or export. Decide whether this is acceptable for your organization before enabling the feature, and protect the output appropriately before sharing it.

What you need

  • Draftable Legal or Business 26.10.2 or later on Windows.
  • Enable Microsoft Purview protected file support turned on by your administrator. It is off by default.
  • A Microsoft 365 work or school account with the Copy / Extract usage right (EXTRACT) on the file. Being able to view the file is not enough. Personal Microsoft accounts are not supported for this feature.
  • Approval for Draftable to access protected content in Microsoft 365, and network access to Microsoft’s sign-in and protection services. See Microsoft 365 sign-in and approval.
Your existing product’s comparison types and output options still apply. Turning on protected-file support does not unlock Legal-only outputs in Draftable Business.

How it works

When you select a protected file, Draftable identifies the protection from the file’s contents. It signs you in to Microsoft 365 when needed, checks your rights through Microsoft’s protection service, and decrypts a temporary working copy on your computer. That copy passes through the normal comparison process. The original protected file is unchanged. Draftable does not upload the document to Draftable’s servers, and it does not grant access beyond the signed-in user’s rights. Draftable checks the Extract right before decrypting. It does not require the separate Export right for this check. It does not apply the original label or encryption to the comparison result: saved redlines and exported comparison outputs are ordinary, unprotected files.

Turn on protected file support

Use the Draftable Legal Group Policy templates or deploy the registry setting directly. The policy is in the Draftable Legal administrative templates and supports both Computer Configuration and User Configuration. The same registry setting is read by Draftable Business.
1

Review the output behavior

Confirm that your organization permits creating unprotected comparison outputs from protected documents. Ensure users know where those outputs may be saved and shared.
2

Enable the policy

Set Enable Microsoft Purview protected file support to Enabled. For direct registry deployment, use:
Use HKCU:\Software\Policies\Draftable\Feature for a per-user policy. User policy takes precedence over computer policy. For Intune deployment, see Enterprise configuration with Group Policy and Microsoft Intune.
3

Test with an authorized user

Open Draftable and select a protected document as an input. Sign in with a work or school account that has the Extract right, then compare it. Check that the result opens and that the user understands it is unprotected.
To make sure protected-file support stays off for everyone in your organization, set the policy to Disabled rather than leaving it not configured. When support is off, Draftable does not decrypt the protected content. A comparison may fail with An error occurred while processing the file rather than a specific Purview message. Ask your administrator to check the policy before retrying.

Supported protected files

Password-protected files use the normal password workflow; Microsoft 365 sign-in does not replace the password. A sensitivity label that does not encrypt a document does not require this decryption feature.

Microsoft 365 sign-in and approval

The default desktop application registration is shared with Draftable’s SharePoint integration: The protected-file sign-in requests this Rights Management permission. It does not request SharePoint file access or permission to read your label policies as part of opening a protected file. If your organization’s consent settings prevent users approving access, a Microsoft 365 administrator must approve the application. Earlier approval for SharePoint may not include the Rights Management permission. The protected-file approval instructions use this same Draftable Legal desktop application registration, even though that guide is in the Clean section.

Compare a protected file

1

Select the documents

Add the older and newer files as you normally would. You can compare a protected file with another protected file or with an unprotected file.
2

Sign in if prompted

Use your Microsoft 365 work or school account. Draftable may use an existing sign-in without another prompt. If the file belongs to another organization, use an account that has access to that organization’s file.
3

Run and review the comparison

Choose your comparison type and run the comparison as usual. The protected input is decrypted for processing; the original remains protected.
4

Save with care

Save or export the result using the normal output options. The comparison output does not retain the original sensitivity label or encryption.

Messages you may see