The answer is the Azure Information Protection service.
When the Azure Information Protection client is installed, it interacts with the operations of end-users. Users and admins can access a file tracking website once a file has been protected. This gives them insight into who accesses the files and when these materials are accessed. Users have the opportunity to withdraw access to the file(s) in question if they detect any type of violation.