DLP (Data Loss Prevention) is a class of policies and tools in enterprise information security used to identify, monitor, and block sensitive data from leaving a controlled environment, typically covering endpoints, network egress, cloud applications, and other paths, and working through a combination of content recognition, policy rules, and audit logs.