You control your data
Our time-tested approach to data privacy is grounded in our commitment to give you control over the data you put in the cloud. In other words, you control your data. Microsoft guarantees this with the contractual commitments we make to you.
Learn more about ISO/IEC 27018 
Subprocessor List identifies authorized subprocessors who have been audited in advance against a stringent set of security and privacy requirements. Know where your data is located and how it’s used
When you use Microsoft commercial cloud services, we’ll help you choose the service and data location that’s right for your business.
Choose where your data resides
Microsoft offers data residency around the world, helping to ensure that resiliency and compliance requirements can be honored within geographic boundaries. We back these capabilities with contractual commitments and transparency regarding how we store and process your data.
We secure your data at rest and in transit
With advanced encryption, Microsoft helps protect your data both at rest and in transit. Our encryption protocols erect barriers against unauthorized access to the data, including two or more independent encryption layers to safeguard against compromises of any one layer.
Encryption keys
All Microsoft-managed encryption keys are properly secured and offer the use of technologies such as Azure Key Vault to help you control access to passwords, encryption keys, and other secrets.
We defend your data
Microsoft defends your data through clearly defined and well-established response policies and processes, strong contractual commitments, and if necessary, the courts. We believe all government requests for your data should be addressed to you. We don’t give any government direct or unfettered access to customer data.
Our contractual commitments
Our contractual commitments to our enterprise and public sector customers include defending your data, which builds on our existing protections. We will challenge every government request for commercial and public sector customer data where we can lawfully do so. We have a proven track record of successfully challenging government demands in the courts when those demands are inconsistent with the rule of law, and we are transparent about the number of US national security orders we receive.
Our promise to you
We are transparent about the specific policies, operational practices, and technologies that help ensure the privacy of your data in every Microsoft commercial cloud service.
And we don’t just state these promises—we guarantee them in our standard contracts for commercial and public sector customers.
Follow Microsoft