Twice a year we publish the number of legal demands for customer data that we receive from law enforcement agencies around the world. While this report only covers law enforcement requests, Microsoft follows the same principles for responding to government requests for customer data.

Microsoft follows strict standards for overwriting storage before reuse. If you delete your data or terminate your contract, we will ensure your data is deleted in accordance with your contract with us. In the event a hard drive fails, it will be physically destroyed in a way that makes data recovery impossible.

Microsoft’s Enterprise business model does not include exploiting your customer data for purposes unrelated to providing the cloud service. We do not use your customer data for advertising or similar commercial purposes.

Microsoft is transparent about where we store your data, and we make this information available through the Trust Center. This is important if you are operating in regulated industries, where data protection laws require you to know the geographic location of your data. We maintain an expanding network of cloud-scale data centers in locations around the globe, and verify that each one meets strict security requirements.

Set of policies that check and prevent sensitive information from leaving organisation via email.

Use analytics and machine learning to detect and alert you to suspicious behaviour on your network.