eucsoft

Microsoft

productivity-suite · microsoft.com · last read 2026-10-07

Identity

No identity observation recorded yet.

Data location

RegionEU data locationMinimum planSourceObserved
EUTerms not stated—learn.microsoft.com2026-10-05

EU: The EU Data Boundary covers Microsoft enterprise online services (Azure, Dynamics 365, Power Platform, Microsoft 365). Depending on the service, customers select the EU region or it is assigned by customer location or billing address. The document names no plan or price for it.

Subprocessor chain

No subprocessor list transcribed. Either the vendor does not publish one where we could reach it, or it is gated — see the documents table below for which.

Assurance

SchemeStatusScopeSourceObserved
C5 (Germany) · C5Claimed—learn.microsoft.com2026-10-05
CJISClaimed—learn.microsoft.com2026-10-05
CSA-STAR attestation · CSAClaimed—learn.microsoft.com2026-10-05
CSA-STAR certification · CSAClaimed—learn.microsoft.com2026-10-05
CSA-STAR self-assessment · CSAClaimed—learn.microsoft.com2026-10-05
Cyber Essentials Plus (UK) · CyberEssentialsPlusClaimed—learn.microsoft.com2026-10-05
DORA (EU) · DORAClaimed—learn.microsoft.com2026-10-05
DoD IL2 · DoDILClaimed—learn.microsoft.com2026-10-05
DoD IL5 · DoDILClaimed—learn.microsoft.com2026-10-05
ENS (Spain) · ENSClaimed—learn.microsoft.com2026-10-05
FISC (Japan) · FISCClaimed—learn.microsoft.com2026-10-05
FedRAMPClaimed—learn.microsoft.com2026-10-05
GDPR (EU) · GDPRClaimed—learn.microsoft.com2026-10-05
HDS (France) · HDSClaimed—learn.microsoft.com2026-10-05
HIPAA / HITECH · HITECHClaimed—learn.microsoft.com2026-10-05
HITRUSTClaimed—learn.microsoft.com2026-10-05
IRAP (Australia) · IRAPClaimed—learn.microsoft.com2026-10-05
ISMAP (Japan) · ISMAPClaimed—learn.microsoft.com2026-10-05
ISO 22301 · ISO22301Claimed—learn.microsoft.com2026-10-05
ISO 27001 · ISO27001Claimed—learn.microsoft.com2026-10-05
ISO 27017 · ISO27017Claimed—learn.microsoft.com2026-10-05
ISO 27018 · ISO27018Claimed—learn.microsoft.com2026-10-05
ISO 27701 · ISO27701Claimed—learn.microsoft.com2026-10-05
ISO 42001 · ISO42001Claimed—learn.microsoft.com2026-10-05
ISO 9001 · ISO9001Claimed—learn.microsoft.com2026-10-05
ITARClaimed—learn.microsoft.com2026-10-05
MTCS (Singapore) · MTCSClaimed—learn.microsoft.com2026-10-05
23 NYCRR Part 500Claimed—learn.microsoft.com2026-10-05
ABS OSPAR (Singapore)Claimed—learn.microsoft.com2026-10-05
AFM + DNB (Netherlands)Claimed—learn.microsoft.com2026-10-05
AMF and ACPR (France)Claimed—learn.microsoft.com2026-10-05
APRA (Australia)Claimed—learn.microsoft.com2026-10-05
BIR 2012 (Netherlands)Claimed—learn.microsoft.com2026-10-05
Canada Controlled GoodsClaimed—learn.microsoft.com2026-10-05
Canadian Privacy LawsClaimed—learn.microsoft.com2026-10-05
CCCS Medium (Canada)Claimed—learn.microsoft.com2026-10-05
CDSAClaimed—learn.microsoft.com2026-10-05
CIS BenchmarkClaimed—learn.microsoft.com2026-10-05
CNSSI 1253Claimed—learn.microsoft.com2026-10-05
CyberGRXClaimed—learn.microsoft.com2026-10-05
DFARSClaimed—learn.microsoft.com2026-10-05
DJCP (China)Claimed—learn.microsoft.com2026-10-05
DoE 10 CFR Part 810Claimed—learn.microsoft.com2026-10-05
DPP (UK)Claimed—learn.microsoft.com2026-10-05
EAR (US Export Adm. Reg.)Claimed—learn.microsoft.com2026-10-05
EBA (EU)Claimed—learn.microsoft.com2026-10-05
EN 301 549 (EU)Claimed—learn.microsoft.com2026-10-05
ENISA IAF (EU)Claimed—learn.microsoft.com2026-10-05
EU Model ClausesClaimed—learn.microsoft.com2026-10-05
FACT (UK)Claimed—learn.microsoft.com2026-10-05
FCA + PRA (UK)Claimed—learn.microsoft.com2026-10-05
FDA CFR Title 21 Part 11Claimed—learn.microsoft.com2026-10-05
FERPAClaimed—learn.microsoft.com2026-10-05
FFIEC (US)Claimed—learn.microsoft.com2026-10-05
FINMA (Switzerland)Claimed—learn.microsoft.com2026-10-05
FIPS 140-2Claimed—learn.microsoft.com2026-10-05
FSA (Denmark)Claimed—learn.microsoft.com2026-10-05
G-Cloud (UK)Claimed—learn.microsoft.com2026-10-05
GB 18030 (China)Claimed—learn.microsoft.com2026-10-05
GLBA (US)Claimed—learn.microsoft.com2026-10-05
GSMAClaimed—learn.microsoft.com2026-10-05
GxPClaimed—learn.microsoft.com2026-10-05
IDW PS 951 (Germany)Claimed—learn.microsoft.com2026-10-05
IRS 1075Claimed—learn.microsoft.com2026-10-05
ISMS (Korea)Claimed—learn.microsoft.com2026-10-05
ISO 20000-1:2011Claimed—learn.microsoft.com2026-10-05
IT-Grundschutz workbook (Germany)Claimed—learn.microsoft.com2026-10-05
KNF (Poland)Claimed—learn.microsoft.com2026-10-05
Know Your Third Party (KY3P)Claimed—learn.microsoft.com2026-10-05
MARS-E (US)Claimed—learn.microsoft.com2026-10-05
MAS + ABS (Singapore)Claimed—learn.microsoft.com2026-10-05
MeitY (India)Claimed—learn.microsoft.com2026-10-05
MPAClaimed—learn.microsoft.com2026-10-05
My Number (Japan)Claimed—learn.microsoft.com2026-10-05
National Information Assurance (Qatar)Claimed—learn.microsoft.com2026-10-05
NBB + FSMA (Belgium)Claimed—learn.microsoft.com2026-10-05
NEN-7510 (Netherlands)Claimed—learn.microsoft.com2026-10-05
NERCClaimed—learn.microsoft.com2026-10-05
NIST 800-171Claimed—learn.microsoft.com2026-10-05
NIST CSFClaimed—learn.microsoft.com2026-10-05
NZ CC Framework (New Zealand)Claimed—learn.microsoft.com2026-10-05
OSFI (Canada)Claimed—learn.microsoft.com2026-10-05
PASF (UK)Claimed—learn.microsoft.com2026-10-05
Personal Data Localization (Russia)Claimed—learn.microsoft.com2026-10-05
RBI + IRDAI (India)Claimed—learn.microsoft.com2026-10-05
SEC 17a-4, SEC 18a-6, FINRA 4511, & CFTC 1.31Claimed—learn.microsoft.com2026-10-05
SEC Regulation SCI (US)Claimed—learn.microsoft.com2026-10-05
Shared AssessmentsClaimed—learn.microsoft.com2026-10-05
SOXClaimed—learn.microsoft.com2026-10-05
TRUCS (China)Claimed—learn.microsoft.com2026-10-05
PCI-3DS · PCIDSSClaimed—learn.microsoft.com2026-10-05
PCI-DSS · PCIDSSClaimed—learn.microsoft.com2026-10-05
PDPA (Argentina) · PDPAClaimed—learn.microsoft.com2026-10-05
SOC 1 · SOC1Claimed—learn.microsoft.com2026-10-05
SOC 2 · SOC2Claimed—learn.microsoft.com2026-10-05
SOC 3 · SOC3Claimed—learn.microsoft.com2026-10-05
TISAXClaimed—learn.microsoft.com2026-10-05
Section 508 VPATS · VPATClaimed—learn.microsoft.com2026-10-05
WCAG · VPATClaimed—learn.microsoft.com2026-10-05

Claimed means the vendor asserts the scheme on its own page and offers nothing further. Available on request means the report or certificate exists but sits behind a request, a login or an NDA. Neither is a certificate we have seen. That is a distinction an auditor makes, so we make it too.

Official registers

RegisterOffering, as the register names itStatusLevelValid untilObserved
ACN qualified cloud (Italy)AZURE Servizi IAAS · Microsoft CorporationqualifiedQC2 (IaaS)2028-01-192026-10-07
ACN qualified cloud (Italy)AZURE Servizi PaaS · Microsoft CorporationqualifiedQC2 (PaaS)2028-01-192026-10-07
ACN qualified cloud (Italy)Microsoft 365 / Office 365 · Microsoft CorporationqualifiedQC2 (SaaS)2028-01-192026-10-07
ACN qualified cloud (Italy)Microsoft Dynamics365 · Microsoft CorporationqualifiedQC2 (SaaS)2028-01-192026-10-07
ACN qualified cloud (Italy)Microsoft PowerPlatform · Microsoft CorporationqualifiedQC2 (PaaS)2028-01-192026-10-07
ACN qualified cloud (Italy)Windows 365 · Microsoft CorporationqualifiedQC2 (SaaS)2028-01-192026-10-07
Data Privacy Framework List (US)EU-U.S. Data Privacy Framework · Microsoft CorporationActive - Re-certification under ReviewHR data, non-HR data2027-08-312026-10-07
Data Privacy Framework List (US)Swiss-U.S. Data Privacy Framework · Microsoft CorporationActive - Re-certification under ReviewHR data, non-HR data2027-08-312026-10-07
Data Privacy Framework List (US)UK Extension to the EU-U.S. DPF · Microsoft CorporationActive - Re-certification under ReviewHR data, non-HR data2027-08-312026-10-07
FedRAMP Marketplace (US)Azure Commercial Cloud · MicrosoftFedRAMP AuthorizedHigh—2026-10-07
FedRAMP Marketplace (US)Azure Government (includes Dynamics 365) · MicrosoftFedRAMP AuthorizedHigh—2026-10-07
FedRAMP Marketplace (US)Microsoft 365 Government Community Cloud & Supporting Services · MicrosoftFedRAMP AuthorizedModerate—2026-10-07
FedRAMP Marketplace (US)Microsoft 365 Government Community Cloud-High · MicrosoftFedRAMP AuthorizedHigh—2026-10-07

What the authority publishes, not what the vendor claims. An entry covers the offering it names and nothing else: a FedRAMP authorisation for a government edition says nothing about the commercial service. No entry is not a finding about security - most vendors never apply - and an entry filed under a name not listed above would not have been found.

Support window

Not yet collected. This row will say not declared only once we have read a lifecycle or security page and found no period stated — see support windows.

Documents

What we read, how it was disclosed, and when.
DocumentDisclosureTranscriptionHTTPObserved
certificationsPublicfull2002026-10-05
residencyPublicfull2002026-10-05

History

Nothing has moved since we started watching this vendor on 2026-10-05. Changes appear here only after a human has reviewed them.