EU Data Boundary documentation — Microsoft 365 Business

Cited by

Facts read from this source

• Definition Report an error

  “The EU Data Boundary is a geographically defined boundary within which Microsoft has committed to store and process Customer Data and personal data for our Microsoft enterprise online services, including Azure, Dynamics 365, Power Platform, and Microsoft 365.”

• Professional services data stored at rest Report an error

  “Professional Services Data will be stored at rest for these services.”

• Limited transfers outside Report an error

  “These commitments are subject to limited circumstances where Customer Data, personal data, and Professional Services Data will continue to be transferred outside the EU Data Boundary.”

• Doc last updated Report an error

  “Last updated: February 26, 2025.”

• Customer data definition Report an error

  “Customer Data means all data, including all text, sound, video, or image files, and software, that are provided to Microsoft by, or on behalf of, Customer through use of the Online Service. Customer Data doesn't include Professional Services Data.”

• Pseudonymized logs Report an error

  “Microsoft requires all personal data in system-generated logs to be pseudonymized.”

• Pseudonymization techniques Report an error

  “Microsoft uses various techniques to pseudonymize personal data in system-generated logs, including encryption, masking, tokenization, and data blurring.”

• Retention minimization Report an error

  “Data minimization via implementation of retention policies set at the minimum retention time required for each type of log.”

• Log scrubbing Report an error

  “Regular checks and scrubbing of system-generated logs to detect errors or policy non-conformance.”

• Reidentification controls Report an error

  “Controls on data that could enable reidentification of individuals from pseudonymized logs are the same as controls applied to Customer Data.”

• Professional services scope Report an error

  “Professional Services means the following services: (a) Microsoft’s consulting services, consisting of planning, advice, guidance, data migration, deployment and solution/software development services provided under a Microsoft Enterprise Services Work Order or, when agreed to in the Project Description, under a Cloud Workload Acceleration Agreement that incorporates the Microsoft Products and Services Data Protection Addendum (DPA) by reference; and (b) technical support services provided by Microsoft”

• Countries Report an error

  “The EU Data Boundary consists of the countries in the European Union (EU) and the European Free Trade Association (EFTA).”

• Datacenter countries Report an error

  “The EU Data Boundary uses or may use Microsoft datacenters announced or currently operating in Austria, Belgium, Denmark, Finland, France, Germany, Greece, Ireland, Italy, Netherlands, Norway, Poland, Spain, Sweden, and Switzerland.”

• Data location assignment Report an error

  “In some cases, customers can select the EU deployment region for Customer Data directly; in others, the location is automatically assigned based on customer location, billing address, or a customer decision to have their environment reside in the EU Data Boundary.”

• Azure regional services Report an error

  “For Azure, regional services that a customer deploys in an EU Data Boundary region will be in-scope for the EU Data Boundary.”

• Azure arm configuration Report an error

  “To store Professional Services Data in the EU Data Boundary for Azure, customers must configure Azure Resource Manager to the EU Data Boundary.”

• Dynamics power platform requirements Report an error

  “To bring your environments in-scope for the EU Data Boundary, both of the following are required: (1) provision the tenant and all environments in the “European Union (EU) and European Free Trade Association (EFTA)” Macro Region Geography, and (2) maintain a billing address in an EU Data Boundary country.”

• M365 signup location scope Report an error

  “For Microsoft 365, customers with a sign-up location in a country or region in the EU or EFTA are in scope for the EU Data Boundary.”

• M365 multi geo exclusion Report an error

  “Customers who have purchased Multi-Geo Capabilities are not in scope for the EU Data Boundary even if their tenant is listed as being in a country or region in the EU or EFTA.”

Scores citing this record

• The Data Protection Officer European sovereignty
• The IT Administrator European sovereignty
• The IT Service Provider European sovereignty
• The Public Sector IT Lead European sovereignty
• The Skeptic European sovereignty
• The Small Firm Owner European sovereignty