Skip to site content Skip to main menu

Tell us whether you accept cookies

Published: 24 April 2025

FOI 2024/25-122 - Information on countries in which Microsoft process data uploaded to Azure cloud or M365

Report Summary

Issued 11 April 2025, this FOI response provides some information held regarding data sovereignty and explains that some information held is publicly available with a link provided to assist.

To access the full document please open the PDF document above.

To view as accessible content please use the sections below. (Note that some tables and appendixes are not available as accessible content).


Request

Your request for information dated 24 March 2025 is copied below.

Please supply me with any information, documentation, contract clause change or emails, etc. that you have received in the past two years which identify any countries where Microsoft can or actually do process any data you have uploaded to the following services:

1 - Any service operated by or on the Microsoft Azure cloud platform by any of your processors or contracted service providers (including a direct contract with Microsoft)

2 - Any Microsoft M365 service

For the purposes of this request you should consider any offshored administration or direct system support as being ‘processing’, whether this relates to personal data or not - this is not a GDPR specific request.


Related Publications

The documents below are related by Topic and are the most recently published

Green icon representing an exclamation mark.

Terms of Reference - Exceptional Circumstances Committee

Published: 27 November 2025

Green icon showing a magnifying glass with eye in the middle.

Terms of Reference - Audit Risk & Assurance Committee

Published: 27 November 2025

Green icon of concurrent circles with an arrowing pointing to the middle.

Terms of Reference - Policing Performance Committee

Published: 27 November 2025

Green icon representing an eye.

Terms of Reference - Complaints & Conduct Committee

Published: 27 November 2025