Is Azure available on a C5 compliant server in a C5 compliant data centre physically located in Germany?
C5 compliant Azure in Germany?
Hello, @PaulVisser-7344!
I'm looking for something a bit more explicit but my understanding is that this is correct:
https://docs.microsoft.com/en-us/compliance/regulatory/offering-c5-germany#frequently-asked-questions
Microsoft Cloud Germany is physically based in Germany, adhering to the requirement of German privacy law, which limits the transfer of personal data to other countries and offers protection against access by authorities from other jurisdictions who could violate domestic laws. Azure Germany delivers Azure services from German datacenters with data residency in Germany, and it delivers strict data access and control measures provided through a unique data trustee model governed under German law.
Thank you for your reply. That's looking promissing. Still, I was under the impression that Microsoft Cloud Germany was closed down and integrated into standard Azure.
Am I mistaken?
@PaulVisser-7344, two new cloud datacenter regions in Germany have been opened and as a result, the previously used Microsoft Cloud Deutschland has been closed as of October 29th, 2021:
https://www.microsoft.com/en-us/cloud-platform/germany-cloud-regions
In August 2018, we announced plans to deliver two new cloud datacenter regions in Germany offering in-country customer data residency as well as full connectivity to Microsoft’s global cloud network. These new regions are now live with the general availability of Azure, Microsoft 365, Dynamics 365 and Power Platform. As a result, we are closing the current Microsoft Cloud Deutschland. This page contains essential information on how to migrate your subscriptions and maintain your services if you choose to do so before Microsoft Cloud Deutschland is closed on October 29, 2021.
I'm going to try to get some additional clarity as this understandably raises some questions.
Hello, @PaulVisser-7344!
Is Azure available on a C5 compliant server in a C5 compliant data centre physically located in Germany?
Compliance questions are complicated and the details are important so you'll need to use the official compliance documentation to answer this question which I'm including below.
In the interest of giving you as succinct an answer as possible, I've also included some quotes which should give you as close to a yes/no answer as possible.
Germany and C5 compliance
https://docs.microsoft.com/en-us/azure/compliance/offerings/offering-germany-c5
Azure publishes a combined attestation report (C5:2020, SOC 2 Type 2, CSA STAR Attestation) based on the audit assessment performed by an independent auditor, which provides proof of compliance with C5:2020.
Data Center Geography
https://azure.microsoft.com/en-us/global-infrastructure/data-residency/#select-geography
Most Azure services enable you to specify the region where your customer data will be stored and processed. Microsoft may replicate to other regions for data resiliency, but Microsoft will not store or process customer data outside the selected Geo. You and your users may move, copy, or access your customer data from any location globally.
Data residency: Azure Germany Public cloud regions: Stored at rest in Germany. See Additional information for details.
In some cases, data for certain services may be stored outside of specified regions. See Additional information on this page for details.
Compliance Resources
4 people are following this question.
