Privacy, security, and transparency
The information in this article applies to worldwide versions of Office 365. If you are using a national cloud instance of Office 365, including Office 365 U.S. Government, Office 365 Germany, and Office 365 operated by 21Vianet, see Microsoft National Clouds.
Microsoft values the partnerships we have with our customers and places great emphasis on protecting the privacy and security of customer data. For more information, see the Microsoft Trust Center.
To learn about how Microsoft Office 365 protects the privacy of your data, see Privacy.
For specific steps Enterprise, Business, Government, and Education admins can take to configure Office 365 privacy settings, see Advanced Privacy Options for Administrators.
For information about security and privacy for other Microsoft services, including Microsoft 365 Apps for enterprise, see To which online services does the Trust Center apply?
To learn how Microsoft delivers Office 365 services securely and reliably, see Security.
As a customer, you can find out where your data resides, who at Microsoft can access it, and what we do with that information internally. For more information, see Transparency.
Electronic discovery, or eDiscovery, is the process of identifying and delivering electronic information that can be used as evidence in legal cases. Advanced eDiscovery builds on the existing set of eDiscovery capabilities in Office 365, allowing you to analyze large, unstructured data sets and reduce the amount of data that's relevant to a legal case. You can use the Search feature in the Office 365 Compliance Center to perform an initial search of all the content sources in your organization to identify and collect the data that might be relevant to a specific legal case. You can then analyze that data by applying the text analytics, machine learning, and relevance/predictive coding capabilities of Advanced eDiscovery. For more information, see Advanced eDiscovery.
As a Microsoft admin, you can use Customer Lockbox to control how a Microsoft support engineer accesses your data during a help session. In cases where the engineer requires access to your data to troubleshoot and fix an issue, Customer Lockbox allows you to approve or reject the access request. If you approve it, the engineer is able to access the data. Each request has an expiration time, and once the issue is resolved, the request is closed and access is revoked.
Customer Lockbox is included in the Office 365 Enterprise 5 plan, or you can purchase a separate subscription with any other Office 365 Enterprise plan. For more information, see Office 365 Customer Lockbox Requests.
Microsoft Defender for Office 365
Defender for Office 365 helps protect your organization against malware and viruses. Defender for Office 365 includes Safe Links, Safe Attachments, Anti-phishing, and Spoof intelligence features. Safe Links proactively protects your users from malicious hyperlinks in a message, providing protection every time the link is selected. Safe Attachments protects against unknown malware and viruses, routing all messages and attachments that don't have a known virus/malware signature to a special environment where Defender for Office 365 can detect malicious intent. For more information about Defender for Office 365, see Microsoft Defender for Office 365 service description.
To view feature availability across plans, see Microsoft 365 and Office 365 platform service description.