Advanced Data Residency Commitments

Note

If you have purchased a Multi-Geo subscription, then Microsoft will store certain customer data at rest in more than one Geography based on your configuration even if you have purchased the Microsoft 365 Advanced Data Residency add-on ("ADR").

Microsoft makes commitments to store certain customer data at rest in the applicable Local Region Geography for eligible customers that purchase ADR. The commitments are specified as follows.

Exchange Online

The following customer data is stored at rest in the Local Region Geography:

• Exchange Online mailbox content (e-mail body, calendar entries, and the content of e-mail attachments stored in the related Local Region Geography).

SharePoint/OneDrive

The following customer data is stored at rest in the Local Region Geography:

• SharePoint site content and the files stored within that site and files uploaded to OneDrive

Microsoft Teams

The following customer data is stored at rest in the Local Region Geography:

• Microsoft Teams chat messages (including private messages, channel messages, meeting messages and images used in chats), and, for customers using Microsoft Stream (on SharePoint), meeting recordings

Microsoft Copilot for Microsoft 365

The following customer data is stored at rest in the Local Region Geography:

• Any stored content of interactions with Microsoft Copilot for Microsoft 365 to the extent not included in the preceding commitments.

Microsoft Defender for Office P1

The following customer data is stored at rest in the Local Region Geography:

• MDO P1 doesn't store any customer data within its service.
• Exchange Online Protection (EOP). The following customer data is stored at rest in the Local Region Geography: Service configuration data and policies, quarantined email and attachments, junk email, grading analysis, blocklists (url, tenant, user), spam domains, reports, and alerts

Office for the Web

The following customer data is stored at rest in the Local Region Geography:

• Office for the Web stores files on a storage host that has its applicable promises to Local Region Geography.

Viva Connections

The following customer data is stored in the Local Region Geography:

• Viva Connections Dashboard and Feed can have content sourced from SharePoint, Exchange Online and Microsoft Teams. All customer data sourced from these services covered by data residency commitments will be stored in the Local Region Geography. Refer to Exchange Online, SharePoint, and Microsoft Teams workload data residency pages for more details.

Viva Topics

The following customer data is stored at rest in the Local Region Geography:

• All the topics and customer data snippets discovered are stored within the relevant Geographies in Exchange Online Substrate (site or arbitration mailboxes, and Substrate). All topic customer data is partitioned based on which Local Region Geography the data came from within your tenant.
• Machine Learning ("ML") models are trained on public web data, and as such don't contain any customer data from your tenant. In the future, it's possible we'll use customer data to improve accuracy of the ML models, in which case the data handling of ML models will follow the same policies as any other customer content (including data residency, retention, access control, sensitivity).
• Topic highlighting is computed dynamically when the SharePoint page is rendered by running a language model against the content of the page and linking it with the knowledge base of Topics. The Topics data is sourced from the Substrate in the Local Region Geography.
• The administration configuration data is stored within the Local Region Geography.

Purview Audit (Standard)

The following customer data is stored at rest in the Local Region Geography:

• Service configuration data, audited Activities, audit Records, and audit log query permissions

Purview Audit (Premium)

The following customer data is stored at rest in the Local Region Geography:

• In addition to the customer data stored as part of Purview Audit (Standard), configuration and Customer Data related to high-value crucial events

Data lifecycle management - Data Retention

The following customer data is stored at rest in the Local Region Geography:

• Retention policy settings and retention label definitions
• Customer Data stored in original locations for the following services:
  • Exchange email
  • SharePoint site
  • OneDrive accounts
  • Microsoft 365 Groups
  • Exchange public folders
  • Microsoft Teams chats and channel messages
• Customer Data copied and stored in Exchange Online hidden mailboxes
  • Teams channel messages
  • Teams chats
  • Teams private channel messages
  • SharePoint, OneDrive, Exchange Online and Microsoft Teams follow the data residency commitments for those services. Refer to Exchange Online, SharePoint, and Microsoft Teams workload data residency pages for more details.
• Training classifiers
• Disposition data
• Mappings between retention labels and Data Loss Prevention (DLP) policies

Data lifecycle management - Records Management

The following customer data is stored at rest in the Local Region Geography:

• Record retention label definitions, file plan definitions, event-based retention policy settings, disposition review records and records of deletion

Information Protection - Sensitivity labels

The following customer data is stored at rest in the Local Region Geography:

• Label configuration
• Labels definition
• Label policies
• Custom help page
• Activity Explorer and Microsoft 365 unified audit logs
• Label change justification records

Information Protection - Data Loss Prevention (DLP)

The following customer data is stored at rest in the Local Region Geography:

• DLP admin configuration, DLP policies in Compliance Portal, DLP monitored activities, violation history, Activity Explorer and Microsoft 365 unified audit logs, quarantine storage, DLP Alerts and DLP Alert management dashboard

Information Protection - Office Message Encryption

The following customer data is stored at rest in the Local Region Geography:

• Encryption policies, admin settings and encrypted messages

Risk and compliance - information barriers

The following customer data is stored at rest in the Local Region Geography:

• Policy settings, risk indicators and admin settings