Vendor profile
Microsoft Defender for Endpoint: where is customer data stored and processed?
Microsoft Defender for Endpoint stores customer data in the tenant's geography, selected at provisioning, but the source does not state which country applies to a given customer. Possible storage countries are the UK, USA, Australia, Switzerland, India and UAE, and UAE storage applies only to customers outside the EU/EEA. Processing is said to run in Azure datacentres in the EU, UK, USA, Switzerland, Australia, India and UAE, with no statement of whether this applies to each customer. The customer group is not stated, and no certifications were found. The Data Processing Agreement has been read but does not state where data is stored, so the storage location comes from other sources or is not found. Backup is within a paired region in the same geographic area, with the country not stated.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Europe (country not stated) | – |
| Processing | Europe (country not stated) | United Kingdom, USA, Switzerland, Australia, India, Forente arabiske emirater |
Ownership and agreements
| Owner | Microsoft Corporation (USA) |
|---|---|
| Headquarters | USA |
| Data processing agreement | Found and read |
| Certifications | None found |