Vendor profile
Microsoft Dynamics 365: where is customer data stored and processed?
Microsoft Dynamics 365 is provided by Microsoft Corporation, headquartered in the USA. Customer data and pseudonymised personal data are documented as stored and processed in the EU/EFTA when the service is configured within the EU Data Boundary, though the specific country is not stated. Telemetry and logs are assumed to be processed in the EU/EEA, as these contain personal data, but this is not documented. The customer can choose region, and regions outside the EU/EEA exist and can be avoided. Identity is handled by Microsoft Entra ID in the region chosen at creation (EMEA), not specifically for Dynamics 365. Backup location, support staff location and notification location are not stated, and the sub-processor list was not read in the retrieved pages. The customer group is not stated.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Europe (country not stated) | – |
| Processing | Europe (country not stated) | – |
| Login and user account | Europe (country not stated) | – |
| Logs and telemetry | Europe (country not stated) | – |
Ownership and agreements
| Owner | Microsoft Corporation (USA) |
|---|---|
| Headquarters | USA |
| Data processing agreement | Found and read |
| Certifications | ISO/IEC 27018, ISO/IEC 27701, SOC 1, SOC 2, SOC 3 |