Microsoft
Your own published record, as at 2026-08-15.
Your Details
The Macro Picture17
1 conditional row (Hosting Locality = Tenant provisioned in the EU/EFTA Macro Region Geography with an EU/EFTA billing address, bringing Microsoft 365, Entra, Azure regional services, Dynamics 365 and Power Platform in-scope for the EU Data Boundary) sit outside these counts. A Variant is a stated deployment mode, not a published offering, and the Grid Standard holds it to its own band.
What Is Published8
Your Own Words3
Microsoft Corporation complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) ... In such cases, we implement legal safeguards—such as standard contractual clauses approved by the European Commission—to help protect your rights and ensure your data remains protected.
Researcher agent in Microsoft 365 Copilot supports working with Claude AI models from Anthropic ... Copilot in Excel, enterprise users can choose Claude models ... Copilot Cowork uses Anthropic models ... Fireworks AI inference platform on Microsoft Foundry delivers high-performance, low-latency inference for open models.
We will not disclose data to a government or law enforcement agency, except as you direct or where required by law... Microsoft gives prior notice to users whose data is sought by a law enforcement agency or other governmental entity, except where prohibited by law.
Parties You Name3
Register Check3
AI Role By Offering1
Assessment Basis
Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.
Read from 19 first-party surface(s) across 1 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.
- Fact Record
- Version 1.0, dated 2026-08-15
- Standards Commit
- b3c45f05
- Register Control Quality
- Both Views
Verification And Challenge
Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-15. Correspondence route as recorded on this card input: ror@blacksnowintel.com.
What A Machine Could Not Establish3
3 questions are open and 5 are established, read as at 2026-08-15 under method v1.6.
Publish it: publish a sub-processor list.
Subprocessor List Completeness: Not Assessable; Subprocessor Locations: No List To Assess
Where To Put It
This was read on your own page at https://aka.ms/subprocessor. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.
Where Others Stand
83 organisations in the register publish a sub-processor list. You publish on it, but not completely.
What A Published Answer Looks Like
We use a few different third-party subprocessors to help us provide our services to you. These subprocessors process data that you input into the services, which may include personal data.
A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published sub-processor page. Claim tier Quoted. The organisation that published it is not named. A name in the original is replaced; nothing else in the sentence is changed.
One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.
Still Open
Deep Dive
The full assessment, plus consulting on what to fix.