{
  "slug": "microsoft-azure",
  "category": "server-hosting",
  "name": "Microsoft Azure",
  "description": "Cloud computing platform from Microsoft offering virtual machines, Kubernetes, storage, databases and AI services in regions worldwide.",
  "website": "https://azure.microsoft.com/en-us",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 40,
  "coverage": 100,
  "summary": "Microsoft Azure scores 40 out of 100 (grade D) on the server hosting criteria. It meets 4 of 12 criteria: transparency report, tells users about requests, TLS configuration and IPv6. It partly meets independent audit, security headers and Reverse DNS. It does not meet open source, no trackers or telemetry, no ads or data sales, mail-friendly (port 25) and anonymous payment. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B+.",
  "url": "https://privacyratings.com/server-hosting/microsoft-azure/",
  "markdown": "https://privacyratings.com/server-hosting/microsoft-azure/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://www.microsoft.com/en-us/privacy/privacystatement",
      "note": "Microsoft sites use third-party cookies, including social media and advertising cookies and analytics providers."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "no",
      "evidence": "https://www.microsoft.com/en-us/privacy/privacystatement",
      "note": "The privacy statement describes advertising cookies from partners such as LinkedIn and Xandr used to tailor ads."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-soc-3",
      "note": "Only the SOC 3 summary report is public; full SOC 2 and ISO audit reports are in the Service Trust Portal for customers."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.microsoft.com/en-us/corporate-responsibility/reports/government-requests/customer-data",
      "note": "Semi-annual reports with counts of law enforcement requests for consumer and enterprise customer data."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://www.microsoft.com/en-us/corporate-responsibility/reports/government-requests/customer-data",
      "note": "Microsoft gives enterprise customers prior notice of third-party requests for their data, except where prohibited by law."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=portal.azure.com&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=portal.azure.com",
      "note": "Grade B+ (80/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "port_25": {
      "title": "Mail-friendly (port 25)",
      "weight": 1,
      "answer": "no",
      "evidence": "https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-network/troubleshoot-outbound-smtp-connectivity",
      "note": "Outbound port 25 is blocked on pay-as-you-go and most other subscription types; it is open only on Enterprise Agreement and MCA-E subscriptions."
    },
    "reverse_dns": {
      "title": "Reverse DNS",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://learn.microsoft.com/en-us/azure/dns/dns-reverse-dns-for-azure-services",
      "note": "Reverse DNS is set through PowerShell or the CLI and only for public IPv4 addresses."
    },
    "ipv6": {
      "title": "IPv6",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/ipv6-overview",
      "note": "There is no charge for public IPv6 addresses or prefixes."
    },
    "anonymous_payment": {
      "title": "Anonymous payment",
      "weight": 1,
      "answer": "no",
      "evidence": "https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/change-credit-card",
      "note": "Payment is by card or invoice. Cryptocurrency is not accepted."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "B+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T06:38:53.731Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}