Office suites
Microsoft 365 privacy rating
Microsoft's office suite with Word, Excel, PowerPoint, Outlook and OneDrive, available as desktop and mobile apps and in the browser. Cloud files are stored on Microsoft's servers.
Summary
Microsoft 365 scores 47 out of 100 (grade D) on the office suites criteria. It meets 5 of 9 criteria: transparency report, tells users about requests, TLS configuration, security headers and modern web standards. It partly meets independent audit. It does not meet open source, no trackers or telemetry and no ads or data sales. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A, Mozilla HTTP Observatory grade A+ and Internet.nl website score 96%.
Score 47 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The apps always send required diagnostic data to Microsoft, which cannot be turned off.
-
No
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Microsoft uses data from its services, including Copilot prompts, for advertising. Documents are not used to target ads.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Office 365 has SOC 2 audits by an independent CPA firm. The reports are only available to customers through the Service Trust Portal.
-
Yes
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
Publishes counts of government requests for consumer and enterprise data twice a year.
-
Yes
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
Microsoft notifies users and enterprise customers of requests for their data unless legally prohibited.
Automated tests
-
Yes
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A
-
Yes
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade A+ (110/100+)
-
Yes
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Score 96%