Office suites
Microsoft 365 privacy rating
Microsoft's office suite with Word, Excel, PowerPoint, Outlook and OneDrive, available as desktop and mobile apps and in the browser. Cloud files are stored on Microsoft's servers.
Summary
Microsoft 365 scores 44 out of 100 (grade D) on the office suites criteria. It meets 4 of 8 criteria: transparency report, tells users about requests, TLS configuration and security headers. It partly meets independent audit. It does not meet open source, no trackers or telemetry and no ads or data sales. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.
Score 44 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The apps always send required diagnostic data to Microsoft, which cannot be turned off.
-
No
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Microsoft uses data from its services, including Copilot prompts, for advertising. Documents are not used to target ads.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Office 365 has SOC 2 audits by an independent CPA firm. The reports are only available to customers through the Service Trust Portal.
-
Yes
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
Publishes counts of government requests for consumer and enterprise data twice a year.
-
Yes
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
Microsoft notifies users and enterprise customers of requests for their data unless legally prohibited.
Automated tests
-
Yes
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A+
-
Yes
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade A+ (110/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.