# Microsoft Azure privacy rating

Cloud computing platform from Microsoft offering virtual machines, Kubernetes, storage, databases and AI services in regions worldwide.

## Summary

Microsoft Azure scores 40 out of 100 (grade D) on the server hosting criteria. It meets 4 of 12 criteria: transparency report, tells users about requests, TLS configuration and IPv6. It partly meets independent audit, security headers and Reverse DNS. It does not meet open source, no trackers or telemetry, no ads or data sales, mail-friendly (port 25) and anonymous payment. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B+.

- Website: https://azure.microsoft.com/en-us
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: none found
- Category: [Server hosting](https://privacyratings.com/server-hosting/)
- Also rated: [Outlook.com](https://privacyratings.com/email-providers/outlook-com/) (Email providers), [Microsoft Outlook](https://privacyratings.com/email-clients/microsoft-outlook/) (Email clients), [Microsoft Defender for Office 365](https://privacyratings.com/spam-filters/microsoft-defender-for-office-365/) (Spam and virus filtering), [Microsoft Exchange Server](https://privacyratings.com/mail-server-software/microsoft-exchange-server/) (Mail server software), [Microsoft Edge](https://privacyratings.com/browsers/microsoft-edge/) (Browsers), [Bing](https://privacyratings.com/search-engines/bing/) (Search engines), [Microsoft Authenticator](https://privacyratings.com/two-factor-authentication/microsoft-authenticator/) (Two-factor authentication), [BitLocker](https://privacyratings.com/file-encryption/bitlocker/) (File encryption), [SDelete](https://privacyratings.com/data-erasers/sdelete/) (Data erasers), [Microsoft Defender Antivirus](https://privacyratings.com/anti-malware/microsoft-defender-antivirus/) (Anti-malware), [Microsoft Teams](https://privacyratings.com/team-chat/microsoft-teams/) (Team chat), [Microsoft SwiftKey](https://privacyratings.com/keyboards/microsoft-swiftkey/) (Mobile keyboards), [Windows 11](https://privacyratings.com/desktop-operating-systems/windows-11/) (Desktop operating systems), [Media Creation Tool](https://privacyratings.com/os-installers/media-creation-tool/) (OS downloaders and bootable USB tools), [PowerToys Command Palette](https://privacyratings.com/launchers/powertoys-command-palette/) (App launchers), [Windows Clipboard History](https://privacyratings.com/clipboard-managers/windows-clipboard-history/) (Clipboard managers), [SigCheck](https://privacyratings.com/windows-hardening/sigcheck/) (Windows hardening), [Hyper-V](https://privacyratings.com/virtual-machines/hyper-v/) (Virtual machines), [Microsoft OneNote](https://privacyratings.com/notes/microsoft-onenote/) (Notes), [Microsoft Visio](https://privacyratings.com/diagrams/microsoft-visio/) (Diagrams and whiteboards), [Outlook Calendar](https://privacyratings.com/calendars/outlook-calendar/) (Calendars), [Microsoft Bookings](https://privacyratings.com/scheduling/microsoft-bookings/) (Scheduling), [Microsoft To Do](https://privacyratings.com/task-management/microsoft-to-do/) (Task management), [Microsoft 365](https://privacyratings.com/office-suites/microsoft-365/) (Office suites), [Snipping Tool](https://privacyratings.com/screen-recording/snipping-tool/) (Screenshots and screen recording), [Xbox Game Bar](https://privacyratings.com/screen-recording/xbox-game-bar/) (Screenshots and screen recording), [Microsoft Forms](https://privacyratings.com/forms/microsoft-forms/) (Forms and surveys), [Microsoft Translator](https://privacyratings.com/translation/microsoft-translator/) (Translation), [Windows Voice Typing](https://privacyratings.com/speech-to-text/windows-voice-typing/) (Dictation and transcription), [Microsoft Copilot](https://privacyratings.com/ai-assistants/microsoft-copilot/) (AI assistants), [Microsoft OneDrive](https://privacyratings.com/cloud-storage/microsoft-onedrive/) (Encrypted cloud storage), [Visual Studio Code](https://privacyratings.com/code-editors/visual-studio-code/) (Code editors), [Windows Terminal](https://privacyratings.com/terminals/windows-terminal/) (Terminals), [.NET MAUI](https://privacyratings.com/app-frameworks/net-maui/) (Cross-platform app frameworks), [ASP.NET Core](https://privacyratings.com/dotnet-frameworks/asp-net-core/) (.NET web frameworks), [Blazor](https://privacyratings.com/dotnet-frameworks/blazor/) (.NET web frameworks), [Microsoft Clarity](https://privacyratings.com/web-analytics/microsoft-clarity/) (Website analytics)
- Grade: D (40/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | Microsoft sites use third-party cookies, including social media and advertising cookies and analytics providers. | https://www.microsoft.com/en-us/privacy/privacystatement |
| No ads or data sales | No | The privacy statement describes advertising cookies from partners such as LinkedIn and Xandr used to tailor ads. | https://www.microsoft.com/en-us/privacy/privacystatement |
| Independent audit | Partial | Only the SOC 3 summary report is public; full SOC 2 and ISO audit reports are in the Service Trust Portal for customers. | https://learn.microsoft.com/en-us/compliance/regulatory/offering-soc-3 |
| Transparency report | Yes | Semi-annual reports with counts of law enforcement requests for consumer and enterprise customer data. | https://www.microsoft.com/en-us/corporate-responsibility/reports/government-requests/customer-data |
| Tells users about requests | Yes | Microsoft gives enterprise customers prior notice of third-party requests for their data, except where prohibited by law. | https://www.microsoft.com/en-us/corporate-responsibility/reports/government-requests/customer-data |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=portal.azure.com&hideResults=on |
| Security headers | Partial | Grade B+ (80/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=portal.azure.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Mail-friendly (port 25) | No | Outbound port 25 is blocked on pay-as-you-go and most other subscription types; it is open only on Enterprise Agreement and MCA-E subscriptions. | https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-network/troubleshoot-outbound-smtp-connectivity |
| Reverse DNS | Partial | Reverse DNS is set through PowerShell or the CLI and only for public IPv4 addresses. | https://learn.microsoft.com/en-us/azure/dns/dns-reverse-dns-for-azure-services |
| IPv6 | Yes | There is no charge for public IPv6 addresses or prefixes. | https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/ipv6-overview |
| Anonymous payment | No | Payment is by card or invoice. Cryptocurrency is not accepted. | https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/change-credit-card |

Source: https://privacyratings.com/server-hosting/microsoft-azure/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/server-hosting/microsoft-azure.md