Describe the capabilities of Microsoft compliance solutions
Service Trust Portal and Microsoft Privacy
ImportantRecognize where Microsoft publishes assurance materials and the principles governing personal data.
Aligned to the SC-900 skills measured as of July 28, 2026; product behavior verified September 10, 2026.
Why this matters
Customers need authoritative assurance evidence about Microsoft cloud services and a clear understanding of the commitments that guide Microsoft's handling of personal data.
Must Know
- The Service Trust Portal provides Microsoft cloud assurance resources such as audit reports, compliance guides, trust documents, and information about standards and regulations.
- Some Service Trust Portal content requires sign-in and may depend on the user's organization or agreement.
- Microsoft privacy principles emphasize control, transparency, legal protections, no content-based targeting, benefits to customers, and strong security.
- Privacy commitments guide Microsoft's handling of personal data; they do not transfer every customer compliance responsibility to Microsoft.
Compare and Distinguish
- Service Trust Portal vs Compliance Manager: obtain Microsoft assurance documentation versus assess and improve an organization's own compliance posture.
- Privacy vs security: appropriate collection and use of personal data versus protecting data and systems; each supports the other but they are not identical.
- Transparency vs control: explaining data practices versus giving customers meaningful choices and management over their data.
Scenario examples
- An auditor needs Microsoft's independent cloud audit report, so the organization uses the Service Trust Portal.
- A customer reviews Microsoft's privacy commitments to understand how personal data is handled.
- An organization combines vendor assurance documents with its own controls and evidence.
Exam traps
- A Service Trust Portal document does not automatically certify the customer's implementation.
- Privacy is not simply another word for confidentiality.
- Microsoft commitments do not remove customer duties under shared responsibility.
Key takeaways
- Use Service Trust Portal for Microsoft assurance and trust resources.
- Privacy principles describe commitments for personal data.
- Vendor evidence supports, but does not replace, customer compliance work.
Ready for the quiz?
- Where would you find a Microsoft cloud audit report?
- How is privacy broader than data encryption?
- Why does a vendor report not prove customer compliance?
Related objectives
- D4.1.S1 — Describe the Service Trust Portal offerings
- D4.1.S2 — Describe the privacy principles of Microsoft