Azure
microsoft.com
Automated, point-in-time. Not independently reviewed or approved by TRUSTYCYBER unless expressly stated.
Azure scores 52/100 (D): an AI assurance review is needed before approval. The score is below 55, mainly because the organisation & AI governance evidence is thin. Independently confirmed: IRAP, ISO/IEC 42001 and ISO/IEC 27001.
Scanned Jul 23, 2026 · Public evidence · Point-in-time
Before you sign
What to ask for: Get a no-training clause covering first- and third-party models into the DPA/order form.
Why it matters, and the evidence
The public sources scanned do not clearly state that customer prompts, files, and outputs are excluded from training or fine-tuning of first- or third-party models.
What to ask for: Get retention windows, in days, in writing.
Why it matters, and the evidence
The public sources scanned do not give a retention period for customer data or prompts/outputs.
Australian Government checksclick a check for the detail, directions checked Nov 1, 2026
PSPF directionsNone apply
No vendor-specific PSPF direction names this vendor or product (checked 2026-11-01).
IRAP assessmentCorroborated
IRAP assessment claimed and corroborated by TrustyCyber. Request the assessment report to confirm its date, classification level and the services in scope.
Document held and reviewed by TrustyCyber, cited, not reproduced.
Hosting Certification FrameworkNot collected
Not found in the sources this scan collected. If the service will hold government data, ask whether it is hosted with a provider certified under the Hosting Certification Framework, and at which level.
Data held in AustraliaNot collected
No Australian data residency commitment was found in the sources this scan collected. Ask where inputs, outputs, logs and backups are processed and stored, and whether processing can be kept in Australia.
What your organisation still has to do (7)
Every level of government
- Treat AI outputs, including meeting transcripts and summaries, as public records: capture or dispose of them under your records authority (the Archives Act 1983 for Commonwealth agencies, your state's records legislation for state agencies and councils). Source ↗
Commonwealth agencies
- Assess foreign ownership, control or influence risk for this technology asset, as PSPF Direction 001-2024 requires. Source ↗
- Apply the DTA Policy for the responsible use of AI in government: record the use case, assess its impact before deployment, and keep your AI transparency statement current. Source ↗
- Assess the service against the ISM controls for the highest classification of data you intend to use with it (OFFICIAL, OFFICIAL: Sensitive or PROTECTED). Source ↗
State agencies and councils
- Assess the service under your state's privacy law, which governs where residents' personal information may go: for example the PPIP Act 1998 in New South Wales, the Privacy and Data Protection Act 2014 in Victoria or the Information Privacy Act 2009 in Queensland.
- New South Wales agencies: complete the NSW AI Assessment Framework self-assessment, which Circular DCS-2024-04 makes mandatory. Source ↗
- Victorian public sector: follow Administrative Guideline 2024/07 on the safe and responsible use of generative AI. Source ↗
What to ask the vendor
Buyer questionsanswered only from the public evidence scanned, click a row for the answer
!Will they train on your data?Ask the vendor
Not found in the public sources scanned — ask the vendor directly.
!How long do they keep your data?Ask the vendor
Not found in the public sources scanned — ask the vendor directly.
!Who else can access your data?Ask the vendor
Microsoft's AI subprocessor overview names the Fireworks AI inference platform on Microsoft Foundry as an example of an AI subprocessor integration, providing inference for open models.
Confirm in writing: Ask the vendor to state this in writing before signing.
“Syensqo.AI leverages Azure OpenAI Service to develop SyGPT chatbot in record time Syensqo.AI, a division of the Belgian science and technology leader Syensqo, has developed SyGPT, an advanced AI chatbot using Azure OpenAI Service.”
“Fireworks AI inference platform on Microsoft Foundry delivers high-performance, low-latency inference for open models.”
!Where is your data processed?Ask the vendor
Microsoft states that Microsoft Cloud enables customers to store and process their personal data within the EU via the EU Data Boundary.
Confirm in writing: Ask the vendor to state this in writing before signing.
“Microsoft Cloud enables customers to keep personal data within the European Data Boundary Microsoft’s EU Data Boundary enables customers to store and process their data within the EU. Read about the latest enhancements and new features building on prior progress.”
✓What happens in a security incident?Clear
Microsoft publishes a security.txt naming the Microsoft Security Response Center (MSRC) researcher portal, a PGP encryption key for secure reporting, a public bug bounty policy, a Coordinated Vulnerability Disclosure policy, a bounty legal safe-harbor policy, and machine-readable CSAF security advisories.
“# Our Researcher Portal Contact: https://msrc.microsoft.com/report/vulnerability/new # Our PGP Key Encryption: https://msrc.microsoft.com/.well-known/csaf/openpgp/998D7EC1A516E3D17FF90480EF148D3CDE714E0D.asc Expires: 2026-09-23T16:00:00.000Z # Our Bounty policy Policy: https://www.microsoft.com/en-us/msrc/bounty/ # Our Coordinated Vulnerability Disclosure Policy Policy: https://www.microsoft.com/en-us/msrc/cvd # Our Bounty Legal Safe Harbor Policy Policy: https://www.microsoft.com/en-us/msrc/bounty-safe-harbor # Our Common Security Advisory Framework (CSAF) publications CSAF: https://msrc.microsoft.com/csaf/provider-metadata.json”
Email to send the vendor4 items to confirm in writing
Hello Microsoft team, We are assessing Azure (Microsoft) as part of our supplier review. Before we proceed, please confirm the following in writing: 1. Do you use our data (inputs, outputs or uploaded files) to train or improve your models? Please confirm in writing, including any opt-out and whether it applies to every plan. 2. How long do you retain our data, in days, for each type (inputs, outputs, logs and backups), and how is it deleted? 3. Please provide your current, dated subprocessor list and explain how you notify customers of changes. 4. In which countries and regions is our data processed and stored, and can processing be limited to a region we choose? A written reply to each point, or a link to where it is documented, is enough. Where a point is covered by a certification or independent report, please include the certificate number or the report and its date. Thank you,
How the score is built
Assurance dimensionsweighted components of one score, not eight separate ratings
Organisation & AI governance15% of the scoreorganisation-level evidence15
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
Who owns AI risk: policies, responsible-AI principles, human oversight and administrative controls.
Assessed against ISO 42001 · NIST AI RMF · AIUC-1
“Law enforcement data requests View the number of requests for customer data we receive from law enforcement agencies. View report Report US national security orders report View statistics about demands received from the US government pursuant to national security laws.”
Governance & accountability: not publicly evidenced.
AI system15% of the score47
What AI the vendor actually runs and where it sits in the product, the map everything else is judged against.
Assessed against ISO 42001 · NIST AI RMF
“Ensuring the accuracy and reliability of AI-generated content requires evaluating and monitoring the performance of generative AI models. Microsoft Foundry offers evaluation metrics that assess the quality, safety, and relevance of generated content.”
“Syensqo.AI leverages Azure OpenAI Service to develop SyGPT chatbot in record time Syensqo.AI, a division of the Belgian science and technology leader Syensqo, has developed SyGPT, an advanced AI chatbot using Azure OpenAI Service.”
“Copilots are chat-based generative AI interactions from Microsoft. They have specialized functionality based on their users and use cases. Some Copilots are experienced standalone, while others are integrated into Microsoft products, services, and devices. Included in this portfolio are Microsoft Copilot , Microsoft 365 Copilot , Microsoft Security Copilot , and GitHub Copilot , among other generative AI solutions and experiences.”
The vendor’s own evaluation of its AI features before and after release, evals, red-teaming, monitoring. A model supplier’s testing of its own model counts only in part.
Assessed against NIST GenAI · NIST AI RMF · ISO 42001
“Ensuring the accuracy and reliability of AI-generated content requires evaluating and monitoring the performance of generative AI models. Microsoft Foundry offers evaluation metrics that assess the quality, safety, and relevance of generated content.”
How changes to models and AI features, including a change of underlying model, are controlled and communicated: versioning, notice, rollback.
Assessed against ISO 27001 · ISO 42001
“Microsoft Foundry Models move through a predictable lifecycle—from release to eventual retirement—giving you time to evaluate replacements and migrate workloads. Models can launch in preview or directly into general availability (GA). This article explains each lifecycle stage, the overlap commitments Microsoft makes when a model retires, and how you're notified.”
“GA model retirement notice At least 60 days before retirement All GA models. Sent to subscription owners with active deployments.”
“Auto-upgrades are scheduled on a rolling, region-by-region basis. The upgrade schedule is published in advance in the Model Retirement Schedule .”
“If a model is found to have compliance or security issues, Microsoft reserves the right to invoke an emergency retirement with shortened notice.”
Change management: vendor-evidenced, not yet independently corroborated.
Model10% of the score60
Which foundation models and model providers power the product. How model changes are disclosed is judged under change management.
Assessed against NIST GenAI · ISO 42001
“Syensqo.AI leverages Azure OpenAI Service to develop SyGPT chatbot in record time Syensqo.AI, a division of the Belgian science and technology leader Syensqo, has developed SyGPT, an advanced AI chatbot using Azure OpenAI Service.”
“Generally available models from Anthropic, DeepSeek, Fireworks, and Mistral AI follow a 12-month lifecycle instead of the standard 18-month lifecycle.”
“All active customer-facing base-model inference offers for gpt-4o version 2024-05-13 in Azure public cloud retire on January 14, 2027 , in all applicable regions. These offers include Global Standard, Data Zone Standard, Regional Provisioned, Global Provisioned, Data Zone Provisioned, and Global Batch. The replacement model is gpt-5.1 version 2025-11-13 .”
Model provider transparency: vendor-evidenced, not yet independently corroborated.
Customer data15% of the scoreorganisation-level evidence64
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
Whether customer data trains models, how long it is retained, and where it is processed.
Assessed against ISO 27018 · OAIC APPs · EU AI Act
“Microsoft Cloud enables customers to keep personal data within the European Data Boundary Microsoft’s EU Data Boundary enables customers to store and process their data within the EU. Read about the latest enhancements and new features building on prior progress.”
“When you’re using Copilots at work, all your existing security and compliance requirements are inherited, so only people with the right permissions can access the content it generates.”
AI supply chain10% of the score60
The named chain of AI and infrastructure providers behind the product, and how it is disclosed.
Assessed against ISO 27001 · ISO 27017
“Microsoft Online Services, such as Microsoft 365, Dynamics 365, and Microsoft Azure, may use third-party providers, also known as subprocessors, as defined in the Microsoft Data Protection Addendum to help operate, maintain, or support AI functionalities offered in Microsoft cloud services.”
“Subprocessors authorized to process Customer Data or Personal Data in Microsoft Online Services are listed on the Microsoft Trust Center.”
“The Microsoft Online Services Subprocessor List identifies subprocessors authorized to subprocess customer or personal data in Microsoft Online Services. This list is applicable for all Microsoft Online Services governed by the Microsoft Data Protection Addendum.”
“Microsoft publishes the names of any new subprocessors for its online services at least six months in advance of the subprocessor’s authorization to perform services that may involve access to customer data or personal data.”
“Fireworks AI inference platform on Microsoft Foundry delivers high-performance, low-latency inference for open models.”
Subprocessors & supply chain: vendor-evidenced, not yet independently corroborated.
Security foundation15% of the scoreorganisation-level evidence65
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
How security problems are found, reported and handled: disclosure channels, bug bounty, incident response.
Assessed against ISO 27001 · NIST AI RMF
“# Our Researcher Portal Contact: https://msrc.microsoft.com/report/vulnerability/new # Our PGP Key Encryption: https://msrc.microsoft.com/.well-known/csaf/openpgp/998D7EC1A516E3D17FF90480EF148D3CDE714E0D.asc Expires: 2026-09-23T16:00:00.000Z # Our Bounty policy Policy: https://www.microsoft.com/en-us/msrc/bounty/ # Our Coordinated Vulnerability Disclosure Policy Policy: https://www.microsoft.com/en-us/msrc/cvd # Our Bounty Legal Safe Harbor Policy Policy: https://www.microsoft.com/en-us/msrc/bounty-safe-harbor # Our Common Security Advisory Framework (CSAF) publications CSAF: https://msrc.microsoft.com/csaf/provider-metadata.json”
Independent assurance evidence10% of the scoreorganisation-level evidence78
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
Whether claimed certifications and attestations are independently corroborated, checked against official registries and issuing bodies. Which certifications, and what each one does and does not establish, is stated per certificate.
Assessed against ISO 17021-1 · ISO 42006 · ISO 27006-1 · ISO 27008
Document held and reviewed by TrustyCyber, cited, not reproduced.
Document held and reviewed by TrustyCyber, cited, not reproduced.
Document held and reviewed by TrustyCyber, cited, not reproduced.
Document held and reviewed by TrustyCyber, cited, not reproduced.
Document held and reviewed by TrustyCyber, cited, not reproduced.
Document held and reviewed by TrustyCyber, cited, not reproduced.
Read from the registry record above, cited, not reproduced.
“A Leader in five Gartner® Magic Quadrant™ reports. 2 Learn more A Leader in four Forrester Wave™ categories. 3 Learn more A Leader in four IDC MarketScape reports. 4 Learn more A Leader in ten KuppingerCole reports.”
Read from the registry record above, cited, not reproduced.
Legal & contractual10% of the score40
The contractual backbone a buyer can rely on, terms, DPAs, privacy commitments and regulatory posture.
Assessed against EU AI Act · OAIC APPs
“Microsoft's use of subprocessors is governed by the Microsoft Product Terms , Data Protection Addendum (DPA) , and if applicable, product documentation.”
“Our Trust Code Our Standards of Business Conduct, our Trust Code, reflects our culture, values, and the principles that guide our behavior. Our employees use these standards to understand what is required of them, get help when needed, and make good decisions that build trust and empower our customers and partners to achieve more.”
Not graded: Agent, not applicable to this scan.
What would strengthen assuranceeach figure is from today's score, resolving one changes the others
Resolving an evidence gap strengthens the dimension it belongs to, and with it the score: 52 → up to 78 with every identified gap resolved.
The evidence behind the result
Key findingsclick a row for the evidence
✓EU Data Boundary supports data residency commitmentsStrong
Microsoft states its EU Data Boundary lets customers store and process personal data within the EU.
A concrete data-residency option is directly useful to buyers with EU data-location requirements, though the scanned page does not specify which products/plans are in scope.
“Microsoft Cloud enables customers to keep personal data within the European Data Boundary Microsoft’s EU Data Boundary enables customers to store and process their data within the EU. Read about the latest enhancements and new features building on prior progress.”
✓Mature, public coordinated vulnerability disclosure programStrong
Microsoft's published security.txt points to the MSRC researcher portal, a public bug bounty policy, a Coordinated Vulnerability Disclosure policy, a legal safe-harbor policy, and machine-readable CSAF advisories.
This is a well-documented, externally verifiable vulnerability handling infrastructure, a positive signal for incident readiness.
“# Our Researcher Portal Contact: https://msrc.microsoft.com/report/vulnerability/new # Our PGP Key Encryption: https://msrc.microsoft.com/.well-known/csaf/openpgp/998D7EC1A516E3D17FF90480EF148D3CDE714E0D.asc Expires: 2026-09-23T16:00:00.000Z # Our Bounty policy Policy: https://www.microsoft.com/en-us/msrc/bounty/ # Our Coordinated Vulnerability Disclosure Policy Policy: https://www.microsoft.com/en-us/msrc/cvd # Our Bounty Legal Safe Harbor Policy Policy: https://www.microsoft.com/en-us/msrc/bounty-safe-harbor # Our Common Security Advisory Framework (CSAF) publications CSAF: https://msrc.microsoft.com/csaf/provider-metadata.json”
!Azure OpenAI Service's data-handling terms with OpenAI are not addressed in this scanGap
Microsoft's product naming ('Azure OpenAI Service') indicates OpenAI models are available within Microsoft's Azure AI portfolio, but the scanned pages don't clarify the customer-data handling terms specific to that third-party model relationship (e.g. whether prompts are shared with or retained by OpenAI, or excluded from OpenAI's own model training).
A buyer using Azure OpenAI Service is relying on a chain that includes a named third-party model provider; without an explicit statement on data flow to that provider, the buyer cannot assess this leg of the supply chain from public documents alone.
“Syensqo.AI leverages Azure OpenAI Service to develop SyGPT chatbot in record time Syensqo.AI, a division of the Belgian science and technology leader Syensqo, has developed SyGPT, an advanced AI chatbot using Azure OpenAI Service.”
!No specific named certification with scoped evidence in this scanGap
The scanned Trust Center pages assert 'more than 90' compliance offerings and cite multiple analyst 'Leader' placements (Gartner, Forrester, IDC, KuppingerCole), but no specific compliance certification (e.g. ISO/IEC 27001, ISO/IEC 42001, SOC 2) is named with a quotable, scoped claim in this corpus.
Analyst recognitions are not the same as independently verified compliance certifications; a buyer needing a specific certification (e.g. for a regulated industry) cannot confirm it from these pages and should consult Microsoft's dedicated compliance/audit-report pages directly.
“A Leader in five Gartner® Magic Quadrant™ reports. 2 Learn more A Leader in four Forrester Wave™ categories. 3 Learn more A Leader in four IDC MarketScape reports. 4 Learn more A Leader in ten KuppingerCole reports.”
Assurance evidence: certifications 8, registry checks and verification ladders, click to view
Checked against Evidence held by TrustyCyber (not reproduced), Nov 2, 2026: Verified on the registry
Checked against Data Privacy Framework (dataprivacyframework.gov), Nov 2, 2026: Verified on the registry
Checked against FedRAMP Marketplace (fedramp.gov), Nov 2, 2026: Verified on the registry
Checked against Evidence held by TrustyCyber (not reproduced), Nov 2, 2026: Verified on the registry
Checked against Evidence held by TrustyCyber (not reproduced), Nov 2, 2026: Verified on the registry
Checked against Evidence held by TrustyCyber (not reproduced), Nov 2, 2026: Verified on the registry
Checked against Evidence held by TrustyCyber (not reproduced), Nov 2, 2026: Verified on the registry
Checked against Evidence held by TrustyCyber (not reproduced), Nov 2, 2026: Verified on the registry
AI supply chainclick a node to focus it · drag to pan · zoom with the controls
View as list
What you inheritTrustyCyber's AI Shared Responsibility Matrix v1.0
This scan names the vendor’s AI supply chain without assessing the responsibility split, that depends on how you consume the product. Under the common managed models, a deployer inherits 16 of the matrix’s 41 responsibilities from providers, each with named evidence owed.
Map your inherited responsibilitiesSources and regulation
Sources 20, click to view
Appendix: standards landscape 8, click to view
Where each standard behind this assessment stands today, from TrustyCyber’s continuously maintained standards radar.
This automated result is based on publicly available information at the time of scanning. It is not an audit, certification, legal opinion or assurance engagement. Publicly unavailable evidence may materially change the conclusion. Some certification facts were confirmed by TrustyCyber from documents it holds; only facts that may be disclosed are stated, and no confidential content is reproduced.
Monitor for changes
Get an email if its TRUSTYCYBER Score, grade or certifications change. One credit per refresh; reading the report always stays free.