You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CloudAppSecurityDocs/cas-compliance-trust.md
+11-5Lines changed: 11 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
---
2
2
title: Microsoft Defender for Cloud Apps – privacy
3
3
description: Learn about how Microsoft Defender for Cloud Apps manages user privacy.
4
-
ms.date: 11/24/2024
4
+
ms.date: 06/17/2025
5
5
ms.topic: concept-article
6
6
---
7
7
# Privacy with Microsoft Defender for Cloud Apps
@@ -22,7 +22,7 @@ Microsoft Defender for Cloud Apps collects information from your configured clou
22
22
- User and group configurations
23
23
24
24
> [!NOTE]
25
-
> The data collected from the various applications is dependent on the customer-provided data from the various applications and may include personal information.
25
+
> The data collected from the various applications is dependent on the customer-provided data from the various applications and might include personal information.
26
26
27
27
## Data storage location
28
28
@@ -31,7 +31,7 @@ Defender for Cloud Apps operates in the Microsoft Azure data centers in the foll
|**Customers whose tenants are provisioned in the United States**| United States |
34
-
|**Customers whose tenants are provisioned in the European Union or the United Kingdom**|Either the European Union and/or the United Kingdom |
34
+
|**Customers whose tenants are provisioned in the European Union or the United Kingdom**|The European Union or the United Kingdom, depending on service availability.|
35
35
|**Customers whose tenants are provisioned in any other region**| The United States and/or a data center in the region that's nearest to the location of where the customer's Microsoft Entra tenant has been provisioned. |
36
36
37
37
In addition to the locations above, the App Governance features within Defender for Cloud Apps operate in the Microsoft Azure data centers in the following geographical regions listed below. Customer with App Governance enabled will have data stored within the data storage location the customer provisions in above, and in a second data storage location as described below:
@@ -52,7 +52,13 @@ In addition to the locations above, the App Governance features within Defender
52
52
53
53
Customer data collected by Defender for Cloud Apps is either stored in your tenant location, as described in the previous tables, or in the geographic location of another online service that Defender for Cloud Apps shares data with, as defined by the data storage rules of that online service.
54
54
55
-
If Defender for Cloud Apps data is stored in your tenant location, your tenant isn't movable after having been created. To view your Defender for Cloud Apps tenant location in the Microsoft Defender portal, go to **Settings > Cloud Apps > About > Region**.
55
+
56
+
### View your data storage location
57
+
58
+
To view your Defender for Cloud Apps tenant location in the Microsoft Defender portal, go to **Settings > Cloud Apps > About > Region**.
59
+
60
+
> [!NOTE]
61
+
> If Defender for Cloud Apps data is stored in your tenant location, your tenant isn't movable after having been created.
56
62
57
63
## Data retention
58
64
@@ -62,7 +68,7 @@ Your data is kept and is available to you while the license is under grace perio
62
68
63
69
## Data sharing for Microsoft Defender for Cloud Apps
64
70
65
-
Defender for Cloud Apps shares data, including customer data, among the following Microsoft products also licensed by the customer. For customers in the Government Community Cloud (GCC), data sharing between government and commercial cloud environments may occur, depending on the location of the service offering.
71
+
Defender for Cloud Apps shares data, including customer data, among the following Microsoft products also licensed by the customer. For customers in the Government Community Cloud (GCC), data sharing between government and commercial cloud environments might occur, depending on the location of the service offering.
| Windows 10, version 2004 or later<br/>Windows Server 2012 R2 and Windows Server 2016 with the [modern unified solution](onboard-server.md#functionality-in-the-modern-unified-solution-for-windows-server-2016-and-windows-server-2012-r2)<br/>Windows Server 2019 or later | older than 1.329.495.0 |Feature not available | Audit mode (2)|
124
+
| Windows 10, version 2004 or later<br/>Windows Server 2012 R2 and Windows Server 2016 with the [modern unified solution](onboard-server.md#functionality-in-the-modern-unified-solution-for-windows-server-2016-and-windows-server-2012-r2)<br/>Windows Server 2019 or later |Older than 1.329.495.0 |Feature not available | Audit mode (2)|
125
125
| Windows 11, version 22H2 or later | 1.329.495.0 or later | Available | Audit mode (2)|
126
-
| Windows 10, version 2004 or later<br/>Windows Server 2012 R2 and Windows Server 2016 with the [modern unified solution](onboard-server.md#functionality-in-the-modern-unified-solution-for-windows-server-2016-and-windows-server-2012-r2)<br/>Windows Server 2019 or later | 1.329.495.0 or later |Feature not available | Block mode (1)|
126
+
| Windows 10, version 2004 or later<br/>Windows Server 2012 R2 and Windows Server 2016 with the [modern unified solution](onboard-server.md#functionality-in-the-modern-unified-solution-for-windows-server-2016-and-windows-server-2012-r2)<br/>Windows Server 2019 or later | 1.329.495.0 or later |Feature not available | Block mode (1)|
127
127
128
128
> [!TIP]
129
129
> To enforce PUA protection in block mode, use any of the following management methods:
0 commit comments