Microsoft Cloud Service processing outside UK
Case reference FOI2025/00283
Received 24 March 2025
Published 11 April 2025
Request
Please supply me with any information, documentation, contract clause change or emails, etc. that you have received in the past two years which identify any countries where Microsoft can or actually do process any data you have uploaded to the following services:
1 - Any service operated by or on the Microsoft Azure cloud platform by any of your processors or contracted service providers (including a direct contract with Microsoft)
2 - Any Microsoft M365 service
For the purposes of this request you should consider any offshored administration or direct system support as being ‘processing’, whether this relates to personal data or not - this is not a GDPR specific request.
Response
Our ICT department have confirmed that the Microsoft Azure cloud platform data locations are recorded as ‘EU Model Clause compliant datacenters’. M365 service data locations are recorded as either ‘European Union’ or ‘United Kingdom’.
Documents
This is London Fire Brigade's response to a freedom of information (FOI) or environmental information regulations (EIR) request.
You can browse our other responses or make a new FOI request.