I am looking for a definitive statement on whether the Microsoft Edge sync data, for a GCC tenant, is stored in a FedRAMP compliant site, for the purposes of NIST 800-171 compliance.
The pages in the Edge Deployment documentation state that GCC High is not supported, and I have seen references that the data is stored in the same country as the tenant, but no specifics beyond that.
Or, since the data is encrypted with AIP managed keys prior to leaving the user's machine, am I barking up the wrong tree? If data is properly encrypted I may not really need to be concerned at all about where it is properly stored.
Edit:
On the page Microsoft Edge enterprise sync FAQ | Microsoft Docs it mentions that open tab and history data are generated server side. Where is this data stored?
I see the language "...data for a tenant that is registered in the United States is stored in servers geo-located for that region and uses the same storage solution as Office applications.", but "same storage solution" is quite vague. It's could mean anything from "it's saved in our GCC tenant's One Drive storage space" to "it's stored on the same brand SSD's that office applications use".
Thank you!
James
