SOLVED

Azure ATP: Which data is transferred to the cloud?

%3CLINGO-SUB%20id%3D%22lingo-sub-860504%22%20slang%3D%22en-US%22%3EAzure%20ATP%3A%20Which%20data%20is%20transferred%20to%20the%20cloud%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-860504%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20looking%20for%20information%20about%20which%20personal%20data%20is%20transferred%20to%20the%20cloud.%3CBR%20%2F%3EI%20need%20the%20privacy%20relevant%20information%20for%20certifications%20according%20to%20TISAX%20or%20ISO%2027001%20and%20the%20European%20GDPR.%3C%2FP%3E%3CP%3EFor%20example%2C%20which%20fields%20of%20an%20AD%20object%20(username%2C%20address...)%20transferred%3F%3C%2FP%3E%3CP%3EIs%20there%20more%20detailed%20information%20than%20this%3F%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fde-de%2Fazure-advanced-threat-protection%2Fatp-technical-faq%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fde-de%2Fazure-advanced-threat-protection%2Fatp-technical-faq%3C%2FA%3E%3C%2FP%3E%3CP%3EThank%20you%20very%20much%2C%3C%2FP%3E%3CP%3EBest%20Regards%2C%3CBR%20%2F%3ERalf%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-860504%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eazure%20atp%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-860909%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20ATP%3A%20Which%20data%20is%20transferred%20to%20the%20cloud%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-860909%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F410791%22%20target%3D%22_blank%22%3E%40Ralfxyz%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%0A%3CP%3EPlease%20refer%20the%20following%20pages%3A%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fen-us%252Fazure-advanced-threat-protection%252Fatp-privacy-compliance%26amp%3Bdata%3D02%257C01%257Celofek%2540microsoft.com%257Cf97c0b19291f44023bd508d73c2ef69c%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637044044708703675%26amp%3Bsdata%3DF6FOl%252BuNKEMpd2lx4v6hkAvBFYDYuJyM2LwSfpusFYk%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure-advanced-threat-protection%2Fatp-privacy-compliance%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fwww.microsoft.com%252Fen-us%252Flicensing%252Fproduct-licensing%252Fproducts%26amp%3Bdata%3D02%257C01%257Celofek%2540microsoft.com%257Cf97c0b19291f44023bd508d73c2ef69c%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637044044708703675%26amp%3Bsdata%3DzmU3ugc%252FKMYY5sv10EWV%252BDEyP7S8KgFxpu9mbVCMgzM%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fen-us%2Flicensing%2Fproduct-licensing%2Fproducts%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-896371%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20ATP%3A%20Which%20data%20is%20transferred%20to%20the%20cloud%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-896371%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106935%22%20target%3D%22_blank%22%3E%40Eli%20Ofek%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20your%20reply.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3EAre%20passwords%20or%20hashes%20also%20transferred%20to%20Azure%20ATP%3F%3CBR%20%2F%3EI%20couldn't%20find%20any%20information%20about%20this.%3CBR%20%2F%3E%3CBR%20%2F%3EBest%20Regards%2C%3CBR%20%2F%3ERalf%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-905088%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20ATP%3A%20Which%20data%20is%20transferred%20to%20the%20cloud%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-905088%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F410791%22%20target%3D%22_blank%22%3E%40Ralfxyz%3C%2FA%3E%26nbsp%3B%2C%20no%2C%20we%20do%20not%20sync%20passwords%20or%20hashes%20of%20AD%20entities.%3C%2FP%3E%0A%3CP%3EThe%20only%20passwords%20we%20keep%20are%20for%20the%20read%20only%20account%2Faccounts%20you%20supply%20in%20the%20portal%20configuration%20page%2C%20so%20we%20can%20connect%20to%20AD%20to%20read%20info%20etc.%3C%2FP%3E%0A%3CP%3EThose%20passwords%20are%20of%20course%20kept%20secure%2C%20yet%20we%20still%20recommend%20to%20use%20read%20only%20low%20privileged%20accounts%20for%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

I'm looking for information about which personal data is transferred to the cloud.
I need the privacy relevant information for certifications according to TISAX or ISO 27001 and the European GDPR.

For example, which fields of an AD object (username, address...) transferred?

Is there more detailed information than this?
https://docs.microsoft.com/de-de/azure-advanced-threat-protection/atp-technical-faq

Thank you very much,

Best Regards,
Ralf

3 Replies
Highlighted

@Eli Ofek 

Thanks for your reply.

Are passwords or hashes also transferred to Azure ATP?
I couldn't find any information about this.

Best Regards,
Ralf

Highlighted
Best Response confirmed by Ralfxyz (New Contributor)
Solution

@Ralfxyz , no, we do not sync passwords or hashes of AD entities.

The only passwords we keep are for the read only account/accounts you supply in the portal configuration page, so we can connect to AD to read info etc.

Those passwords are of course kept secure, yet we still recommend to use read only low privileged accounts for this.