Governance and Compliance in Streams

[PowerBear45]

Hi everyone, does anyone have any info on Streams compliance?  I would love to be able to easily implement a retention policy for Stream content- but I currently don't see any info on how to do this or anything on the roadmap.  Has anyone else found anything useful?

[#2 · Accepted solution]

Hi @PowerBear45

Sure. As of February 2018, Microsoft Stream is classified as a tier C service within the Office 365 Compliance Framework as outlined here - https://docs.microsoft.com/en-us/stream/faq. Categories C and D that have industry leading compliance commitments are enabled by default. Stream is compliant for ISO27001, 27018, SOC 1/2, HIPAA and the EU Model Clauses amongst other standards.

In terms of retention, Stream doesn't currently have this and there are uservoices open for it here so I would recommend you vote on these

Office 365 Uservoice
https://office365.uservoice.com/forums/273493-office-365-admin/suggestions/36251461-microsoft-stream...

Stream Uservoice
https://techcommunity.microsoft.com/t5/Microsoft-Stream-Ideas/Video-Archival-and-Retention/idi-p/889...

The Stream uservoice is the official one and any Microsoft Stream PM will direct you there.

Whilst retention hasn't been picked up yet, there is a growing call for it - and they are actively working on restoring deleted videos which is almost a prelude to it.

Hope that answers your questions

Best, Chris

[#3]

@Christopher Hoard Thank you so much!  I am hoping retention policies are enabled soon- it would be great to be able to delete videos after a certain timeframe...no company needs that data sitting out there LOL.  Thanks again for the awesome answer!

[#4]

@PowerBear45 In the case of government tenants (GCC), we would need to retain/archive most materials for FOIA and other compliance initiatives/requirements. Any and all info related to Stream compliance is MUCH appreciated!