With all the breaches of cloud identity services over the last few years, there are a lot of questions about how we secure customer data. So today’s blog is a dive into the details of customer data is protected in Azure AD.
Let’s start with our datacenters. First, all of Microsoft’s datacenter personnel must pass a background check. All access to our datacenters is strictly regulated and every entry and exit are monitored. Within these datacenters, the critical Azure AD services that store customer data are located in special locked racks—their physical access is highly restricted and camera-monitored 24 hours a day. Furthermore, if one of these servers is decommissioned, all disks are logically and physically destroyed to avoid data leakage.
Read more about it in the Enterprise Mobility & Security blog.