Examples of Core Online Services in a sentence
Access to the Customer Data that Microsoft defines as Core Online Services is audited following the strict controls of SOC-2.
When Intune is part of the Core Online Services, as part of Azure, Microsoft defines the service as follows: “The cloud service portion of Microsoft Intune such as the Microsoft Intune Add-on Product or a management service provided by Microsoft Intune such as Mobile Device Management for Office 365."45 With this definition, Microsoft excludes data processing by locally installed software such as the Company Portal App.
Microsoft has implemented and will maintain for Customer Data in the Core Online Services the following security measures, which, in conjunction with the security commitments in the OST (including the GDPR Terms), are Microsoft’s only responsibility with respect to the security of that data.
As explained in section2.4 of this report Giphy and Optimizely are not mentioned on the exhaustive list of 138 Microsoft, Use preferences to manage privacy controls for Office on iOS devices, 19 October 2019, URL: https://docs.microsoft.com/en-gb/deployoffice/privacy/ios-privacy-preferences subprocessors that Microsoft engages for the Core Online Services.
All customer data, for Core Online Services (Office 365 included), are stored within the EU/EEA at rest.The only instance where access is granted to Microsoft, from outside of the EU/EEA to any personal data is in instances where assistance is required for technical support.
Appendix A of the OST version February 2019 contains the OST Core Online Services, and explains that Endpoint Detection & Response, Automatic Investigation & Remediation and Secure Score are included.
For Core Online Services and Professional Services, Microsoft maintains Access Control mechanisms described in the table entitled “Security Measures” in Appendix A of it DPA.
All transfers of Customer Data out of the European Union, European Economic Area, and Switzerland by the Core Online Services shall be governed by the Standard Contractual Clauses in Attachment 3, unless the Customer has opted out of those clauses.
As explained in section2.4 of this report Giphy and Optimizely are not mentioned on the exhaustive list of subprocessors that Microsoft engages for the Core Online Services.
Any subcontractors to which Microsoft transfers Customer Data, Support Data, or Personal Data will have entered into written agreements with Microsoft that are no less protective than the Data Protection Terms of the Contract.All third-party sub processors with which Customer Data from Microsoft's Core Online Services is shared are included in the Online Services Subcontractor list.