Skip to main content
Skip to main content
Microsoft 365

Announcing the enhanced Office 365 SOC audit reports with new trust principles

Office 365 customers want assurance that effective controls are in place to safeguard their data. We have enhanced our Service Organization Controls (SOC) audit reports with two new trust principles, Processing Integrity and Confidentiality. These build on the established Security and Availability trust principles.

The Office 365 SOC reports are designed to provide customers with transparency into the design, implementation and operational effectiveness of security and compliance controls, as well as results of control tests as noted by our independent third party auditors. Insights from these reports help you evaluate how Office 365 maintains compliance with your regulatory requirements and also helps you manage the move to Office 365.

Based on customer feedback we also added controls and test results around the following areas:

  • Data transmission and encryption—You are able to review controls that are implemented to encrypt data transmission between Microsoft employees and Office 365 datacenters, between Office 365 clients and Microsoft datacenters, between multiple Microsoft datacenters, as well as encryption at rest within Microsoft datacenters.
  • Security development lifecycle—We detailed additional controls around how Office 365 adheres to secure development best practices, such as code reviews and risk assessments.
  • Data replication and data backup—We enhanced our testing to demonstrate effectiveness of resiliency testing capability that covers a full datacenter outage.

You can readily access this information directly from the Office 365 Service Trust Portal (STP) when you authenticate using your Office 365 credentials. To access STP, ask your Office 365 company administrator to sign in at the Service Trust Portal. Once your company administrator signs in for the first time, they can provide STP access to other users in your organization. If you are evaluating Office 365, you can use your Office 365 trial credentials to access STP.

If you have a comment or question on this post or need the detailed onboarding guide to STP, email us at We look forward to seeing you on STP soon!

—Sarah McCoy and Om Vaiti, senior program managers for the Office 365 Trust Engineering team

You may also like these articles

Image for: Retail employee with mask reviewing inventory for a curbside pickup order in Excel on OneDrive.

3 ways retailers can shape the new normal with their frontline workforce

People are at the heart of every organization’s success. The pandemic has brought into sharp focus just how truly essential the frontline retail workforce is to our lives and global economy. Learn how retailers can empower their frontline workforce with Microsoft Teams exceed customer expectations, make products and processes better, and create connections across the entire organization.

Image for: The Starbucks app in Microsoft Teams—a new way to show appreciation for your colleagues this holiday season and beyond

The Starbucks app in Microsoft Teams—a new way to show appreciation for your colleagues this holiday season and beyond

The new Starbucks app makes it easy to treat your colleagues to coffee by sending a Starbucks eGift within Microsoft Teams this holiday season and beyond, plus new backgrounds from Starbucks to add holiday cheer to your meetings.

Image for: Two female developers collaborating while working remotely. One developer has personalized her laptop with stickers.

4 ways Microsoft 365 is improving the experience for Mac users

Microsoft 365 native app support for Apple Silicon Macs.