# Azure Core Tenents

<figure><img src="https://2332860236-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fq6mjlFfyDOi3mV0lemKE%2Fuploads%2F0DPlBlRT3sXL3iVYrvzt%2Fimage.png?alt=media&#x26;token=f50da9fe-4529-44e1-93ec-ba1100c73575" alt=""><figcaption></figcaption></figure>

<details>

<summary>Microsoft Privacy Statement</summary>

🔹 Defines how Microsoft collects, processes, and uses data across Azure services and hardware.\
🔹 Ensures **transparency** in handling personal and enterprise data.\
🔹 Covers **data collection**, **purpose of use**, and **data retention policies**.

</details>

<details>

<summary>Online Services Terms (OST)</summary>

🔹 Defines the terms of use for Microsoft’s **cloud-based services** (e.g., Azure, Microsoft 365).\
🔹 Essential for **legal teams** to review compliance obligations before adoption.\
🔹 Ensures businesses understand Microsoft’s **responsibilities and liabilities**.

</details>

<details>

<summary>Data Protection Amendment (DPA)</summary>

🔹 Provides details on **how Microsoft protects customer data** in Azure.\
🔹 Covers **encryption, access controls, and security measures** for safeguarding data.\
🔹 Ensures compliance with **GDPR, HIPAA, ISO 27001, and other standards**.

</details>

<details>

<summary>Microsoft Trust Center</summary>

🔹 **Centralized dashboard** for all **security, privacy, and compliance policies** related to Azure.\
🔹 Offers **guidance, certifications, and best practices** for secure cloud adoption.\
🔹 Provides insights into **threat protection, incident response, and governance**.

</details>

<details>

<summary>Azure Compliance Documentation</summary>

🔹 Contains **Azure-specific compliance** information.\
🔹 Covers industry and regional regulations **applicable to Azure services**.\
🔹 Ensures organizations can meet **security frameworks like ISO 27001, PCI-DSS, and FedRAMP**.

📌 _Note:_ Other compliance frameworks apply across multiple cloud providers, but **Azure Compliance Documents focus only on Azure-specific regulations**.

</details>

<details>

<summary>Azure Sovereign Regions</summary>

🔹 **Designed for specific government and regional compliance needs**.\
🔹 Operated separately from **public Azure regions** to meet data sovereignty requirements.

#### **Examples of Azure Sovereign Cloud Offerings**:

✅ **Azure US Government** – Designed for **US federal, state, and local agencies**.\
✅ **Azure China** – Operated by **21Vianet** to comply with **Chinese regulations**.

</details>

