Microsoft Cloud service processing queries: FOI release

Information requested

Any information, documentation, contract clause change or emails, etc. that you have received in the past two years which identify any countries where Microsoft can or actually do process any data you have uploaded to the following services:

1 - Any service operated by or on the Microsoft Azure cloud platform by any of your processors or contracted service providers (including a direct contract with Microsoft)

2 - Any Microsoft M365 service

Response

Any service operated by or on the Microsoft Azure cloud platform by any of your processors or contracted service providers (including a direct contract with Microsoft)

Disclosure Scotland have a Finance system provided and managed by an external supplier as a SaaS (Software as a Service) system. This is provisioned on the Microsoft Azure cloud platform using only UK Based infrastructure located in two different data centres.

Any Microsoft M365 service

Disclosure Scotland make use of the SCOTS Network as administered by iTECS on behalf of the Scottish Government. The answer regarding data storage, including M365, is provided in their FOI response. Ref: 202500458892 as issued on 16th April 2025.

About FOI

The Scottish Government is committed to publishing all information released in response to Freedom of Information requests. View all FOI responses at https://www.gov.scot/foi-responses.