Big Brother is watching you

Where is the data stored?

The most common Azure services such as computers (virtual machines), databases and web services are available in the Microsoft Cloud Switzerland. However, not all services are currently available. See here which services can already be used in Azure.

With Office 365, most data is stored in the Microsoft Data Centers Switzerland. However, some other services of Microsoft Cloud Switzerland such as Planner, Yammer or Forms still store your data in the data centers in Ireland and the Netherlands.

Storage location of the data of the various services available in the Swiss cloud from Microsoft. Source: https://products.office.com/en-us/where-is-your-data-located?geo=UnitedStates#UnitedStates / As of 31.01.2020

What about data protection?

Microsoft takes privacy seriously and tries to adhere to its privacy policy at all times. However, this is extremely demanding, as Microsoft has found out several times in the past.

Microsoft itself systematically collects data on the individual use of Word, Excel, PowerPoint and Outlook. Which telemetry data Microsoft collects in the background is opaque to the user, and the data stream is also encrypted. There is also no way for the user to switch off the data collection.

This is aggravated by the fact that Microsoft, as a US company, is automatically subject to the Cloud Act of the US government.

What is the Cloud Act?

The Cloud Act is a US law that gives the American authorities unrestricted access to data from American IT cloud providers. It does not matter where the data is effectively stored. In the event of criminal prosecution, the authorities have a free hand and do not even have to notify the data owners. Microsoft wants to defend itself against the Cloud Act and it will be seen in the future whether this will succeed.

Furthermore, some passages of the Cloud Act violate current Swiss law (e.g. Art. 6 DSG). Thus, a US Cloud Provider is in a dilemma and may violate either Swiss law (DSG) or US law (Cloud Act) or even both together.

What does this mean for you as a cloud user? Because of the Cloud Act, you cannot be sure whether, when and to what extent your data or your customers' data will be read by foreign authorities. This can be particularly problematic with sensitive data, which has high data protection requirements. This applies in particular to companies in the financial sector, legal companies, companies in the healthcare sector and government agencies. Furthermore, the DSGVO conformity of such cloud services is also questionable.

Can I take advantage of a cloud solution without falling under the Cloud Act?

Yes, for example with the Modern Workplace of MTF Swiss Cloud. The service is offered by MTF Swiss Cloud, a completely independent Swiss company with its own Swiss data centres. If you still want to use other public cloud solutions, the MTF Swiss Cloud is fully compatible with cloud solutions from Microsoft, Google and Amazon.

The Modern Workplace of MTF Swiss Cloud

The MTF Swiss Cloud offers you a fully integrated, digital workplace so that you and your team can work securely and efficiently on the road. All data can be accessed at any time and from anywhere. Open communication and innovative teamwork significantly increase flexibility and productivity. And all this with the same security and performance as in the office.

• Public Cloud and Private Cloud perfectly combined
• Full integration of all Office 365 applications in the private cloud
• Cloud Desktop, the perfect solution for your digital workplace
• Maximum flexible, highly secure Swiss private cloud