This notice provides an update to the Microsoft Online Services Subprocessors List.
Microsoft 365 Message Center ID: MC1470426
Published: 11 Sept 2026
Expires: 30 Nov 2026
Last updated: 12 Sept 2026
Tags: Microsoft 365 suite, GDPR, Admin impact
Microsoft may engage non-Microsoft organizations to help provide Online Services. A limited number of these organizations may process customer or personal data, only to deliver the services Microsoft has retained them to provide; they are prohibited from using your data for any other purpose. In accordance with GDPR, we disclose these subprocessors to you in advance of their first engagement and provide notification of any changes over time.
You may locate Microsoft’s disclosure of Online Services Subprocessors in the Microsoft Trust Center: https://www.microsoft.com/en-us/trust-center/privacy/data-access. Please see the “Summary of changes since the last disclosure” for additions or replacements of subprocessors.
You can also subscribe to receive notification of updates via My Library option on the Service Trust Portal (https://servicetrust.microsoft.com/) by navigating to All Documents/ Privacy and Data Protection / select the Online Services Subprocessor List / More Options / “Save to Library”.
Global Administrators may also designate a Message Center Privacy Reader Role who will automatically receive this notification within Message Center.