Compliance
Where your Microsoft 365 data actually lives
Tenant region, Advanced Data Residency, and the services that process outside your chosen geography regardless. The answer is more nuanced than the sales conversation.
Three different questions get confused
Where data is stored at rest, where it is processed, and who can access it for support. Organisations ask the first, are answered on the first, and have a compliance obligation that depends on all three.
Microsoft publishes commitments for each, and they differ by service and by region. Treating data residency as one yes or no answer is what produces surprises during a customer security review.
What to establish, in order
Your tenant's default geography
Set when the tenant was created and difficult to change afterwards. Check it rather than assuming, particularly on tenants created by a partner.
Which core workloads are committed to that geography
Exchange, SharePoint, OneDrive and Teams have residency commitments. Not every service does, and newer services frequently do not at launch.
Whether you need Advanced Data Residency
An add-on that extends commitments to more services and workloads. Whether it is necessary depends on your regulator, not on your preference.
What happens during support
Support engineers may access data from outside your region under defined controls. Customer Lockbox changes who approves that access. If your obligation is about access rather than storage, this is the control that matters.
The verdict
Establish the three answers in writing before a customer asks
Data residency questions arrive in security questionnaires with a deadline attached, and reconstructing the answer under time pressure is how inaccurate answers get sent.
Do not assume a European tenant means all processing stays in Europe. Check per service, and check again when you adopt a new one.
Disclosure. Some links on this site are affiliate links. Scoring weights are published before any programme is joined, and commission is never a ranking input. Full policy, and the method behind this guide.