Microsoft Azure, Microsoft 365 and Power BI operated by 21Vianet are separate instances of public cloud services located in mainland China and independently operated and sold by Shanghai Blue Cloud Technology Co., Ltd. ("21Vianet"), an affiliate of Beijing 21Vianet Broadband Data Center Co., Ltd. The services are based on the same Azure, Microsoft 365 and Power BI technology that powers Microsoft's global cloud service with the same service levels to customers.

As a customer of Microsoft Azure, Microsoft 365 and Power BI operated by 21Vianet, you get:

• A cloud service hosted in datacenters exclusively in mainland China and operated independently by 21Vianet, a leading Chinese Internet datacenter provider.
• Powered by world-class technology built on Microsoft's extensive experience with online services and used by enterprise customers around the world.

Microsoft has licensed Azure, Microsoft 365 and Power BI technology to 21Vianet but 21Vianet is responsible for operating these services in mainland China.

It is ultimately your obligation to comply with your regulatory requirements. We provide you with information to help you do so. We commit to compliance with data protection and privacy laws generally applicable to IT service providers. If you are subject to industry or jurisdictional requirements, you will need to make your own assessment of your ability to comply. Customers in many industries have found they can use Azure, Microsoft 365 and Power BI in a manner that complies with applicable regulations, provided they utilize the services in a manner appropriate to their particular circumstances.

21Vianet will use the Customer Data you store in Azure, Microsoft 365 and Power BI only to provide you with the services you have subscribed for. 21Vianet does not mine Customer Data for advertising or share Customer Data with advertiser-supported services. We do not scan your emails or documents in Microsoft 365 services for advertising purposes.

It's your Customer Data, and you retain the rights to it. 21Vianet will not use Customer Data or derive information from it for any advertising or similar commercial purposes.

21Vianet will only use Customer Data for purposes compatible with providing the services, such purposes can includes using Customer Data for the following:

• Troubleshooting aimed at preventing, detecting and repairing problems affecting the operation of services.
• Ongoing improvement of features such as those that involve the detection of, and protection against, emerging and evolving threats to the services or Customer Data (such as malware or spam).
• Providing personalized or inference-based service features.

Customer Data will be stored only in data centers located in mainland China. In limited circumstances, 21Vianet may authorize one of its affiliates, suppliers or subcontractors located outside China to access Customer Data when necessary to troubleshoot a customer support incident or address a technical issue. We carefully monitor such access and terminate the access when the issue is resolved.

21Vianet may hire other companies to provide limited services on its behalf (such as customer support). 21Vianet will only disclose Customer Data to subcontractors so they can deliver the services we have retained them to provide. Subcontractors are prohibited from using Customer Data for any other purpose, and they are required to maintain the confidentiality of your information. Subcontractors that work in facilities or on equipment controlled by 21Vianet must follow our privacy standards. All other subcontractors must follow privacy standards equivalent to our own.

No. Microsoft does not have access to Customer Data except in limited circumstances where 21Vianet requires technical assistance from Microsoft to troubleshoot a customer support incident or address a technical issue. 21Vianet will grant such access only for the duration necessary to resolve the issue. 21Vianet carefully monitors the access given and terminates the access when the issue is resolved.

The usage data in Microsoft 365 is used to provide the services. Usage data could refer to any number of data points related to Microsoft 365. “Usage data” could refer to the average number of emails an end user receives each day, the number of licenses in a customer’s subscription, or the amount of electricity 21Vianet needs to power Microsoft 365.

We understand that its customers are most concerned about how 21Vianet treats personally identifiable information about end users’ interactions with the services. Such data may be used for day-to-day operations and maintenance of the services (as described above) and for services communications to administrators, including emails about end users’ use or access to the services. For example, an administrator may receive a notification from 21Vianet that an end user is near usage or storage limits.

Metadata in Azure includes configuration and technical settings and information. For example, it includes the disk configuration settings for an Azure Virtual Machine or database design for an Azure SQL Database.

Access Control Data in Azure is used to manage access to other types of data or functions within Azure. It includes passwords, security certificates, and other authentication-related data.

No. Microsoft Azure, Microsoft 365 and Power BI operated by 21Vianet in mainland China is physically and logically separate from the services operated by Microsoft in the rest of the world. Just as Microsoft does not have access to Customer Data in 21Vianet's services (except to assist 21Vianet as detailed above), 21Vianet does not have access to Customer Data in Microsoft's services outside mainland China. For clarity, the data center in Hong Kong is part of the global services operated by Microsoft, not the 21Vianet services operated in mainland China.

21Vianet believes that its customers should control their own information whether stored on their premises or in a cloud service. Accordingly, we will not disclose Customer Data to a third party (excluding its suppliers and subcontractors) except as you direct or as required by applicable law and regulations. If compelled to disclose Customer Data to a third party, we will use commercially reasonable efforts to promptly notify you and provide a copy of the demand, unless legally prohibited.

No. Our independent audits and certifications are shared with customers in lieu of individual customer audits. These certifications and attestations accurately represent how we obtain and meet our security and compliance objectives, and serve as a practical mechanism to validate our promises for all customers. Allowing potentially thousands of customers to audit our services would not be a scalable practice and might compromise security and privacy. Our independent third-party validation program includes audits that are conducted on an annual basis to provide verification of security controls.

No. 21Vianet is not able to agree to custom audit obligations for individual customers. The costs and potential conflicts between varying obligations make it impractical to customize audits.

We host your Customer Data in datacenter(s) located in the People's Republic of China, excluding Hong Kong, Taiwan, and Macau. The services also share other important aspects of data storage, such as who can access your Customer Data, and what we do with that information internally. 21Vianet’s position on access to your Customer Data is:

• The services give you access to your Customer Data.
• Access to Customer Data is strictly controlled and logged, and sample audits are performed by us to attest that access is only for appropriate business purposes.

We offer at least 99.9% uptime via a financially backed service level agreement. If a customer experiences monthly uptime that is less than 99.9%, we will compensate that customer through service credits. For more information about how Azure and Microsoft 365 provide guarantee for customers about the above questions, you can visit Service Level Agreement for Microsoft Azure operated by 21Vianet page, and Service Level Agreement for Microsoft 365 operated by 21Vianet page to get more details and evidence.

The Microsoft Azure Operated by 21Vianet Privacy Statement describes the specific privacy policy and practices that govern customers' use of Microsoft Azure operated by 21Vianet.

The Microsoft 365 operated by 21Vianet Privacy Statement describes the specific privacy policy and practices that govern customers' use of Microsoft 365 operated by 21Vianet.