Demystifying Office 365 Data Sovereignty

Clients can choose which region their data may reside in, and at no point will data in that region be transferred to another region (such as America or APAC and visa versa).

The only time data will go to America are under the following circumstances:

• The organisation asks Microsoft to store the data in those locations (this is not by default)
• If a complete sub-region DC (Dublin) failure occurred the organisation will be given 2 option:
a. Leave data in the remaining sub regional DC (i.e. Amsterdam) OR
b. The organisation makes the decision and tells Microsoft to replicate data to a US region.

Please make this clear in any meetings you have with clients, if they raise this question.

Microsoft articles here:

Office 365 allows organisation to explicitly say which regions

http://technet.microsoft.com/en-us/library/dn741250.aspx

and

http://office.microsoft.com/en-GB/business/office-365-trust-center-top-10-trust-tenets-cloud-security-and-privacy-FX104029824.aspx#securityAndPrivacy