Office 365 Data Protection

Multiple technologies help to protect data stored in Office 365 that an organization might not be aware of. Different technologies protect against different threat vectors.

All the technologies shown protect data at rest, and in certain cases that data remains protected if moved.

Additional technologies like Transport Layer Security (TLS) are used purely to protect data in transit—whether that is between Microsoft data centers or a Microsoft data center and a user of Office 365 services.

Note that customers who license Azure Information Protection (AIP, an extension of Azure Rights Management) can also implement bring your own key (BYOK), where the keys will be managed in a similar manner to Customer Key.

Encryption Technology	Key Management	Threat	Value of Technology
BitLocker	Microsoft	Disks used with Office 365 services servers are compromised or stolen.	Protects the data while stored on disks, even if the disk is compromised.
Service