What this means is that Microsoft does not have direct access to customer data. The data can only be accessed with the permission of the customer or the data trustee. Microsoft’s commercial cloud services in these new data centers strictly adhere to Germany’s data handling regulations, and give customers additional choices about how and where data is processed. Clearly Microsoft wants to meet Germany’s very high standards for data protection in the cloud, and it complies with BSI IT Baseline Protection.

Rejoice, businesses in Germany and EU and EFTA! You have much less to worry about. The data that you have finally decided to move up to the cloud is very well-protected. Microsoft wouldn’t have it any other way.