# Microsoft

Microsoft declares [53 subprocessors](https://thirdpartyindex.com/vendors/microsoft#subprocessors), plus 31 of its own affiliates, in [its subprocessor list](https://api.servicetrust.microsoft.com/api/v2/downloadDocuments/115f1cb5-7f7b-4a5e-838d-df6d03c84dda/24924773-fe0a-424d-913e-c17204d4ebf8), which we last checked on 2026-11-06 ([evidence](https://thirdpartyindex.com/evidence/3196)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [OpenAI](https://thirdpartyindex.com/vendors/openai) and [Anthropic](https://thirdpartyindex.com/vendors/anthropic). Our recent checks could not read the list; these entries are as of 2026-11-06. [1055 tracked vendors](https://thirdpartyindex.com/vendors/microsoft#used-by) name Microsoft as a subprocessor, including [OpenAI](https://thirdpartyindex.com/vendors/openai), [Stripe](https://thirdpartyindex.com/vendors/stripe) and [Anthropic](https://thirdpartyindex.com/vendors/anthropic).

Microsoft (microsoft.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/microsoft
- Documents last verified: 2026-11-11
- Category: cloud-infrastructure
- Transparency rating: 68/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 3/8 (partial); Purposes 2/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Companies part of it: [LinkedIn](https://thirdpartyindex.com/vendors/linkedin), [Microsoft Advertising](https://thirdpartyindex.com/vendors/microsoft-advertising), [Microsoft Clarity](https://thirdpartyindex.com/vendors/microsoft-clarity), [Windows 365](https://thirdpartyindex.com/vendors/windows-365), [Xandr](https://thirdpartyindex.com/vendors/xandr)
- Supply chain: relies on 19 tracked vendors directly, 109 within two hops, 342 within three; 1055 tracked vendors rely on it directly, 2725 within two hops, 2822 within three
- Cite as: Microsoft, Third Party Index, https://thirdpartyindex.com/vendors/microsoft (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.microsoft.com/en-us/trust-center | 2026-11-11 | 2026-11-11 |
| Subprocessor list (currently unreachable) | https://api.servicetrust.microsoft.com/api/v2/downloadDocuments/115f1cb5-7f7b-4a5e-838d-df6d03c84dda/24924773-fe0a-424d-913e-c17204d4ebf8 | 2026-11-06 | 2026-09-22 |
| Privacy policy | https://www.microsoft.com/en-us/privacy | 2026-11-11 | 2026-11-11 |
| Security page | https://www.microsoft.com/en-us/security | 2026-11-11 | 2026-11-11 |
| security.txt | https://www.microsoft.com/.well-known/security.txt | 2026-11-11 | 2026-11-07 |

## Subprocessors (53)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| 3288212 Nova Scotia Limited | — | Canada | 2026-09-22 |
| [Accenture International Limited](https://thirdpartyindex.com/vendors/accenture.md) | Hardware and software installation and operations | In accordance with the customer-specified regionality of SAP HANA on Azure (Large Instances) | 2026-09-22 |
| [Akamai Technologies, Inc.](https://thirdpartyindex.com/vendors/akamai.md) | Operating Content Delivery Network (CDN) infrastructure to efficiently deliver content; Network | Worldwide | 2026-09-22 |
| Akvelon, Inc. | — | — | 2026-09-22 |
| Allegis Group Holdings, Inc. | — | — | 2026-09-22 |
| Allyis, Inc | — | — | 2026-09-22 |
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Multi-Cloud Scanning Connectors for Microsoft Purview Acquisitions that run on AWS are eventually moved to be hosted on Microsoft Azure | Microsoft Purview (processing location varies; will depend on location of customers’ AWS storage account) | 2026-09-22 |
| [Anthropic, PBC](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | AI model provider | United States | 2026-09-22 |
| Apex Systems, LLC | — | — | 2026-09-22 |
| Aptly Technology Corporation | — | — | 2026-09-22 |
| [Arkose Labs, Inc.](https://thirdpartyindex.com/vendors/arkose-labs.md) | CAPTCHA based activity for Fraud + Abuse Prevention | Australia; Ireland; Singapore; United States | 2026-10-10 |
| Beyondsoft Consulting, Inc. | — | — | 2026-09-22 |
| Blueprint Technologies | — | — | 2026-09-22 |
| Capgemini America, Inc. | — | — | 2026-09-22 |
| Capgemini, España, S.L. | — | — | 2026-10-01 |
| Centific Technologies, Inc. | — | — | 2026-10-01 |
| [Cognizant Technology Solutions](https://thirdpartyindex.com/vendors/cognizant.md) | — | — | 2026-10-01 |
| CSI Interfusion, Inc. | — | — | 2026-10-01 |
| [Databricks, Inc.](https://thirdpartyindex.com/vendors/databricks.md) | Traffic Management Deploying, operating, and troubleshooting Azure Databricks | Canada; France; Germany; Netherlands; United Kingdom; United States | 2026-10-10 |
| Dxc Technology Services LLC | — | — | 2026-10-01 |
| Ernst & Young, LLP | — | — | 2026-10-01 |
| Experis | — | — | 2026-10-01 |
| [Fireworks AI, Inc.](https://thirdpartyindex.com/vendors/fireworks.md) (AI model provider: Fireworks) | Model hosting, inference, and training platform | Canada; Germany; Iceland; Japan; United States | 2026-10-10 |
| [GitHub, Inc.](https://thirdpartyindex.com/vendors/github.md) | AI model provider | United States | 2026-09-22 |
| [Hcl America, Inc.](https://thirdpartyindex.com/vendors/hcl-america.md) | — | — | 2026-10-01 |
| Hi-Tech Talents LLC | — | — | 2026-10-01 |
| [Infosys Limited](https://thirdpartyindex.com/vendors/infosys.md) | — | — | 2026-10-01 |
| Insight Global, Inc. | — | — | 2026-10-01 |
| Latentview Analytics Corporation | — | — | 2026-10-01 |
| Launch Consulting | — | — | 2026-10-01 |
| LTIMindtree Limited (Formerly known as Mindtree Limited) | — | — | 2026-10-01 |
| Maq LLC | — | — | 2026-09-22 |
| Matchpoint It Ltd. | — | — | 2026-09-22 |
| MSFT MCIO Limited | — | United Kingdom | 2026-09-22 |
| Mu Sigma Business Solutions, LLC | — | — | 2026-09-22 |
| [NetApp, Inc.](https://thirdpartyindex.com/vendors/netapp.md) | Deploying, operating, and troubleshooting Azure NetApp files | In accordance with the customer-specified regionality of Azure NetApp files | 2026-09-22 |
| [OpenAI OpCo, LLC](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI model provider | Worldwide | 2026-09-22 |
| PT Microsoft Operations Indonesia | — | Indonesia | 2026-09-22 |
| [Red Hat, Inc.](https://thirdpartyindex.com/vendors/red-hat.md) | Deploying, operating, and troubleshooting Azure Red Hat OpenShift | Australia; Belgium; Brazil; Canada; Czech Republic; France; Germany; India; Ireland; Israel; Poland; Spain; United States | 2026-10-10 |
| [Redis, Inc.](https://thirdpartyindex.com/vendors/redis.md) | Deploying, operating, and troubleshooting Azure Managed Redis | Bulgaria; Canada; France; India; Ireland; Israel; Netherlands; Singapore; Spain; United Kingdom; United States | 2026-10-10 |
| Scuba Analytics, Inc. | Customer experience (CX) analytics | United States | 2026-09-22 |
| Shanghai Wicresoft Co, Ltd. | — | — | 2026-09-22 |
| [Snowflake, Inc.](https://thirdpartyindex.com/vendors/snowflake.md) | Data warehousing | United States | 2026-09-22 |
| Sonata Software Limited | — | — | 2026-09-22 |
| [SpaceXAI, LLC](https://thirdpartyindex.com/vendors/spacexai.md) (AI model provider: xAI) | AI model provider | Belgium, India, Japan, Saudi Arabia, South Korea, Switzerland, United Arab Emirate, United States | 2026-09-22 |
| [Tata Consultancy Services Ltd.](https://thirdpartyindex.com/vendors/tata-consultancy-services.md) | — | — | 2026-09-22 |
| Tek Experts | — | — | 2026-09-22 |
| Teleion Consulting, LLC | — | — | 2026-09-22 |
| Telus International Ai, Inc. | — | — | 2026-09-22 |
| [TomTom North America, Inc.](https://thirdpartyindex.com/vendors/tomtom.md) | Web services used by the Azure Maps APIs | Germany; India; Ireland; South Korea; Netherlands; Poland; United States | 2026-10-10 |
| Valorem, LLC | — | — | 2026-09-22 |
| Wicloud Corporation | — | — | 2026-09-22 |
| Wipro Limited | — | — | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/3196)). CSV: https://thirdpartyindex.com/vendors/microsoft/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 4. All vendors that list one: https://thirdpartyindex.com/ai

### Its own affiliates (31)

- Microsoft (China) Company Limited (China; Finland; United States)
- Microsoft 1968 South Africa (Pty.) Ltd. (South Africa)
- Microsoft 1985 France S.à r.l. (France)
- Microsoft 2354 Belgium B.V. (Belgium)
- Microsoft 272945 Brasil LTDA (Brazil)
- Microsoft 3366 Denmark ApS (Denmark)
- Microsoft 4772 Israel Ltd. (Israel)
- Microsoft 4825 Italy S.R.L. (Italy)
- Microsoft 5673 Korea Yuhan Chaegim Hoesa (Korea)
- Microsoft 6394 Mexico S. de R.L. de C.V. (Mexico)
- Microsoft 6399 New Zealand Limited (New Zealand)
- Microsoft 7282 Qatar QFZ LLC (Qatar)
- Microsoft 7724 Spain, S.L. (Spain)
- Microsoft Corporation - Abu Dhabi (United Arab Emirates)
- Microsoft Corporation (India) Private Limited (India)
- Microsoft Datacenter (Australia) Pty Limited (Australia; Austria)
- Microsoft Datacenter Chile Limitada (Chile)
- Microsoft Datacenter Holdings (HK) Limited (Hong Kong)
- Microsoft Datacenter Netherlands B.V. (Netherlands)
- Microsoft Datacenter Norway AS (Norway)
- Microsoft Deutschland MCIO GmbH (Germany)
- Microsoft Ireland Operations Limited (Ireland)
- Microsoft Japan Co., Ltd. (Japan)
- Microsoft MCIO Schweiz GmbH (Switzerland)
- Microsoft Operations Pte Ltd (Singapore)
- Microsoft Operations 38224 FZE (United Arab Emirates)
- Microsoft Operations Taiwan Limited (Taiwan)
- Microsoft Payments (Malaysia) Sdn. Bhd. (Malaysia)
- Microsoft Poland Operations Sp.z o.o. (Poland)
- Microsoft RL Unlimited Company (Ireland)
- Microsoft Sweden 1172 AB (Sweden)

## Compliance

As its trust center lists them.

- FedRAMP Marketplace: High · 79 agency authorizations · since May 3, 2019
- FedRAMP Marketplace: High · 61 agency authorizations · since Apr 29, 2020
- FedRAMP Marketplace: Moderate · 91 agency authorizations · since Nov 20, 2014
- FedRAMP Marketplace: High · 5 agency authorizations · since Dec 26, 2024
- FedRAMP Marketplace: High

## Security program

What MICROSOFT CORP's Form 10-K for fiscal 2026, filed Jul 29, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/789019/000119312526323660/0001193125-26-323660-index.htm).

- Led by: Chief Information Security Officer, reporting to the EVP of Cloud + AI
- Board oversight: Board of Directors
- Practices named: Incident response plan, Tabletop exercises, Red team, Bug bounty, Vulnerability management, Threat intelligence, Security training, Zero trust
- Engages outside assessors or consultants
- Reviews its suppliers' security
- Says no cybersecurity incident has materially affected it

## Web Technologies

Microsoft's homepage made 296 requests to 25 domains, and 9 services controlled by another company. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

9 third parties by category: Analytics 4 (Contentsquare, Demandbase, Google Cloud; usually detected as Analytics: Meta); Advertising 3 (reviewed: Index Exchange Inc.; usually detected as Advertising: Magnite, Inc., PubMatic); Marketing automation 1 (usually detected as Marketing automation: Adobe); Customer data platform 1 (reviewed: LiveRamp). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (9)

- Contentsquare: 7 requests to clicktale.net, contentsquare.net; ClickTale, Contentsquare
- Adobe: 6 requests to demdex.net, everesttech.net, omtrdc.net, rum.hlx.page
- Demandbase: 4 requests to company-target.com, demandbase.com; Demandbase 11.8.0
- Meta: 4 requests to facebook.com
- Google Cloud: 2 requests to doubleclick.net, googletagmanager.com; Google Analytics, Google Tag Manager
- Magnite, Inc.: 2 requests to rubiconproject.com, tremorhub.com
- Index Exchange Inc.: 1 request to casalemedia.com
- LiveRamp: 1 request to rlcdn.com
- PubMatic: 1 request to pubmatic.com

### Affiliates (1)

- LinkedIn: 1 request to linkedin.com

### First party (1)

- Microsoft: 267 requests to microsoft.com, clarity.ms, s-microsoft.com, bing.com, b02.azurefd.net, live.com, microsoftonline.com, visualstudio.com; Adobe Audience Manager, Adobe Experience Manager, Adobe Experience Platform Identity Service, Adobe Experience Platform Launch, Adobe Target 2.11.8, Akamai, Akamai Bot Manager, Azure, Azure Front Door, Azure Monitor, HSTS, Hotjar, Java, Microsoft Advertising, Microsoft Clarity, Open Graph, Priority Hints, comScore, core-js 3.6.4, jQuery 3.5.1, lit-element 4.2.2, lit-html 3.3.3

7 tracked companies loaded by the homepage are not in Microsoft's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (1055)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [1000minds](https://thirdpartyindex.com/vendors/1000minds.md): Collaboration, document management & communication; Microsoft 365 office suite, customer communication etc; Platform-as-a-Service cloud provider; Secure applica…
- [1Password](https://thirdpartyindex.com/vendors/1password.md): Cloud storage
- [3CLogic](https://thirdpartyindex.com/vendors/3clogic.md): OpenAI deployed on Azure cloud. OpenAI is a leading LLM developer.
- [3CX](https://thirdpartyindex.com/vendors/3cx.md): Cloud hosting services; Reporting & analytics
- [5CA](https://thirdpartyindex.com/vendors/5ca.md): Microsoft translation service (customer support tickets and messages translation).; Office tools, PowerBI, Common Data Services, Azure, Microsoft security, brow…
- [84codes](https://thirdpartyindex.com/vendors/84codes.md): Data Center
- [8x8](https://thirdpartyindex.com/vendors/8x8.md): CPAAS
- [A-LIGN](https://thirdpartyindex.com/vendors/a-lign.md): Use of Office 365 for email, chat, OneDrive for Business and office suite products; Use of Azure AD for internal policy control for systematic enforcement of Us…
- [Aaru](https://thirdpartyindex.com/vendors/aaru.md): Engineering; LLM inference (Azure OpenAI)
- [Abacum](https://thirdpartyindex.com/vendors/abacum.md): \*Optional subprocessor. Active where AI features form part of the agreed services\*; AI Services
- [Ablebits](https://thirdpartyindex.com/vendors/ablebits.md): We use Microsoft 365 and Azure services in our daily work when processing Personal Data and Support Service Information.; We use Microsoft's OAuth 2.0 service t…
- [Absorb Software](https://thirdpartyindex.com/vendors/absorb-software.md): Absorb uses Azure to host mobile codes and Artificial intelligence functionality. Absorb uses Office 365 including Teams for productivity, meetings, and collabo…
- [Abstract Security](https://thirdpartyindex.com/vendors/abstract-security.md): Hosted Services Provider
- [ACA Group](https://thirdpartyindex.com/vendors/aca-group.md)
- [Acai Travel](https://thirdpartyindex.com/vendors/acai-travel.md)
- [AccountsIQ](https://thirdpartyindex.com/vendors/accountsiq.md): Cloud provider
- [Accruent](https://thirdpartyindex.com/vendors/accruent.md): Business Support; Hosting Provider
- [Acrolinx](https://thirdpartyindex.com/vendors/acrolinx.md): Cloud Services or Software, including cloud infrastructure and a range of generative capabilities for text based on large language models.
- [Act Security](https://thirdpartyindex.com/vendors/act-security.md): Cloud infrastructure and hosting
- [Actionstep](https://thirdpartyindex.com/vendors/actionstep.md): Cloud provider; Provides cloud computing services and infrastructure
- [Acumatica](https://thirdpartyindex.com/vendors/acumatica.md): Cloud infrastructure provider (Infrastructure as a service), including service hosting and data storage
- [Acxiom](https://thirdpartyindex.com/vendors/acxiom.md): Location: USAPurpose: Azure Cloud Environment services
- [Ada Support](https://thirdpartyindex.com/vendors/ada-support.md): Database Hosting; Text-to-Speech for Voice; Automated Speech Recognition (ASR); Artificial intelligence models
- [AddSearch](https://thirdpartyindex.com/vendors/addsearch.md): Cloud provider
- [Adiacent](https://thirdpartyindex.com/vendors/adiacent.md): utilizziamo i servizi di Microsoft Azure per ospitare e proteggere i siti web dei clienti e archiviare i dati relativi ai siti web dei clienti.; usiamo Teams pe…
- [Adobe](https://thirdpartyindex.com/vendors/adobe.md): Microsoft Azure (Azure) provides cloud hosting services for Adobe Cloud Services (Experience Cloud, Creative Cloud, and Document Cloud). Adobe also offers the u…
- [Adyen](https://thirdpartyindex.com/vendors/adyen.md)
- [Affinda](https://thirdpartyindex.com/vendors/affinda.md): Cloud computing services
- [Agilysys](https://thirdpartyindex.com/vendors/agilysys.md)
- [Aha Labs](https://thirdpartyindex.com/vendors/aha-labs.md)
- [AHEAD](https://thirdpartyindex.com/vendors/ahead.md): Cloud and Infrastructure Services
- [Ahrefs](https://thirdpartyindex.com/vendors/ahrefs.md): Productivity and collaboration management; Cloud computing
- [ai.work](https://thirdpartyindex.com/vendors/ai-work.md)
- [Aikido Security](https://thirdpartyindex.com/vendors/aikido-security.md): - Aikido: AI inference - Noon: Mail integration, AI inference
- [AirCall](https://thirdpartyindex.com/vendors/aircall.md): Generation of conversation insights (Call summarisation, Key topics list, Talk ratio etc.) from voice transcriptions.; Provision of inputs for AI Voice Agent
- [Airlock Digital](https://thirdpartyindex.com/vendors/airlock-digital.md): Cloud services, website hosting, and data center hosting
- [Aiven](https://thirdpartyindex.com/vendors/aiven.md)
- [Akamai](https://thirdpartyindex.com/vendors/akamai.md): Microsoft Azure provides cloud computing, data aggregation, storage and security analytics. Microsoft's sub-processors used for Azure services are published her…
- [Akana by Perforce](https://thirdpartyindex.com/vendors/akana-by-perforce.md): Cloud Provider; Delphix (SaaS)
- [Akiflow](https://thirdpartyindex.com/vendors/akiflow.md): Ads services, measurement of active usage and retention drivers
- [Akita](https://thirdpartyindex.com/vendors/akita.md): Citus Data provides Database-as-a-service (DBaaS).
- [Albert Invent](https://thirdpartyindex.com/vendors/albert-invent.md): Communications & Productivity
- [Aleph](https://thirdpartyindex.com/vendors/aleph.md): AI models
- [AlertMedia](https://thirdpartyindex.com/vendors/alertmedia.md): AlertMedia email, and corporate productivity tools
- [Algolia](https://thirdpartyindex.com/vendors/algolia.md)
- [AllCode](https://thirdpartyindex.com/vendors/allcode.md): Cloud infrastructure and platform services
- [Alohi](https://thirdpartyindex.com/vendors/alohi.md): Software services
- [Altana](https://thirdpartyindex.com/vendors/altana.md): Cloud Compute and Data
- [Alteryx](https://thirdpartyindex.com/vendors/alteryx.md): Data hosting provider; Large Language Model
- [Alvaria](https://thirdpartyindex.com/vendors/alvaria.md): Cloud Storage, Analytics
- [Amach](https://thirdpartyindex.com/vendors/amach.md): Productivity, identity
- [Amplitude](https://thirdpartyindex.com/vendors/amplitude.md): Cloud service Provider for the Statsig-branded Amplitude Services
- [Anomali](https://thirdpartyindex.com/vendors/anomali.md): Cloud Service Provider
- [ansrsource](https://thirdpartyindex.com/vendors/ansrsource.md): IT infrastructure; Collaboration & Productivity
- [Ansvar AI](https://thirdpartyindex.com/vendors/ansvar-ai.md)
- [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md): Cloud Infrastructure; Products: All Products
- [Anyscale](https://thirdpartyindex.com/vendors/anyscale.md): Cloud Service Provider
- [Apester](https://thirdpartyindex.com/vendors/apester.md): Analytics Services
- [Apica](https://thirdpartyindex.com/vendors/apica.md): AI search functionality USA; Cloud infrastructure services; Integrations for script repositories USA
- [apiphani](https://thirdpartyindex.com/vendors/apiphani.md): IAM in support of MS365 applications.; Identity & authentication
- [Apolicy](https://thirdpartyindex.com/vendors/apolicy.md): Data Storage; Advanced Language LLM (for content generation)
- [AppDirect](https://thirdpartyindex.com/vendors/appdirect.md)
- [Applied Compute](https://thirdpartyindex.com/vendors/applied-compute.md): Cloud provider
- [Apporto](https://thirdpartyindex.com/vendors/apporto.md): Cloud hosting, productivity, and communication services
- [Apptio](https://thirdpartyindex.com/vendors/apptio.md): Provider of on-demand cloud computing platforms
- [AppViewX](https://thirdpartyindex.com/vendors/appviewx.md): Email communication; virtual meetings
- [APPZEN](https://thirdpartyindex.com/vendors/appzen.md): Cloud infrastructure and hosting services, AI and document understanding services
- [Aprimo](https://thirdpartyindex.com/vendors/aprimo.md): Hosting Provider; Operations; Support; and Enablement of Artificial Intelligence Features (Only applicable where customer purchases certain AI products)
- [Aptean](https://thirdpartyindex.com/vendors/aptean.md): Endpoint Security; Support Service Provider; Hosting Provider; Infrastructure Hosting for products utilising Microsoft Azure; Communication between teams and wi…
- [Archbee](https://thirdpartyindex.com/vendors/archbee.md): IT infrastructure
- [Archil](https://thirdpartyindex.com/vendors/archil.md): Active disk data hosting for private Azure deployments
- [Arctic Wolf](https://thirdpartyindex.com/vendors/arctic-wolf.md): Corporate Data Repository; Data Center and Hosting; Email and other office applications with AI enabled features
- [Arcweave](https://thirdpartyindex.com/vendors/arcweave.md): Arcweave uses Microsoft Corporation (Azure) as a service provider for AI-enabled functionality. Data, privacy, and security for Azure OpenAI Service.
- [Ardoq](https://thirdpartyindex.com/vendors/ardoq.md): Hosting and back-up of the Ardoq Services
- [Aries Systems](https://thirdpartyindex.com/vendors/aries-systems.md)
- [Arkose Labs](https://thirdpartyindex.com/vendors/arkose-labs.md): Productivity, Cloud platform, Security and Management Tools
- [Artera](https://thirdpartyindex.com/vendors/artera.md)
- [Arvato Systems](https://thirdpartyindex.com/vendors/arvato-systems.md): 3rd level manufacturer support; IaaS B-Portal; SaaS Microsoft 365 and Azure Cloud Services; SaaS Power BI
- [AspirePro](https://thirdpartyindex.com/vendors/aspirepro.md): Calendar and email sync via Microsoft 365 / Graph, when a user connects their Microsoft account
- [Assent](https://thirdpartyindex.com/vendors/assent.md): Cloud hosting and infrastructure for iPoint Solutions.
- [Atlan](https://thirdpartyindex.com/vendors/atlan.md): AI Model Hosting; AI model inference for Atlan AI features using OpenAI GPT models hosted by Microsoft in Azure. Prompts and outputs are not available to OpenAI…
- [Atlassian](https://thirdpartyindex.com/vendors/atlassian.md): Cloud hosting provider
- [Atomicwork](https://thirdpartyindex.com/vendors/atomicwork.md): Artificial Intelligence; Collaboration & Productivity
- [Attensi](https://thirdpartyindex.com/vendors/attensi.md): Processing of simulation content and backup
- [Attention](https://thirdpartyindex.com/vendors/attention.md): Inference
- [Audienceview](https://thirdpartyindex.com/vendors/audienceview.md): Cloud hosting services
- [AudioCodes](https://thirdpartyindex.com/vendors/audiocodes.md): Mail, O365, Azure
- [AudioStack](https://thirdpartyindex.com/vendors/audiostack.md): Text to speech and speech to text provider
- [Auditoria.AI](https://thirdpartyindex.com/vendors/auditoria-ai.md): Cloud Infrastructure
- [AutogenAI](https://thirdpartyindex.com/vendors/autogenai.md): Hosting & Infrastructure, LLM provider (for Australian Customers only); Hosting & Infrastructure, LLM provider (for Canadian Customers only); Hosting & Infrastr…
- [Automation Anywhere](https://thirdpartyindex.com/vendors/automation-anywhere.md): AI Services; Cloud hosting infrastructure, provisioning service, file and data storage services, data base and reporting; Form recognition
- [AutoRABIT](https://thirdpartyindex.com/vendors/autorabit.md)
- [AutoScaled](https://thirdpartyindex.com/vendors/autoscaled.md): Authentication; File integrations
- [Avalara](https://thirdpartyindex.com/vendors/avalara.md): Cloud-based and on-premises office productivity tools and a business analytics service
- [AvaSure](https://thirdpartyindex.com/vendors/avasure.md)
- [AvePoint](https://thirdpartyindex.com/vendors/avepoint.md)
- [AVEVA](https://thirdpartyindex.com/vendors/aveva.md)
- [Avolve Software](https://thirdpartyindex.com/vendors/avolve-software.md)
- [Awardco](https://thirdpartyindex.com/vendors/awardco.md): Cloud provider
- [awork](https://thirdpartyindex.com/vendors/awork.md): AI features in the standard product and awork AI Add-on; specifically providing OpenAI models
- [Axcient](https://thirdpartyindex.com/vendors/axcient.md): Email, Calendar, and Contacts
- [Axero](https://thirdpartyindex.com/vendors/axero.md): Cloud infrastructure for our apps, services, and integrations
- [Axipro](https://thirdpartyindex.com/vendors/axipro.md): Email, document storage, collaboration, and internal communication; Productivity Suite
- [Aztec Software](https://thirdpartyindex.com/vendors/aztec-software.md): O365 GCC (Fedramp)
- [B2Gnow](https://thirdpartyindex.com/vendors/b2gnow.md)
- [Banking Circle](https://thirdpartyindex.com/vendors/banking-circle.md): • Anti-money laundering and sanction screening tools • Microsoft Office software suite (email, Word, PowerPoint, Skype and Teams communications) • Custome…
- [Barracuda Networks](https://thirdpartyindex.com/vendors/barracuda-networks.md)
- [Beamery](https://thirdpartyindex.com/vendors/beamery.md)
- [Beonic](https://thirdpartyindex.com/vendors/beonic.md)
- [Betterworks](https://thirdpartyindex.com/vendors/betterworks.md): Cloud-based technology platform used to provide federated authentication services.
- [Beyond Work](https://thirdpartyindex.com/vendors/beyond-work.md): EU-hosted language models, the default routing for model calls; Extracts text from documents and PDFs
- [BeyondTrust](https://thirdpartyindex.com/vendors/beyondtrust.md): Cloud hosting provider (Endpoint Privilege Management Win/Mac, Password SafePM Cloud, Password Safe Cloud)
- [BigID](https://thirdpartyindex.com/vendors/bigid.md): LLM inference – optional features, as described in our Documentation
- [BigPanda](https://thirdpartyindex.com/vendors/bigpanda.md): Cloud Service Provider: Used to support AI-driven capabilities; such as language understanding and text analytics, enabling BigPanda; to enhance automation and …
- [BigTime](https://thirdpartyindex.com/vendors/bigtime.md): A native integration between BigTime and Microsoft Outlook. Customers; must opt-in to this integration.; Provides cloud-based computing and data hosting service…
- [BillingPlatform](https://thirdpartyindex.com/vendors/billingplatform.md): Microsoft Privacy Policy can be viewed here; Service Provided: Email & document storage; identity and access management (Microsoft 365, Entra ID)
- [Bird](https://thirdpartyindex.com/vendors/bird.md): Cloud Hosting Service Provider
- [Bitbucket](https://thirdpartyindex.com/vendors/bitbucket.md): Cloud hosting provider
- [Bites](https://thirdpartyindex.com/vendors/bites.md): Azure OpenAI Service: AI generation for in-product features. Power BI: embedded analytics and reporting
- [BitTitan](https://thirdpartyindex.com/vendors/bittitan.md): cloud hosting and infrastructure services
- [Bitwarden](https://thirdpartyindex.com/vendors/bitwarden.md): Hosting infrastructure
- [Black Forest Labs](https://thirdpartyindex.com/vendors/black-forest-labs.md)
- [Blackbaud](https://thirdpartyindex.com/vendors/blackbaud.md)
- [BlackBerry](https://thirdpartyindex.com/vendors/blackberry.md): Cloud service provider in customer’s selected region; Cloud service provider to deliver BBM Enterprise alerts
- [Blackboard](https://thirdpartyindex.com/vendors/blackboard.md): Data Center; Data center; Data center, AI functionalities; Data center/hosting; Datacenter; Datacenter/hosting; Hosting; Hosting Provider; Hosting provider; Imm…
- [Blitzz](https://thirdpartyindex.com/vendors/blitzz.md): Primary cloud infrastructure provider (Azure). Hosts all Blitzz SaaS applications and stores the majority of data processed and transmitted through Blitzz servi…
- [Blockdaemon](https://thirdpartyindex.com/vendors/blockdaemon.md): Cloud infrastructure and productivity services
- [Bloomfire](https://thirdpartyindex.com/vendors/bloomfire.md): Bloomfire uses the OpenAI service on Microsoft Azure for the purpose of generating Generative AI responses delivered in the Bloomfire platform. Data is not pers…
- [Bluebeam](https://thirdpartyindex.com/vendors/bluebeam.md): Collaboration, email, and file storage platform storing customer and employee data.; Endpoint protection platform for devices used by employees.; Business appli…
- [BlueMarvel](https://thirdpartyindex.com/vendors/bluemarvel.md): Azure Hosting
- [BoldDesk](https://thirdpartyindex.com/vendors/bolddesk.md): AI Services; AI functionalities (if enabled in your account); Azure Cosmos DB, Azure Application Insights, Azure Service Bus, Azure Vault; Cloud Computing Servi…
- [BoldSign](https://thirdpartyindex.com/vendors/boldsign.md): Cloud Computing Services; Data hosting and application infrastructure services; AI Platform Services; Processing AI capabilities within the BoldSign application
- [Boom Learning](https://thirdpartyindex.com/vendors/boom-learning.md): Replica of select adult and entity data for business operations, product improvement, and account management.
- [Boomi, LP](https://thirdpartyindex.com/vendors/boomi-lp.md): Third Party Hosting for runtime services (as specified by customer)
- [Boost.ai](https://thirdpartyindex.com/vendors/boost-ai.md): For EU/EEA customers including the UK the processing location is EU/EEA. For US customers contracting with Boost.ai, Inc location of processing is US.; Provisio…
- [Boost.space](https://thirdpartyindex.com/vendors/boost-space.md): IT infrastructure
- [Botdoc](https://thirdpartyindex.com/vendors/botdoc.md): Infrastructure
- [Bounteous](https://thirdpartyindex.com/vendors/bounteous.md)
- [Box](https://thirdpartyindex.com/vendors/box.md)
- [BrightHire](https://thirdpartyindex.com/vendors/brighthire.md): Summarization
- [Browzwear](https://thirdpartyindex.com/vendors/browzwear.md): Cloud services
- [Bullhorn](https://thirdpartyindex.com/vendors/bullhorn.md): AI services; Geocoding; Cloud hosting services
- [Businesswire](https://thirdpartyindex.com/vendors/businesswire.md): Contracting process, client communication
- [C3 AI](https://thirdpartyindex.com/vendors/c3-ai.md): Cloud Hosted Infrastructure and Data Hosting
- [CAKE](https://thirdpartyindex.com/vendors/cake.md)
- [Calilio](https://thirdpartyindex.com/vendors/calilio.md)
- [Capacity](https://thirdpartyindex.com/vendors/capacity.md): Cloud Infrastructure and managed services; Provides IaaS compute, storage, and managed services supporting platform operations and product delivery.
- [Capcade](https://thirdpartyindex.com/vendors/capcade.md): AI services, utilized to power our AI Assistant; Cloud infrastructure, hosting, and data storage; Cloud-based document creation, editing,; and collaboration
- [Capsule8](https://thirdpartyindex.com/vendors/capsule8.md): Data centre services, cloud infrastructure services and Generative AI
- [Catch Up AI](https://thirdpartyindex.com/vendors/catch-up-ai.md): Large language model API used for summaries and assistant replies.
- [causaLens](https://thirdpartyindex.com/vendors/causalens.md): Hosting, storage and AI model processing of customer data
- [Caylent](https://thirdpartyindex.com/vendors/caylent.md): Software (Office365); Website Analytics and Session Recording
- [Cekura](https://thirdpartyindex.com/vendors/cekura.md): IT infrastructure
- [Celonis](https://thirdpartyindex.com/vendors/celonis.md): ● AI inferences and AI services; ● Option for hosting of the Celonis Platform Cloud Service
- [Census](https://thirdpartyindex.com/vendors/census.md): Azure hosting environment for Supplier services
- [Center for Internet Security](https://thirdpartyindex.com/vendors/center-for-internet-security.md): Cloud Service Provider and associated products; Microsoft offers a wide range of products, including cloud service products.; Your general personal information …
- [Centerfuze](https://thirdpartyindex.com/vendors/centerfuze.md): Productivity & Integrations
- [Cerenade](https://thirdpartyindex.com/vendors/cerenade.md): Cloud hosting and infrastructure used to host the Cerenade application and related services
- [Certara](https://thirdpartyindex.com/vendors/certara.md): Email service, document management, and AI-assisted productivity tools (Microsoft 365, Microsoft 365 Copilot)
- [Chainloop](https://thirdpartyindex.com/vendors/chainloop.md): azure.microsoft.com
- [Channelscaler](https://thirdpartyindex.com/vendors/channelscaler.md): Hosting on MS Azure
- [ChargeBee](https://thirdpartyindex.com/vendors/chargebee.md): AI service provider (Microsoft Azure OpenAI): Utilized to power integrated artificial intelligence capabilities across the product platform.; Cloud data platfor…
- [Chaser](https://thirdpartyindex.com/vendors/chaser.md)
- [Chat Aid](https://thirdpartyindex.com/vendors/chat-aid.md): Infrastructure
- [Check Point Software Technologies](https://thirdpartyindex.com/vendors/check-point-software-technologies.md): AI/LLM service provider; Data Visualization Service; Microsoft Office Products; Data Storage and Diagnostics
- [CHEQ](https://thirdpartyindex.com/vendors/cheq.md): Data, analysis, application, hosting, cloud infrastructure
- [Chili Digital](https://thirdpartyindex.com/vendors/chili-digital.md): Under a standard contract, the provider is responsible for the provision of cloud services in the form of a standardised offer (Platform-as-a-Service), specific…
- [ChurnZero](https://thirdpartyindex.com/vendors/churnzero.md): AI Processing
- [Cien](https://thirdpartyindex.com/vendors/cien.md): IT infrastructure; IAM providers
- [Cin7](https://thirdpartyindex.com/vendors/cin7.md): Hosting Provider for all functionality. Customer Data is hosted in one of the following regions.
- [Ciptex](https://thirdpartyindex.com/vendors/ciptex.md): RACE AI features as enabled by customer
- [Cirrus Insight](https://thirdpartyindex.com/vendors/cirrus-insight.md): Cloud Service Provider; Infrastructure hosting
- [CK-12 Foundation](https://thirdpartyindex.com/vendors/ck-12-foundation.md): providing LLM functionality
- [Claranet](https://thirdpartyindex.com/vendors/claranet.md): Enterprise Support (ESC); Managed Cloud Hosting: Microsoft Azure; Professional Services / Consulting Workplace
- [Claroty](https://thirdpartyindex.com/vendors/claroty.md)
- [ClearMash](https://thirdpartyindex.com/vendors/clearmash.md): Cloud hosting provider
- [Clerk Chat](https://thirdpartyindex.com/vendors/clerk-chat.md)
- [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse.md): Cloud hosting and infrastructure provider; Data ingestion pipeline
- [ClickTime](https://thirdpartyindex.com/vendors/clicktime.md): Cloud Hosting, Data Storage, and AI Services; Cloud hosting, data storage and AI services. ClickTime’s AI features, such as Ellie Chat, run in ClickTime’s o…
- [ClickUp™](https://thirdpartyindex.com/vendors/clickuptm.md): Application AI Functionality
- [ClientSuccess](https://thirdpartyindex.com/vendors/clientsuccess.md): Microsoft Auth SSO
- [CloseCore](https://thirdpartyindex.com/vendors/closecore.md): Hosting & Infrastructure
- [CloudBlue](https://thirdpartyindex.com/vendors/cloudblue.md): Infrastructure
- [Cloudect](https://thirdpartyindex.com/vendors/cloudect.md): One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland | Processing activities: Cloud infrastructure and data hosting services
- [CloudM](https://thirdpartyindex.com/vendors/cloudm.md): Cloud hosting provider
- [Cloudmersive](https://thirdpartyindex.com/vendors/cloudmersive.md): Cloud Infrastructure Services
- [CloudRadial](https://thirdpartyindex.com/vendors/cloudradial.md): https://docs.microsoft.com/en-us/azure/compliance
- [CloudResearch](https://thirdpartyindex.com/vendors/cloudresearch.md)
- [CloudSEK](https://thirdpartyindex.com/vendors/cloudsek.md): IT infrastructure
- [Cloudshelf](https://thirdpartyindex.com/vendors/cloudshelf.md): IT infrastructure
- [CloudZone](https://thirdpartyindex.com/vendors/cloudzone.md): Emails and Meeting recording and transcription in teams, only with customer approval
- [Cloverpop](https://thirdpartyindex.com/vendors/cloverpop.md): Cloud-based Chat Messaging
- [Clozd](https://thirdpartyindex.com/vendors/clozd.md): Collaboration and communication services. \[Microsoft Trust Center\](; Optional
- [Clumio by Commvault](https://thirdpartyindex.com/vendors/clumio-by-commvault.md): Commvault uses Microsoft for the following services/purposes: - Cloud storage - Security analytics (Sentinel) - Technical support platform - Azure OpenAI Servic…
- [CM.com](https://thirdpartyindex.com/vendors/cm-com.md)
- [Coachello](https://thirdpartyindex.com/vendors/coachello.md): Cloud hosting and AI model inference; Hosts the Coachello platform and provides Azure OpenAI model inference for AI coaching features. Processing takes place in…
- [Coalfire](https://thirdpartyindex.com/vendors/coalfire.md): Data storage and collaboration; Communication
- [Cockroach Labs](https://thirdpartyindex.com/vendors/cockroach-labs.md): Cockroach Labs customers may optionally choose Azure as the underlying cloud provider to host their clusters.; Customer data, if customer elects Azure as cloud …
- [Codat](https://thirdpartyindex.com/vendors/codat.md): Cloud provider; Microsoft Azure perform all processing and storage of data on behalf of Codat via their PaaS product solution.
- [CodeAnt AI](https://thirdpartyindex.com/vendors/codeant-ai.md): IT infrastructure
- [CoderPad](https://thirdpartyindex.com/vendors/coderpad.md): Providing audio transcription services
- [Cognite AS](https://thirdpartyindex.com/vendors/cognite-as.md): Processing and storage of data stored in CDF.
- [CoLab](https://thirdpartyindex.com/vendors/colab.md): Large Language Model (LLM) Provider; Large Language Model (LLM) provider and other API services used to process customer data.
- [Colossyan Creator](https://thirdpartyindex.com/vendors/colossyan-creator.md): Audio as a service and translations; Azure provides text to speech services, i.e. to allow users to input a written script from which speech of avatars is creat…
- [CometChat](https://thirdpartyindex.com/vendors/cometchat.md)
- [Comm100](https://thirdpartyindex.com/vendors/comm100.md): Data Hosting; Generative AI
- [Command Alkon](https://thirdpartyindex.com/vendors/command-alkon.md): Cloud provider, communications, and D365 platform; Reporting through PowerBI
- [Commvault Systems](https://thirdpartyindex.com/vendors/commvault-systems.md): Commvault uses Microsoft for the following services/purposes: - Cloud storage - Security analytics (Sentinel) - Technical support platform - Azure OpenAI Servic…
- [ComplyAdvantage](https://thirdpartyindex.com/vendors/complyadvantage.md): Hosting infrastructure.
- [Condens](https://thirdpartyindex.com/vendors/condens.md): Data processing
- [Confirm](https://thirdpartyindex.com/vendors/confirm.md)
- [Confluent](https://thirdpartyindex.com/vendors/confluent.md): Hosting services and storage
- [Conga](https://thirdpartyindex.com/vendors/conga.md): AI Powered Contract Analysis; Hosting Services
- [Conjurer Solutions](https://thirdpartyindex.com/vendors/conjurer-solutions.md): Productivity software
- [ConnectWise](https://thirdpartyindex.com/vendors/connectwise.md): Data Center Provider; United States; Corporate business tools, cybersecurity, artifical intelligence functionality, cloud services hosting for CPQ; Security sol…
- [Contender Solutions](https://thirdpartyindex.com/vendors/contender-solutions.md): Cloud Hosting and Services, Device Management
- [Contentsquare](https://thirdpartyindex.com/vendors/contentsquare.md): Growth, Pro, and Enterprise; Provides Large Language Model (LLM); Provides Large Language Model (LLM) for the following plans:; Data hosting for the following p…
- [Contentstack](https://thirdpartyindex.com/vendors/contentstack.md): Cloud Hosting
- [Contractbook](https://thirdpartyindex.com/vendors/contractbook.md): Microsoft Azure hosts Contractbook's large language model used for AI functionalities.
- [ContraForce](https://thirdpartyindex.com/vendors/contraforce.md): Data is processed on Azure cloud services. Data localization is regionally restricted.; Hosting, Storage
- [ControlUp](https://thirdpartyindex.com/vendors/controlup.md): AI-assisted processing and analysis may be performed using Microsoft Foundry services (Azure AI Foundry) as part of the Services.; Audit Log; Customer streaming…
- [Conveo](https://thirdpartyindex.com/vendors/conveo.md): Business Applications; Processing Activity Description Document management and internal collaboration (Word, Excel, SharePoint, etc.). Data Residency / Processi…
- [ConvertFlow](https://thirdpartyindex.com/vendors/convertflow.md): Cloud services, website hosting, and data center services
- [Convertr](https://thirdpartyindex.com/vendors/convertr.md): Cloud Provider; Convertr use Microsoft Azure to manage and host elements of our AI Features and platform infrastructure
- [Cookiebot](https://thirdpartyindex.com/vendors/cookiebot.md): Data hosting
- [CookieFirst](https://thirdpartyindex.com/vendors/cookiefirst.md): Ads: Website advertising, search engine advertising; Analytics: measuring website usage
- [Coralogix](https://thirdpartyindex.com/vendors/coralogix.md): (Turned off by default) AI Center- observability performance, security, and safety of your AI applications; (Turned off by default) Processing of all telemetry …
- [CoreWeave](https://thirdpartyindex.com/vendors/coreweave.md)
- [Cortex Genie Humain](https://thirdpartyindex.com/vendors/cortex-genie-humain.md): Cloud provider; IAM; IT; MDM; Collaboration; Document management; Device and App security; Security
- [Couchbase](https://thirdpartyindex.com/vendors/couchbase.md): Cloud infrastructure provider
- [Couchdrop](https://thirdpartyindex.com/vendors/couchdrop.md)
- [Count](https://thirdpartyindex.com/vendors/count.md): Communication and app notifications (Teams); Count's internal and external messaging platform provider. Application data containing personal data is optionally …
- [Coveo](https://thirdpartyindex.com/vendors/coveo.md): Provider of advanced AI functionalities, including generative AI services or other AI services, including AI-agents and AI-driven capabilities.
- [Cradle](https://thirdpartyindex.com/vendors/cradle.md): SSO authentication, presence sync, calendar
- [CrashPlan](https://thirdpartyindex.com/vendors/crashplan.md)
- [Credo AI](https://thirdpartyindex.com/vendors/credo-ai.md): Cloud infrastructure and data storage; Cloud infrastructure provider for SaaS platform hosting, compute, and data storage (EU region).
- [Crelate](https://thirdpartyindex.com/vendors/crelate.md): Cloud Hosting
- [Cribl](https://thirdpartyindex.com/vendors/cribl.md)
- [Crisp](https://thirdpartyindex.com/vendors/crisp.md): API Provider; On-demand translation of messages and AI-powered message processing; This processing is optional and performed only when the Customer enables thes…
- [Critical Cloud](https://thirdpartyindex.com/vendors/critical-cloud.md): Document storage and collaboration
- [Crowdin](https://thirdpartyindex.com/vendors/crowdin.md): Provides AI models in support of Crowdin’s AI/ML-powered features
- [Crownpeak](https://thirdpartyindex.com/vendors/crownpeak.md): Provide AI-based functionality (optional, client-activated). Exchange of contact details for the purposes of license management and billing.
- [CS DISCO](https://thirdpartyindex.com/vendors/cs-disco.md): Cloud service hosting provider
- [CSVBox](https://thirdpartyindex.com/vendors/csvbox.md): Document Intelligence
- [Cube Dev](https://thirdpartyindex.com/vendors/cube-dev.md): Core Infrastructure: Cloud Hosting; Offers comprehensive enterprise cloud services, providing virtualized infrastructure, managed SQL databases, and secure iden…
- [Cumulocity](https://thirdpartyindex.com/vendors/cumulocity.md)
- [Cursor](https://thirdpartyindex.com/vendors/cursor.md): Cloud Infrastructure Provider; Some secondary infrastructure is hosted on Microsoft Azure.
- [Cushman & Wakefield](https://thirdpartyindex.com/vendors/cushman-and-wakefield.md)
- [Cyara](https://thirdpartyindex.com/vendors/cyara.md): Collaboration Tools
- [Cyberbit](https://thirdpartyindex.com/vendors/cyberbit.md): infrastructure Administration and customer; support Customer-relationship management and Internal; operations support. Module and team exercising
- [Cygnvs](https://thirdpartyindex.com/vendors/cygnvs.md): Document editing functionality (Only used when using the "Document Editing" functionality of the Service)
- [Cymulate](https://thirdpartyindex.com/vendors/cymulate.md): OpenAI – AI services.
- [CYPHER Learning](https://thirdpartyindex.com/vendors/cypher-learning.md): Office tools and software
- [Cyso](https://thirdpartyindex.com/vendors/cyso.md): Cloud Computing
- [D2L](https://thirdpartyindex.com/vendors/d2l.md): Internal Operations; Used by D2L for corporate productivity & internal business operations.; Global Support; Used by D2L for IDP & SSO within Brightspace Commun…
- [Darktrace](https://thirdpartyindex.com/vendors/darktrace.md): Microsoft 365 and Secure cloud service provider (Azure) for Darktrace products and services
- [Darktrace Federal](https://thirdpartyindex.com/vendors/darktrace-federal.md): Microsoft 365 and Secure cloud service provider (Azure) for Darktrace products and services
- [Data Zoo](https://thirdpartyindex.com/vendors/data-zoo.md): Communication and collaboration, Storage,
- [Databricks](https://thirdpartyindex.com/vendors/databricks.md): Cloud Service Provider; Customer support (in Microsoft Teams).
- [DataCamp](https://thirdpartyindex.com/vendors/datacamp.md): Hosting, storage, and processing; Infrastructure services, including cloud hosting, data storage and AI processing.
- [Datadog](https://thirdpartyindex.com/vendors/datadog.md): Infrastructure services
- [Dataedo](https://thirdpartyindex.com/vendors/dataedo.md): Productivity and communication
- [Datafi](https://thirdpartyindex.com/vendors/datafi.md): Core Product; Infrastructure hosting
- [Datafold](https://thirdpartyindex.com/vendors/datafold.md): Cloud infrastructure; Hosting and backups; AI services
- [DataForSEO](https://thirdpartyindex.com/vendors/dataforseo.md)
- [Datarails](https://thirdpartyindex.com/vendors/datarails.md): Infrastructure, hosting, and AI-powered product features
- [DataRobot](https://thirdpartyindex.com/vendors/datarobot.md): Cloud service provider for single-tenant SaaS offering (STS) (if chosen by Customer)
- [DataSnipper](https://thirdpartyindex.com/vendors/datasnipper.md): Cloud hosting; Customer Data (AI) analysis; If the Customer selects Australia as the data processing location, certain processing activities may still occur wit…
- [Datawarehouse.io](https://thirdpartyindex.com/vendors/datawarehouse-io.md)
- [DaVinci Commerce](https://thirdpartyindex.com/vendors/davinci-commerce.md)
- [Daylight Security](https://thirdpartyindex.com/vendors/daylight-security.md): Datalake, SOC2, GDPR
- [dbt Labs](https://thirdpartyindex.com/vendors/dbt-labs.md): Infrastructure Hosting
- [Dealcode](https://thirdpartyindex.com/vendors/dealcode.md): Bereitstellung von Cloud-Infrastruktur und KI-Dienstleistungen; Dienstleistungen für maschinelles Lernen (AI)
- [dealhead](https://thirdpartyindex.com/vendors/dealhead.md)
- [Decagon](https://thirdpartyindex.com/vendors/decagon.md): Cloud provider; Infrastructure Provider providing hosting services and storage
- [Deepdesk](https://thirdpartyindex.com/vendors/deepdesk.md): Cloud provider and ChatGPT access; Deepdesks primary use of Microsoft Azure is to access ChatGPT to support specific features.
- [Deepgram](https://thirdpartyindex.com/vendors/deepgram.md): A multinational technology company that produces, licenses, and supports a wide range of software, hardware, and cloud services.
- [Deepnote](https://thirdpartyindex.com/vendors/deepnote.md): Cloud infrastructure & AI; Infrastructure and AI services supporting cloud functions.
- [Delinea](https://thirdpartyindex.com/vendors/delinea.md): Cloud Provider; Cloud data storage and hosting; Messaging; Messaging service for customer support operations; Auditing; Delinea Auditing powered by Iris AI (sep…
- [Deloitte](https://thirdpartyindex.com/vendors/deloitte.md)
- [Deltek](https://thirdpartyindex.com/vendors/deltek.md): AI Functionality
- [Demandbase](https://thirdpartyindex.com/vendors/demandbase.md): Cloud Services
- [DemandScience](https://thirdpartyindex.com/vendors/demandscience.md): Cloud service that provides email and SharePoint; Collaboration
- [Demodesk](https://thirdpartyindex.com/vendors/demodesk.md): Provision of AI features
- [Descope](https://thirdpartyindex.com/vendors/descope.md): Cloud Infrastructure
- [Devolutions](https://thirdpartyindex.com/vendors/devolutions.md): Service hosting and data storage
- [DevRev](https://thirdpartyindex.com/vendors/devrev.md): Azure OpenAI Service
- [Digicert](https://thirdpartyindex.com/vendors/digicert.md): Provide advertising services; Provide cloud infrastructure, collaboration, source code management, email, and productivity services
- [Digify](https://thirdpartyindex.com/vendors/digify.md)
- [Digistorm AU](https://thirdpartyindex.com/vendors/digistorm-au.md): Email processing & delivery, file storage; Internal Business Operations - Applications, Services, and Support; Sales & Marketing; Candidate & Business Operation…
- [Digital Realty](https://thirdpartyindex.com/vendors/digital-realty.md): Email and business applications
- [Digitate](https://thirdpartyindex.com/vendors/digitate.md): Cloud Hosting Services; Azure generative AI Services
- [Dispel](https://thirdpartyindex.com/vendors/dispel.md): Email, file storage; Cloud service provider; Data Controller
- [DitchCarbon](https://thirdpartyindex.com/vendors/ditchcarbon.md): Web session analytics (input fields masked); Language model processing for data extraction
- [Docebo](https://thirdpartyindex.com/vendors/docebo.md): Azure OpenAI: generative AI-powered functionalities, including content generation, enhancement, revision, and file transcription and translation, for Docebo AI …
- [DocuPipe](https://thirdpartyindex.com/vendors/docupipe.md): Cloud provider; Managed AI inference.
- [Docusign](https://thirdpartyindex.com/vendors/docusign.md): -Azure OpenAI Service: AI extractions in Agreement Manager; AI agents; AI-Assisted Review for IAM -Azure AI Document Intelligence: AI extractions in Agreement M…
- [Domo](https://thirdpartyindex.com/vendors/domo.md): Hosting
- [Doozy](https://thirdpartyindex.com/vendors/doozy.md): Calendar integration
- [DoseSpot](https://thirdpartyindex.com/vendors/dosespot.md): Provides cloud based hosting of both Dosespot and pVerify application.; Microsoft 365 is a product family of productivity software, collaboration and cloud-base…
- [Dot](https://thirdpartyindex.com/vendors/dot.md): Data storage and processing
- [Dot Compliance](https://thirdpartyindex.com/vendors/dot-compliance.md)
- [dotdigital](https://thirdpartyindex.com/vendors/dotdigital.md): For the provision of the Fresh Relevance service including storage of customer data.
- [Double the Donation](https://thirdpartyindex.com/vendors/double-the-donation.md)
- [DQLabs](https://thirdpartyindex.com/vendors/dqlabs.md): AI processing + cloud services (optional features)
- [DrDroid](https://thirdpartyindex.com/vendors/drdroid.md): Database Hosting; Azure AI Foundry
- [Dremio](https://thirdpartyindex.com/vendors/dremio.md): Dremio Cloud Control Plane Infrastructure
- [Drieam](https://thirdpartyindex.com/vendors/drieam.md): AI / LLM Services
- [Drive Commerce](https://thirdpartyindex.com/vendors/drive-commerce.md): Infrastructure hosting
- [Drivetrain](https://thirdpartyindex.com/vendors/drivetrain.md)
- [Dropbox](https://thirdpartyindex.com/vendors/dropbox.md): Large Language Model Processing (e.g. summarization, enhanced search)
- [Dubber](https://thirdpartyindex.com/vendors/dubber.md): Dubber utilises Microsoft Azure Cloud Services to provide Cognitive Services (Speech & Natural Language Processing), and network services in connection with the…
- [Dynatrace](https://thirdpartyindex.com/vendors/dynatrace.md)
- [EasyPost](https://thirdpartyindex.com/vendors/easypost.md): IAM providers; Cloud Providers
- [EasyVista](https://thirdpartyindex.com/vendors/easyvista.md): Hosting, Generative AI
- [Edgescan](https://thirdpartyindex.com/vendors/edgescan.md)
- [Edmentum](https://thirdpartyindex.com/vendors/edmentum.md): Telephony and Support; Cloud hosting, data processing and reporting, secure data sharing, voice support
- [Education Perfect](https://thirdpartyindex.com/vendors/education-perfect.md): Video conferencing and file sharing
- [eesel AI](https://thirdpartyindex.com/vendors/eesel-ai.md)
- [Egnyte](https://thirdpartyindex.com/vendors/egnyte.md)
- [Eightfold AI](https://thirdpartyindex.com/vendors/eightfold-ai.md): Cloud hosting services (Azure)
- [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch.md): Hosting
- [Elavon](https://thirdpartyindex.com/vendors/elavon.md): Cloud infrastructure provider; Infrastructure
- [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs.md): Cloud infrastructure, data storage & LLM Services; With respect to LLM Services, to the extent India Data Residency is selected by the customer per the terms of…
- [elmah.io](https://thirdpartyindex.com/vendors/elmah-io.md)
- [Ema](https://thirdpartyindex.com/vendors/ema.md): Cloud Computing
- [Employ Intelligence](https://thirdpartyindex.com/vendors/employ-intelligence.md): Cloud application and data services platform
- [Employment Hero](https://thirdpartyindex.com/vendors/employment-hero.md): Cloud Infrastructure; Processing Activity: Cloud infrastructure and productivity services including data storage, compute, and collaboration tooling via Microso…
- [Encore Digital Media](https://thirdpartyindex.com/vendors/encore-digital-media.md)
- [Encyro](https://thirdpartyindex.com/vendors/encyro.md): Email communications, help requests; Data storage, encryption
- [Endex](https://thirdpartyindex.com/vendors/endex.md): Cloud provider
- [Endor Labs](https://thirdpartyindex.com/vendors/endor-labs.md): Cloud Hosting
- [Enlyft](https://thirdpartyindex.com/vendors/enlyft.md): Hosting and productivity software
- [Ennova SPA](https://thirdpartyindex.com/vendors/ennova-spa.md): Cloud infrastructure, hosting, and related processing services supporting the Ennova platform and services.
- [Envestnet](https://thirdpartyindex.com/vendors/envestnet.md): Microsoft enables productivity through Microsoft 365 applications (e.g., Outlook, Teams, Word, Excel), facilitates secure communication and collaboration, and s…
- [Envoy Global](https://thirdpartyindex.com/vendors/envoy-global.md): Application hosting
- [eOne Solutions](https://thirdpartyindex.com/vendors/eone-solutions.md): Cloud-based infrastructure and database
- [Epicor](https://thirdpartyindex.com/vendors/epicor.md): Cloud Hosting Services
- [Epignosis](https://thirdpartyindex.com/vendors/epignosis.md): Videoconferencing
- [Eptura](https://thirdpartyindex.com/vendors/eptura.md): Hosting services for primary data center and backup operations, including analytics, compute, database, artificial intelligence (AI), machine learning (ML), net…
- [Equisolve](https://thirdpartyindex.com/vendors/equisolve.md): Office software, cloud file hosting and sharing
- [Esendex](https://thirdpartyindex.com/vendors/esendex.md)
- [eSign](https://thirdpartyindex.com/vendors/esign.md): Cloud hosting and infrastructure services
- [Estuary](https://thirdpartyindex.com/vendors/estuary.md): Cloud Infrastructure
- [Ethnio](https://thirdpartyindex.com/vendors/ethnio.md): Outlook
- [Everbridge](https://thirdpartyindex.com/vendors/everbridge.md)
- [EVERSANA](https://thirdpartyindex.com/vendors/eversana.md)
- [Everstage](https://thirdpartyindex.com/vendors/everstage.md): Cloud Providers
- [EverWorker](https://thirdpartyindex.com/vendors/everworker.md): Microsoft provides productivity, authentication, and cloud computing services utilized by Everworker to support platform functionality and internal business ope…
- [EverWorker](https://thirdpartyindex.com/vendors/everworker-ai.md): Microsoft provides productivity, authentication, and cloud computing services utilized by Everworker to support platform functionality and internal business ope…
- [Evisions](https://thirdpartyindex.com/vendors/evisions.md): Document management; Microsoft Office 365 is our cloud-powered productivity platform. The latest productivity apps such as Microsoft Teams, Word, Excel, PowerPo…
- [Exclusive Networks](https://thirdpartyindex.com/vendors/exclusive-networks.md): Collaboration & Communication
- [Experian](https://thirdpartyindex.com/vendors/experian.md): Cloud hosting provider; Cloud hosting provider.; Sub-Processor; Sub-contractor; Sub-processor
- [Expertly](https://thirdpartyindex.com/vendors/expertly.md)
- [Expo](https://thirdpartyindex.com/vendors/expo.md): Customer support (Microsoft Teams)
- [Extensis](https://thirdpartyindex.com/vendors/extensis.md)
- [Exterro](https://thirdpartyindex.com/vendors/exterro.md): Data hosting and storage as selected by customers; Public Cloud Infrastructure
- [FacilityOS](https://thirdpartyindex.com/vendors/facilityos.md): Application and Data hosting.
- [Factory](https://thirdpartyindex.com/vendors/factory.md): Cloud provider; Factory leverages dedicated Azure OpenAI Service endpoints, ensuring enterprise-level security and compliance with Azure's data privacy standard…
- [Fakturownia](https://thirdpartyindex.com/vendors/fakturownia.md)
- [Fastah](https://thirdpartyindex.com/vendors/fastah.md): IT infrastructure
- [Fastmail](https://thirdpartyindex.com/vendors/fastmail.md): Cloud-based and on-premises office productivity tools
- [FE fundinfo](https://thirdpartyindex.com/vendors/fe-fundinfo.md)
- [Feature Upvote](https://thirdpartyindex.com/vendors/feature-upvote.md): Integration
- [FeatureOS](https://thirdpartyindex.com/vendors/featureos.md)
- [Feedly Threat Intelligence](https://thirdpartyindex.com/vendors/feedly-threat-intelligence.md): Video Conferencing & Collaboration (Teams)
- [Fenergo](https://thirdpartyindex.com/vendors/fenergo.md): Microsoft Sentinel is a cloud-native SIEM solution that delivers scalable security across multicloud and multiplatform environments.; Purpose: Security monitori…
- [FICO](https://thirdpartyindex.com/vendors/fico.md): Business productivity software for clients globally
- [Figma](https://thirdpartyindex.com/vendors/figma.md): AI model provider
- [Filestack](https://thirdpartyindex.com/vendors/filestack.md): ● Business contact information; ● Image captioning; ● User data
- [Filevine](https://thirdpartyindex.com/vendors/filevine.md): Translation, VDI, and hosting services
- [Fillout](https://thirdpartyindex.com/vendors/fillout.md)
- [FINBOURNE](https://thirdpartyindex.com/vendors/finbourne.md)
- [Fini](https://thirdpartyindex.com/vendors/fini.md): LLM inference (API-based processing only)
- [Fireblocks](https://thirdpartyindex.com/vendors/fireblocks.md): Microsoft Azure enables the management of key shares.
- [FirstTouch](https://thirdpartyindex.com/vendors/firsttouch.md): Email sending and communications (Outlook/365).
- [Fivetran](https://thirdpartyindex.com/vendors/fivetran.md): Azure hosting environment for Supplier services
- [Flowmailer](https://thirdpartyindex.com/vendors/flowmailer.md): Datacenter for hosting and data storage; Hosting and storage of customer data used in the provision of the Hive Marketing Cloud services
- [Fluentic](https://thirdpartyindex.com/vendors/fluentic.md): AI and Machine Learning services including but not necessarily limited to Machine Translation
- [Fluxx](https://thirdpartyindex.com/vendors/fluxx.md): Azure provides supplemental database infrastructure used only for secondary/replica databases for analytics and reporting, hosting and managing the datasets nee…
- [Fonn Group](https://thirdpartyindex.com/vendors/fonn-group.md): AI functionality (speech-to-text services).
- [Forcepoint](https://thirdpartyindex.com/vendors/forcepoint.md): Cloud Computing Services
- [Forethought Technologies](https://thirdpartyindex.com/vendors/forethought-technologies.md): Web Hosting Services
- [Forsta](https://thirdpartyindex.com/vendors/forsta.md): Data centre
- [Four/Four](https://thirdpartyindex.com/vendors/four-four.md): Document management; Microsoft 365 provides office software and document storage services; Cloud provider; Microsoft Azure provides infrastructure hosting servi…
- [FreeBusy](https://thirdpartyindex.com/vendors/freebusy.md): Cloud hosting
- [FreedomPay](https://thirdpartyindex.com/vendors/freedompay.md): Business administration, devops tools, communication, and collaboration; Cloud Hosting (US)
- [Freeplay](https://thirdpartyindex.com/vendors/freeplay-2.md): Cloud Services
- [Freshworks](https://thirdpartyindex.com/vendors/freshworks.md): Cosmos Data (Microsoft Corporation) is used by Freshworks to process customer activity events — such as messages received, conversations resolved, or assignme…
- [Frigade](https://thirdpartyindex.com/vendors/frigade.md): AI model serving
- [Frontify](https://thirdpartyindex.com/vendors/frontify.md): Azure AI services to power the AI Features
- [FTI Technology](https://thirdpartyindex.com/vendors/fti-technology.md): Automation, Data Warehouse, Invoicing, Azure SaaS, Azure IaaS, Azure Dev Ops, AVD, Office 365 for Acuity, Active Directory for Acuity, AI Service Provider (Azur…
- [Funnelfeedr](https://thirdpartyindex.com/vendors/funnelfeedr.md): Hosting provider of Funnelfeedr databases and software services. All Customer Data are stored here (Azure region Sweden Central). https://www.microsoft.com/lice…
- [fynk](https://thirdpartyindex.com/vendors/fynk.md): Azure AI Services
- [Gainsight Software](https://thirdpartyindex.com/vendors/gainsight-software.md): Cloud Service Provider for certain Generative Artificial Intelligence features and AI Agentic Services
- [Gallup](https://thirdpartyindex.com/vendors/gallup.md): Data storage supporting Gallup's European region; Data storage supporting Gallup's non-European regions
- [Gamma](https://thirdpartyindex.com/vendors/gamma.md): Artificial intelligence services
- [Garba](https://thirdpartyindex.com/vendors/garba.md): Hosting, cloud infrastructure, Azure OpenAI for AI processing
- [Gem](https://thirdpartyindex.com/vendors/gem.md): Azure services, OpenAI
- [Genesys](https://thirdpartyindex.com/vendors/genesys.md)
- [Genetec](https://thirdpartyindex.com/vendors/genetec.md): Microsoft’s Azure cloud computing platform provides a range of cloud services, including data hosting, data analytics, and data storage; Microsoft’s suite o…
- [Genezio](https://thirdpartyindex.com/vendors/genezio.md): General purpose AI; Cloud hosting, data storage and processing
- [Genspark](https://thirdpartyindex.com/vendors/genspark.md): Cloud provider
- [Gigamon](https://thirdpartyindex.com/vendors/gigamon.md)
- [Girikon AI](https://thirdpartyindex.com/vendors/girikon-ai.md): Infrastructure, hosting, compute
- [GitHub](https://thirdpartyindex.com/vendors/github.md): Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services; Cognitive Services and customer support ticketing analysis; Technical Services
- [Glassbox](https://thirdpartyindex.com/vendors/glassbox.md): Cloud Hosting; IaaS provider for the production application and holder of all application data storage and processing
- [GlassHive](https://thirdpartyindex.com/vendors/glasshive.md): Hosting and infrastructure
- [Glean](https://thirdpartyindex.com/vendors/glean.md)
- [Gliffy by Perforce](https://thirdpartyindex.com/vendors/gliffy-by-perforce.md): Cloud Provider; Delphix (SaaS)
- [Glyde](https://thirdpartyindex.com/vendors/glyde.md): Business email, productivity, and internal file storage; Cloud hosting, storage, and AI model processing
- [Go Autonomous](https://thirdpartyindex.com/vendors/go-autonomous.md): Active participant in EU-US Data Privacy Framework.; DPA: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum…
- [GoFormz](https://thirdpartyindex.com/vendors/goformz.md): Hosts our online platform microservices and SQL, Cosmos, and Blob Storage databases.
- [Goldcast](https://thirdpartyindex.com/vendors/goldcast.md): Azure Cloud Hosting Service; Azure OpenAI Service
- [Gong](https://thirdpartyindex.com/vendors/gong.md): Cloud services and application AI functionality
- [Gorgias](https://thirdpartyindex.com/vendors/gorgias.md): Product analytics
- [GovDash](https://thirdpartyindex.com/vendors/govdash.md): Primary cloud hosting provider for GovDash's infrastructure.
- [Gradial](https://thirdpartyindex.com/vendors/gradial.md): Cloud provider; Provides cloud infrastructure and platform services used to host and operate portions of Gradial's platform and supporting services.
- [Grafana](https://thirdpartyindex.com/vendors/grafana.md): Infrastructure, Cloud Service Provider
- [Graphwise](https://thirdpartyindex.com/vendors/graphwise.md): Cloud Service Provider
- [Gyre](https://thirdpartyindex.com/vendors/gyre.md): Hosting and storage system provider
- [Handhold](https://thirdpartyindex.com/vendors/handhold.md): Voice generation
- [HappySignals](https://thirdpartyindex.com/vendors/happysignals.md)
- [Harbor Global](https://thirdpartyindex.com/vendors/harbor-global.md): Collaboration Tools
- [Harness.io](https://thirdpartyindex.com/vendors/harness-io.md): --- Platform Services and Enablement ---Cloud Infrastructure;Data Platform; Collaboration and Communication
- [Harriet](https://thirdpartyindex.com/vendors/harriet.md): LLM API for EU-hosted GPT models (sub-processor; Customer Data shared to generate responses; not used for model training; limited retention per provider terms);…
- [Harvey AI](https://thirdpartyindex.com/vendors/harvey-ai.md): AI provider and cloud services provider
- [Hasura](https://thirdpartyindex.com/vendors/hasura.md)
- [Hebbia](https://thirdpartyindex.com/vendors/hebbia.md)
- [Heidi Health](https://thirdpartyindex.com/vendors/heidi-health.md): Provides on-demand cloud computing platforms and APIs. We utilise Microsoft for data storage and hosting facilities in certain regions such as US, Japan, Austra…
- [Helperbird](https://thirdpartyindex.com/vendors/helperbird.md): Pro online voices, Pro online voice typing, Pro Immersive Reader
- [HeyMarvin](https://thirdpartyindex.com/vendors/heymarvin.md): Audio/Video Transcription services and Web Analytics
- [HeyOrca!](https://thirdpartyindex.com/vendors/heyorca.md)
- [Hibob](https://thirdpartyindex.com/vendors/hibob.md)
- [Higher Logic](https://thirdpartyindex.com/vendors/higher-logic.md): AI + Machine Learning; O365
- [HighRadius](https://thirdpartyindex.com/vendors/highradius.md): Azure cloud infrastructure, hosting and related services (including Azure OpenAl Service³)
- [Hightouch](https://thirdpartyindex.com/vendors/hightouch.md): Cloud Hosting
- [Highwire](https://thirdpartyindex.com/vendors/highwire.md): AI model inference services supporting Highwire’s AI-powered application features, including document analysis and safety risk analytics; Data integration, tr…
- [HiHello](https://thirdpartyindex.com/vendors/hihello.md)
- [Hiver](https://thirdpartyindex.com/vendors/hiver.md): Artificial Intelligence
- [Homerun](https://thirdpartyindex.com/vendors/homerun.md): Cloud Service Provider-
- [Horizon](https://thirdpartyindex.com/vendors/horizon.md)
- [Horizon3.ai](https://thirdpartyindex.com/vendors/horizon3-ai.md): SaaS Collaboration Toolset; SaaS Collaboration toolset for storing business information, \*but no actual user data flows through O365\*.
- [HorizonIQ](https://thirdpartyindex.com/vendors/horizoniq.md): Microsoft develops, manufactures, licenses, supports and sells computer software, consumer electronics, personal computers, and related services.
- [Hotjar](https://thirdpartyindex.com/vendors/hotjar.md): Growth, Pro, and Enterprise; Provides Large Language Model (LLM); Provides Large Language Model (LLM) for the following plans:; Data hosting for the following p…
- [Hubstaff](https://thirdpartyindex.com/vendors/hubstaff.md): Business Intelligence; Business intelligence and data visualization platform for reporting and dashboards.
- [Hugging Face](https://thirdpartyindex.com/vendors/hugging-face.md): Hosting/Infrastructure
- [Humanforce](https://thirdpartyindex.com/vendors/humanforce.md): - Processing Purpose: Email and Communication - Type of Data: No personal data, customer correspondence and metadata only. - Processing duration: For the durati…
- [HYCU](https://thirdpartyindex.com/vendors/hycu.md): Hosting & IaaS provider for backing up data on Azure, and for spinning up non-Azure native workloads on Azure
- [Hypatos](https://thirdpartyindex.com/vendors/hypatos.md): Temporary storage and processing of customer documents; LLM service provider
- [Hyperproof](https://thirdpartyindex.com/vendors/hyperproof.md): Application & Storage, AI
- [HYPR](https://thirdpartyindex.com/vendors/hypr.md)
- [IBM Kubecost](https://thirdpartyindex.com/vendors/ibm-kubecost.md): Provider of on-demand cloud computing platforms
- [Identitii](https://thirdpartyindex.com/vendors/identitii.md): Data Hosting
- [Identity Automation](https://thirdpartyindex.com/vendors/identity-automation.md): Email communication, File sharing
- [IDEXX](https://thirdpartyindex.com/vendors/idexx.md): Collaboration Tool; Cloud Infrastructure, DevOps
- [IMO Health](https://thirdpartyindex.com/vendors/imo-health.md): Enterprise IT
- [ImpactPilot](https://thirdpartyindex.com/vendors/impactpilot.md): AI insights, Automated Impact Driver tracking.
- [Impartner](https://thirdpartyindex.com/vendors/impartner.md): Hosts main database and PRM admin
- [Imply](https://thirdpartyindex.com/vendors/imply.md): Cloud service provider (Azure)
- [Improvado](https://thirdpartyindex.com/vendors/improvado.md): Workplace productivity (Microsoft 365), cloud computing (Azure), and AI/ML inference (Azure OpenAI Service)
- [Inception Labs](https://thirdpartyindex.com/vendors/inceptionlabs-ai.md): Cloud infrastructure provider used to host services, virtual machines, containerized workloads, databases, and other production infrastructure.; Cloud provider
- [Incident IQ](https://thirdpartyindex.com/vendors/incident-iq.md): Cloud provider
- [incident.io](https://thirdpartyindex.com/vendors/incident-io.md): Customer Support
- [InEvent](https://thirdpartyindex.com/vendors/inevent.md): Data syncronization with Dynamics
- [InfluxData](https://thirdpartyindex.com/vendors/influxdata.md): Cloud services hosting provider
- [Infobip](https://thirdpartyindex.com/vendors/infobip.md): Provisioning of cloud services for storage and computing, networking, monitoring and analytics, including proxying and balancing; supporting services for Text-t…
- [Infoblox](https://thirdpartyindex.com/vendors/infoblox.md): Azure OpenAI – LLM inference for Infoblox IQ; Customer data is not used to train models; Microsoft 365 for Enterprise; productivity applications
- [Infotopics](https://thirdpartyindex.com/vendors/infotopics.md)
- [Infrascale](https://thirdpartyindex.com/vendors/infrascale.md): Cloud Infrastructure
- [InMoment](https://thirdpartyindex.com/vendors/inmoment.md): Data hosting
- [InRule](https://thirdpartyindex.com/vendors/inrule.md): - Applicable Services: InRule Decision Platform - Data Processing: Cloud infrastructure and hosting provider for Azure OpenAI Service, supporting agentic functi…
- [insightsoftware](https://thirdpartyindex.com/vendors/insightsoftware.md): Cloud directory and authentication services
- [Insites](https://thirdpartyindex.com/vendors/insites.md)
- [Instadesk](https://thirdpartyindex.com/vendors/instadesk.md): Text-to-speech; speech-to-text; text generation; text translation
- [Instruqt](https://thirdpartyindex.com/vendors/instruqt.md): Email; Email service provider
- [Intapp](https://thirdpartyindex.com/vendors/intapp.md): Cloud Services Hosting; Cloud Services Hosting Provider
- [Integrate](https://thirdpartyindex.com/vendors/integrate.md): Public cloud provider of email communication and OneDrive access
- [Intempt](https://thirdpartyindex.com/vendors/intempt.md): Website session replay and heatmaps
- [Interact](https://thirdpartyindex.com/vendors/interact.md): Cloud hosting, Cloud services, Azure OpenAI
- [Intercom](https://thirdpartyindex.com/vendors/intercom.md): AI processing; Provides EU hosted AI Products by utilizing Azure OpenAI Service
- [Intralinks](https://thirdpartyindex.com/vendors/intralinks.md)
- [InvestorFlow](https://thirdpartyindex.com/vendors/investorflow.md): Cloud Service for DataEngine APIs and DevOps platform; Cloud infrastructure and services provider; Office software
- [Ipregistry](https://thirdpartyindex.com/vendors/ipregistry.md): Cloud Service Provider
- [iProov](https://thirdpartyindex.com/vendors/iproov.md): Provision of customer cloud hosting and storage services
- [Iron Mountain](https://thirdpartyindex.com/vendors/iron-mountain.md): Hosting services
- [itslearning](https://thirdpartyindex.com/vendors/itslearning.md): Software services
- [Ivanti](https://thirdpartyindex.com/vendors/ivanti.md): Microsoft Azure services including providing infrastructure and data hosting, CDN, Operations; Microsoft Azure services including providing infrastructure and d…
- [IXOPAY](https://thirdpartyindex.com/vendors/ixopay.md): Secure hosting services (Microsoft Azure) used for infrastructure and data processing including storage
- [Jamf](https://thirdpartyindex.com/vendors/jamf.md): AI Analysis feature using Azure OpenAI \[3\]; Cloud hosting \[1\]; Email communication, file sharing; Use of generative AI to assist with resolving technical suppor…
- [JDXpert](https://thirdpartyindex.com/vendors/jdxpert.md): Hosting and data storage for JDXpert software in Microsoft Azure; Office 365 – Email, Document Storage, and Teams Voice/Video calls; Processes job data to gen…
- [JetStream Security](https://thirdpartyindex.com/vendors/jetstream-security.md): Software-as-a-Service
- [JFrog](https://thirdpartyindex.com/vendors/jfrog.md)
- [JobAdder](https://thirdpartyindex.com/vendors/jobadder.md): Processing of JobAdder’s JobAds and Queue Service
- [Judi Health™](https://thirdpartyindex.com/vendors/judi-healthtm.md): The Microsoft Office 365 suite is a hosted, online version of the traditional installed version of Microsoft Office software. This online service is subscriptio…
- [Juma](https://thirdpartyindex.com/vendors/juma.md): Cloud & Inference Provider; Inference models in Global region.
- [Juniper Square](https://thirdpartyindex.com/vendors/juniper-square.md)
- [Juvare](https://thirdpartyindex.com/vendors/juvare.md): Microsoft Azure cloud services including but not limited to compute, storage, database, AI, and reporting systems.
- [Kaleris](https://thirdpartyindex.com/vendors/kaleris.md): Cloud hosting, monitoring, QA/Dev, infrastructure; Delivers cloud hosting, monitoring, and development environments. Supports secure operations with encryption …
- [Kallidus](https://thirdpartyindex.com/vendors/kallidus.md): AI hosting and data processing for the delivery of AI functionality and features, including LLM inference(s).; · Hosting; · Reporting
- [Kaltura](https://thirdpartyindex.com/vendors/kaltura.md): Optional Infrastructure
- [Kasten](https://thirdpartyindex.com/vendors/kasten.md): Provides Microsoft Azure Services and infrastructure used for Veeam cloud services
- [Keenious](https://thirdpartyindex.com/vendors/keenious.md): Data Centre Services
- [Keka](https://thirdpartyindex.com/vendors/keka-com.md): Cloud infrastructure provider used to host and operate the Keka platform and related services.
- [Kentico](https://thirdpartyindex.com/vendors/kentico.md)
- [Kentik](https://thirdpartyindex.com/vendors/kentik.md): - Data ingestion from customer AWS accounts; Data center services
- [Keyfactor](https://thirdpartyindex.com/vendors/keyfactor.md): Hosting Provider
- [Kiflo](https://thirdpartyindex.com/vendors/kiflo.md): Cloud Hosting
- [Kinaxis](https://thirdpartyindex.com/vendors/kinaxis.md): Cloud hosting and applicable infrastructure services.
- [Kinde](https://thirdpartyindex.com/vendors/kinde.md)
- [Klarent](https://thirdpartyindex.com/vendors/klarent.md): Collaboration & Productivity; IT infrastructure
- [Klaviyo](https://thirdpartyindex.com/vendors/klaviyo.md): Windows Virtual Desktops Cloud Infrastructure for Customer Support
- [Klaxoon by Wrike](https://thirdpartyindex.com/vendors/klaxoon-by-wrike.md)
- [Knorex](https://thirdpartyindex.com/vendors/knorex.md): Microsoft suite of applications and services within the organization
- [Knots](https://thirdpartyindex.com/vendors/knots.md): LLM processing for workflow automation
- [Koalendar](https://thirdpartyindex.com/vendors/koalendar.md): Session analytics and diagnostics
- [Kolleno](https://thirdpartyindex.com/vendors/kolleno.md): Emails of Kolleno team members
- [Kolsetu](https://thirdpartyindex.com/vendors/kolsetu.md)
- [Kontent.ai](https://thirdpartyindex.com/vendors/kontent-ai.md)
- [Konvu](https://thirdpartyindex.com/vendors/konvu.md): Cloud infrastructure and LLM inference for AI-powered vulnerability analysis
- [KORE Software](https://thirdpartyindex.com/vendors/kore-software.md)
- [Korn Ferry](https://thirdpartyindex.com/vendors/korn-ferry.md)
- [KrakenD](https://thirdpartyindex.com/vendors/krakend.md)
- [Krisp](https://thirdpartyindex.com/vendors/krisp.md): Backend support for specific functionalities; Microsoft Azure is a cloud computing platform and infrastructure offered by Microsoft that provides a wide range o…
- [Kryterion](https://thirdpartyindex.com/vendors/kryterion.md)
- [Kudosity](https://thirdpartyindex.com/vendors/kudosity.md): Productivity tools
- [Kyckr](https://thirdpartyindex.com/vendors/kyckr.md): IAM providers; IT infrastructure; Collaboration & Productivity
- [LaGrowthMachine](https://thirdpartyindex.com/vendors/lagrowthmachine.md)
- [Laivly](https://thirdpartyindex.com/vendors/laivly.md): AI Language Models.
- [Lakeside Software](https://thirdpartyindex.com/vendors/lakeside-software.md): Azure Cloud and Data Center Services
- [LambdaTest](https://thirdpartyindex.com/vendors/lambdatest.md): Cloud data hosting Services, Infrastructure, and Storage; Cloud data hosting Services, Infrastructure, and Storage for Generative AI
- [LandingAI](https://thirdpartyindex.com/vendors/landingai.md): Cloud hosting; Provides cloud infrastructure for customers who choose to deploy the ADE containerized application within their own Azure environment. - Azure's …
- [Lansweeper](https://thirdpartyindex.com/vendors/lansweeper.md): Cloud storage for LsAgent Cloud Relay Service
- [Lark](https://thirdpartyindex.com/vendors/lark.md): Azure Open AI; Form Recognizer; Speech to Text
- [LawVu](https://thirdpartyindex.com/vendors/lawvu.md): Hosting and delivery of services
- [Lead Forensics](https://thirdpartyindex.com/vendors/lead-forensics.md): Data Back-Up.; Data Storage.
- [Leadjourney](https://thirdpartyindex.com/vendors/leadjourney.md): Microsoft Advertising (Bing Ads) conversion tracking and retargeting
- [Leadoo](https://thirdpartyindex.com/vendors/leadoo.md): Only implemented on the request of the customer. May be used by customers to add any personal data in free text form.
- [LearnUpon](https://thirdpartyindex.com/vendors/learnupon.md): AI Functionality
- [Leena AI](https://thirdpartyindex.com/vendors/leena-ai.md): We have obtained infrastructure as a service (IaaS) from Microsoft Azure. Customers can choose to host in any one of the mentioned locations.
- [LEGALFLY](https://thirdpartyindex.com/vendors/legalfly.md): Cloud infrastructure provider
- [Legora](https://thirdpartyindex.com/vendors/legora.md): Hosting; Hosting, infrastructure and AI models; Infrastructure and AI models
- [Letter AI](https://thirdpartyindex.com/vendors/letter-ai.md): Text Embedding Models
- [Level Access](https://thirdpartyindex.com/vendors/level-access.md): Cloud provider; Infrastructure hosting for the software platforms; CDN
- [LexisNexis](https://thirdpartyindex.com/vendors/lexisnexis.md)
- [Lightedge](https://thirdpartyindex.com/vendors/lightedge.md): Public Cloud (Azure), Service platform, email and
- [Lightico](https://thirdpartyindex.com/vendors/lightico.md): Customer Support
- [LINK Mobility Group ASA](https://thirdpartyindex.com/vendors/link-mobility-group-asa.md)
- [LinkedIn](https://thirdpartyindex.com/vendors/linkedin.md): Cloud Infrastructure (IaaS), Storage, etc.; Microsoft 365, Fraud Protection, Professional Services, Customer Support, Survey comment translation services
- [Lippy AI](https://thirdpartyindex.com/vendors/lippy-ai.md): Cloud infrastructure, AI services, and data processing
- [LiveKit](https://thirdpartyindex.com/vendors/livekit.md): Model inference
- [LiveRamp](https://thirdpartyindex.com/vendors/liveramp.md): Cloud Hosting and Infrastructure Provider (for LiveRamp Clean Room Users Only)
- [LogicMonitor](https://thirdpartyindex.com/vendors/logicmonitor.md): AI Compute & Model Hosting; Cloud Infrastructure & Security
- [Logto](https://thirdpartyindex.com/vendors/logto.md): Cloud Infrastructure & Platform Services
- [Loopio](https://thirdpartyindex.com/vendors/loopio.md): Generative AI; Usage Policy: https://learn.microsoft.com/en-us/legal/ai-code-of-conduct
- [Lovable](https://thirdpartyindex.com/vendors/lovable.md): AI model inference for the AI Gateway
- [Lucid Software](https://thirdpartyindex.com/vendors/lucid-software.md): Features powered by artificial intelligence and machine learning; Includes OpenAI models hosted within the Azure environment
- [Luma AI](https://thirdpartyindex.com/vendors/luma-ai.md): Cloud hosting provider
- [LumApps](https://thirdpartyindex.com/vendors/lumapps.md): Microsoft hosts the cloud infrastructure and provides technical administration for infrastructure and management services
- [Lumify Work](https://thirdpartyindex.com/vendors/lumify-work.md): Cloud hosting, file storage, automation workflows; Financial and payroll processing; Automation software; Analytics; Customer Relationship Management (CRM) soft…
- [Luminance](https://thirdpartyindex.com/vendors/luminance.md): Infrastructure & additional generative model processing; Infrastructure provider
- [Lupl](https://thirdpartyindex.com/vendors/lupl.md): Cloud Service Provider
- [Lyric](https://thirdpartyindex.com/vendors/lyric.md): Cloud Hosting Provider
- [Lytx](https://thirdpartyindex.com/vendors/lytx.md): Cloud Services
- [Macabacus](https://thirdpartyindex.com/vendors/macabacus.md): Cloud Computing; Cloud infrastructure.
- [Macha AI](https://thirdpartyindex.com/vendors/macha-ai.md): Session replay and heatmaps
- [Macroscope](https://thirdpartyindex.com/vendors/macroscope.md): Inference and Cloud Services; We will occasionally use Azure to handle inference for LLMs from other providers. We also occasionally use Azure services for clou…
- [MacStadium](https://thirdpartyindex.com/vendors/macstadium.md): O365 Email, SharePoint, OneDrive, and Clarity.
- [Maestro AI](https://thirdpartyindex.com/vendors/maestro-ai.md): Cloud computing services
- [Magic School](https://thirdpartyindex.com/vendors/magic-school.md): Event logging for analytics
- [Magnolia](https://thirdpartyindex.com/vendors/magnolia.md): Cloud Hosting DCs
- [Mailchimp](https://thirdpartyindex.com/vendors/mailchimp.md): To provide our AI features through Intuit Assist.
- [Mailercloud](https://thirdpartyindex.com/vendors/mailercloud.md): Data Analytics
- [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md): Chatlayer Voicebots: Speech to Text, Text to Speech; Chatlayer: Machine Learning;; Voice API: Text To speech capabilities, Machine Learning
- [Mailtrap](https://thirdpartyindex.com/vendors/mailtrap-io.md): Product Analytics and Session Replay
- [Make](https://thirdpartyindex.com/vendors/make.md): Applicable for customers using
- [Malwarebytes](https://thirdpartyindex.com/vendors/malwarebytes.md): Email
- [MangoApps](https://thirdpartyindex.com/vendors/mangoapps.md): AI Services (optional); Outlook Calendar, Outlook Tasks, Outlook Email, One Drive, SharePoint, Teams, PowerBI, Delve, Stream, Team Meetings
- [Manus](https://thirdpartyindex.com/vendors/manus.md): Cloud infrastructure
- [MarianaAI](https://thirdpartyindex.com/vendors/marianaai.md): IT infrastructure
- [MasterControl](https://thirdpartyindex.com/vendors/mastercontrol.md): Cloud computing platform
- [Matillion](https://thirdpartyindex.com/vendors/matillion.md)
- [Mattermost](https://thirdpartyindex.com/vendors/mattermost.md): Cloud Service Provider; Business Operations
- [Matterport](https://thirdpartyindex.com/vendors/matterport.md): Collaboration and Communication
- [Medallia](https://thirdpartyindex.com/vendors/medallia.md): MXO operates its Services from Microsoft Azure. Data stored in Azure is held within MXO’s Azure subscriptions across multiple geographic regions.; Hosting for…
- [Mediafly](https://thirdpartyindex.com/vendors/mediafly.md): Optional GenAI features
- [Mediktor](https://thirdpartyindex.com/vendors/mediktor.md): Data analytics
- [meetergo](https://thirdpartyindex.com/vendors/meetergo.md): Calendar and conferencing
- [Melrose Labs](https://thirdpartyindex.com/vendors/melrose-labs.md): Email service provider and document storage.
- [Meltwater](https://thirdpartyindex.com/vendors/meltwater.md): Office365; AI features on the platform; File Storage and backup services, Cloud Storage
- [memoQ](https://thirdpartyindex.com/vendors/memoq.md): Artificial Intelligence; IT infrastructure
- [MentorcliQ](https://thirdpartyindex.com/vendors/mentorcliq.md): Cloud provider; Underlying data hosting provider for CommunityCliQ and Neobrain. Data hosting provider for Microsoft Teams specific data if Data Importer elects…
- [Meridian AI](https://thirdpartyindex.com/vendors/meridian-ai.md): Cloud hosting and infrastructure; Hosts the Meridian platform, including application hosting, databases, file storage, search, and OCR. Customer data processed:…
- [MetaRouter](https://thirdpartyindex.com/vendors/metarouter.md): Infrastructure hosting (MetaRouter-hosted environments only)
- [Mews](https://thirdpartyindex.com/vendors/mews.md)
- [MicroStrategy](https://thirdpartyindex.com/vendors/microstrategy.md): Cloud Service Provider
- [Mindee](https://thirdpartyindex.com/vendors/mindee.md): Computation / LLM in the case of a use of an API using LLM provided by Mindee; OCR/LLM
- [Mindtickle](https://thirdpartyindex.com/vendors/mindtickle.md): Microsoft 365, Power Platform, Azure AI Services
- [Minitab](https://thirdpartyindex.com/vendors/minitab.md)
- [Miro](https://thirdpartyindex.com/vendors/miro.md): Accessibility | OCR functionality | AI
- [Mistral](https://thirdpartyindex.com/vendors/mistral.md): Cloud Infrastructure; Products: Vibe, Studio / API
- [Mitratech](https://thirdpartyindex.com/vendors/mitratech.md): Data Warehouse
- [Modal](https://thirdpartyindex.com/vendors/modal.md): Cloud hosting provider
- [Moesif](https://thirdpartyindex.com/vendors/moesif.md): Cloud Infrastructure Provider
- [monday.com](https://thirdpartyindex.com/vendors/monday-com.md)
- [MongoDB](https://thirdpartyindex.com/vendors/mongodb.md): AI models for certain optional generative AI features included in the Cloud Services; Cloud Provider
- [Moogsoft](https://thirdpartyindex.com/vendors/moogsoft.md)
- [MSP360](https://thirdpartyindex.com/vendors/msp360.md): Hosting
- [Mural](https://thirdpartyindex.com/vendors/mural.md): Cloud Service Provider
- [My AskAI](https://thirdpartyindex.com/vendors/my-askai.md): A cloud services platform used to host applications and services, including computing, storage, and networking
- [myQuest](https://thirdpartyindex.com/vendors/myquest.md): Productivity suite and email; Office Online viewer renders uploaded Office documents in-app
- [n8n](https://thirdpartyindex.com/vendors/n8n.md): Cloud service provider
- [Nabla](https://thirdpartyindex.com/vendors/nabla.md): Speech to Text Operations US & EU Regions
- [NanoNets](https://thirdpartyindex.com/vendors/nanonets.md): Cloud Infrastructure
- [Nasuni](https://thirdpartyindex.com/vendors/nasuni.md): Workplace productivity and collaboration (Microsoft 365: Teams, Outlook, SharePoint)
- [Naviam](https://thirdpartyindex.com/vendors/naviam.md): Cloud Service Provider; Cloud Services
- [NCC Group](https://thirdpartyindex.com/vendors/ncc-group.md): Azure (for hosting, security data analytics and connectivity layer), Office 365 (several office applications) and EntraID (for active directory); Hosting (Azure…
- [Nebius](https://thirdpartyindex.com/vendors/nebius.md): Customer communications;; Security Information and Event Management
- [NeenOpal](https://thirdpartyindex.com/vendors/neenopal.md): IT management; IT infrastructure
- [Neeto](https://thirdpartyindex.com/vendors/neeto.md): Email integration; Business process; Communication
- [Nektar.ai](https://thirdpartyindex.com/vendors/nektar-ai.md): IT infrastructure
- [Neo4j](https://thirdpartyindex.com/vendors/neo4j.md): Infrastructure provider for Neo4j Cloud Service, including storage of encrypted databases, backups, and logfiles.  | If using AI/ML powered product features, al…
- [Neon](https://thirdpartyindex.com/vendors/neon.md): Cloud Service Provider; Customer support (in Microsoft Teams).
- [Neon One](https://thirdpartyindex.com/vendors/neon-one.md): Hosting of Product Servers
- [Neostella](https://thirdpartyindex.com/vendors/neostella.md): Email, document collaboration, productivity tools
- [Netenrich](https://thirdpartyindex.com/vendors/netenrich.md): Microsoft Office 365, including Microsoft Outlook, Microsoft Teams, and Microsoft Azure.
- [Netskope](https://thirdpartyindex.com/vendors/netskope.md)
- [Netwrix](https://thirdpartyindex.com/vendors/netwrix.md)
- [Neuron7.ai](https://thirdpartyindex.com/vendors/neuron7-ai.md): Email, file storage and productivity
- [New Black](https://thirdpartyindex.com/vendors/new-black.md): IT infrastructure
- [New Relic](https://thirdpartyindex.com/vendors/new-relic.md): Infrastructure, Cloud service provider, including AI services for intelligence features
- [Nextiva](https://thirdpartyindex.com/vendors/nextiva.md): Email, file storage, collaboration, AI API Services, cloud hosting
- [Nexxen](https://thirdpartyindex.com/vendors/nexxen.md): Email and storage
- [NiCE Cognigy](https://thirdpartyindex.com/vendors/nice-cognigy.md): Azure
- [NimbleWork](https://thirdpartyindex.com/vendors/nimblework.md): Microsoft Teams, Microsoft Clarity; Products: 1 ) Microsoft Clarity: NimbleWork Website 2) Microsoft Teams: Nimble, SwiftKanban
- [Nintex](https://thirdpartyindex.com/vendors/nintex.md): Cloud Hosting; Cloud Hosting and Identity Management; Cloud Hosting and Processing; Identity Management
- [Noca AI](https://thirdpartyindex.com/vendors/noca-ai.md): PDF Generator
- [Noonlight](https://thirdpartyindex.com/vendors/noonlight.md): Microsoft 365 – Enterprise Email, Chat, Video Conferencing and Storage
- [Nozomi Networks](https://thirdpartyindex.com/vendors/nozomi-networks.md): Email, Product Information, Updates, support, general inquiries; Processing of customer and end-user personal data in connection with the delivery, hosting, mon…
- [Nuclei](https://thirdpartyindex.com/vendors/nuclei.md)
- [nylas](https://thirdpartyindex.com/vendors/nylas.md): API
- [O.C. Tanner](https://thirdpartyindex.com/vendors/o-c-tanner.md): Email communication (365); customer relationship management (Dynamics) via Dynamics; insights into recognition programs (365 CoPilot).; Provides AI services for…
- [Okta](https://thirdpartyindex.com/vendors/okta.md): Hosting and cloud infrastructure
- [Olyteck](https://thirdpartyindex.com/vendors/olyteck.md): Microsoft Entra ID authentication and Microsoft Graph - customer's own Microsoft 365 tenant; Transactional and notification e-mail delivery from Olyteck
- [Omatic](https://thirdpartyindex.com/vendors/omatic.md): Omatic Cloud is hosted in Microsoft Azure Data Centers.
- [Omilia](https://thirdpartyindex.com/vendors/omilia.md): Cloud Service provider - PaaS
- [Omnea](https://thirdpartyindex.com/vendors/omnea.md): Customer and Internal Communications (Customer Optional)
- [ON24](https://thirdpartyindex.com/vendors/on24.md)
- [OnceHub](https://thirdpartyindex.com/vendors/oncehub.md): (ISO 9001, 22301, 27001, 27017, 27018, SOC2, PCI DSS Level 1); Cloud hosting services for OnceHub applications; (ISO 27001, 27017, 27701, 9001, 22301, 20000-1, …
- [One Step GPS](https://thirdpartyindex.com/vendors/one-step-gps.md): Provider of Cloud Services and Software Solutions, including Azure, Office 365, and Various Enterprise Applications
- [Onehub](https://thirdpartyindex.com/vendors/onehub.md)
- [OneStream Software](https://thirdpartyindex.com/vendors/onestream-software.md): See Description; Transfer Mechanism Subject to EU Standard Contractual Clauses Purpose/Description of Processing: - Hosting services and related managed service…
- [OneTrust](https://thirdpartyindex.com/vendors/onetrust.md): Azure AI Services; Azure Hosting Services; Web Application Open Platform Interface (WOPI) -Document Online Editing
- [Ontra](https://thirdpartyindex.com/vendors/ontra.md): AI Provider; AI-enabled functionality
- [OpenAI](https://thirdpartyindex.com/vendors/openai.md): Cloud infrastructure
- [OpenGov](https://thirdpartyindex.com/vendors/opengov.md): \[Permitting & Licensing, Tax & Revenue\] Microsoft Azure is a cloud service provider that stores, transmits, and processes all customer data. Customer databases,…
- [OpenObserve](https://thirdpartyindex.com/vendors/openobserve.md): Cloud infrastructure, hosting, and data storage for applicable deployments
- [OpenTag](https://thirdpartyindex.com/vendors/opentag.md): Cloud infrastructure and AI services
- [Operative](https://thirdpartyindex.com/vendors/operative.md): Communication and document management services and supporting cloud infrastructure
- [Oplane](https://thirdpartyindex.com/vendors/oplane.md): Infrastructure, AI Services
- [OpsHelm](https://thirdpartyindex.com/vendors/opshelm.md)
- [OPSWAT](https://thirdpartyindex.com/vendors/opswat.md): Microsoft provides Microsoft Foundry (formerly Azure AI Foundry), whose Azure OpenAI models power OPSWAT's AI-powered chatbot (Ozzy) on the My OPSWAT portal (my…
- [Optimove](https://thirdpartyindex.com/vendors/optimove.md): Processed in the U.S. or EU, based on the information and preferences provided by the customer during the onboarding process.; Reporting and BI
- [Optiverse](https://thirdpartyindex.com/vendors/optiverse.md): Cloud provider - LLM
- [Optro](https://thirdpartyindex.com/vendors/optro.md): AI processing; Service Hosting
- [Orvera AI](https://thirdpartyindex.com/vendors/orvera-ai.md): Website behaviour analytics
- [Outreach](https://thirdpartyindex.com/vendors/outreach.md): Productivity and Collaboration Tools; Infrastructure and artificial intelligence to provide new products and services to customers
- [OutThink](https://thirdpartyindex.com/vendors/outthink.md): Cloud infrastructure for information assets, video and audio communications; Cloud service provider for our services and applications
- [OverOps](https://thirdpartyindex.com/vendors/overops.md): --- Platform Services and Enablement ---Cloud Infrastructure;Data Platform; Collaboration and Communication
- [Own](https://thirdpartyindex.com/vendors/own.md): of processing when onboarding the SaaS Services); processing when onboarding the SaaS Services)
- [PagerDuty](https://thirdpartyindex.com/vendors/pagerduty.md): Artificial Intelligence; Authentication/Cloud Computing Services Provider/Communication Platform
- [Panintelligence](https://thirdpartyindex.com/vendors/panintelligence.md): Office365 applications used as collaboration tools for customer communications, and when we may store customer specific documents.
- [Paperform](https://thirdpartyindex.com/vendors/paperform.md): Microsoft Azure is currently only used as an AI service provider
- [Participatory Culture Foundation](https://thirdpartyindex.com/vendors/participatory-culture-foundation.md)
- [Partium](https://thirdpartyindex.com/vendors/partium.md): Cloud provider; Email-Service
- [Patch My PC](https://thirdpartyindex.com/vendors/patch-my-pc.md): Cloud provider; Purpose: Microsoft is the backbone of our infrastructure, used for e-mail, hosting services in Azure to support our Cloud resources, and more. D…
- [PathFactory](https://thirdpartyindex.com/vendors/pathfactory.md): Infrastructure
- [Pathlock](https://thirdpartyindex.com/vendors/pathlock.md): Cloud Service provider; Hosting partner for our SaaS application.
- [Paved](https://thirdpartyindex.com/vendors/paved.md): Sign In (SSO)
- [Pax8](https://thirdpartyindex.com/vendors/pax8.md): Infrastructure and operations
- [Payscale](https://thirdpartyindex.com/vendors/payscale.md): Data storage and cloud infrastructure
- [PCI Pal](https://thirdpartyindex.com/vendors/pci-pal.md): PCI Pal uses Microsoft 365 as a sub-processor to support core business operations, including email, collaboration, and document storage (via Teams and related s…
- [Pendo](https://thirdpartyindex.com/vendors/pendo.md): \*\*Purpose:\*\* (Optional) AI functionality in product \*\*Location(s) of processing:\*\* US, EU, or JPN (according to customer's hosting location)
- [People.ai](https://thirdpartyindex.com/vendors/people-ai.md): Azure generative AI Services
- [Perceptyx](https://thirdpartyindex.com/vendors/perceptyx.md): Cloud compute servers and storage, and/or language translation of comments
- [Perfect Wiki](https://thirdpartyindex.com/vendors/perfect-wiki.md): Microsoft Teams app, Microsoft Entra ID SSO, Microsoft Graph (for SharePoint sync, etc.); LLM and embedding generation for AI search and Q&A
- [Perforce](https://thirdpartyindex.com/vendors/perforce.md): Cloud Provider; Delphix (SaaS)
- [Perforce Puppet](https://thirdpartyindex.com/vendors/perforce-puppet.md): Cloud Provider; Delphix (SaaS)
- [Perk](https://thirdpartyindex.com/vendors/perk.md): Invoice recognition and SFTP server (if applicable); Perk Spend
- [Perplexity AI](https://thirdpartyindex.com/vendors/perplexity-ai.md): Cloud computing services including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) offerings.; Cloud provider
- [Pharos](https://thirdpartyindex.com/vendors/pharos.md): Collaboration, XDR, MDM, Identity Management
- [Phenom](https://thirdpartyindex.com/vendors/phenom.md): Artificial intelligence and automation services; Azure OpenAI features, tailored to each customer and product, encompass content generation, SEO suggestions, sc…
- [Pinecone](https://thirdpartyindex.com/vendors/pinecone.md): Cloud Infrastructure
- [Pipefy](https://thirdpartyindex.com/vendors/pipefy.md): Pipefy Cloud Solution
- [Planet](https://thirdpartyindex.com/vendors/planet.md)
- [Planon](https://thirdpartyindex.com/vendors/planon.md): 3rd Party Hosting if "Cloud Services / SaaS" is agreed upon; 3rd party Hosting
- [Plotly](https://thirdpartyindex.com/vendors/plotly.md): Cloud Infrastructure
- [Plumsail](https://thirdpartyindex.com/vendors/plumsail.md): Cloud Service Provider. Applicable services: Documents, Forms, Actions, HelpDesk, Org Chart
- [Podfather](https://thirdpartyindex.com/vendors/podfather.md): Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. Cloud Service Provider – Mi…
- [Poppulo](https://thirdpartyindex.com/vendors/poppulo.md): Cloud Service Provider for Workplace; optional (default setting is off) generative artificial intelligence capabilities for Poppulo
- [Popupsmart](https://thirdpartyindex.com/vendors/popupsmart.md): Cloud infrastructure and hosting
- [Portant](https://thirdpartyindex.com/vendors/portant.md): Productivity and cloud services
- [Posit](https://thirdpartyindex.com/vendors/posit.md): Productivity and collaboration (word processing, spreadsheets, presentations); Cloud computing
- [posthog](https://thirdpartyindex.com/vendors/posthog.md): Service Provider for AI Features
- [Power Factors](https://thirdpartyindex.com/vendors/power-factors.md): Cloud Hosting; Cloud hosting for SaaS products. Location dependent on which region application is provisioned.; Email, Chat, and Backoffice Tools
- [PowerSchool](https://thirdpartyindex.com/vendors/powerschool.md): Data Storage
- [Precisely Software](https://thirdpartyindex.com/vendors/precisely-software.md): Data Infrastructure
- [Precursive](https://thirdpartyindex.com/vendors/precursive.md): Generation of natural language responses via LLM
- [Prefixbox](https://thirdpartyindex.com/vendors/prefixbox.md)
- [Presidio](https://thirdpartyindex.com/vendors/presidio.md): Cloud Hosting and Services, Device Management
- [Procore](https://thirdpartyindex.com/vendors/procore.md): Azure Infrastructure / Cloud Hosting; Hosting of and support for OpenAI functionality on Azure infrastructure
- [Proctorio](https://thirdpartyindex.com/vendors/proctorio.md): Cloud Service Provider
- [Product Fruits](https://thirdpartyindex.com/vendors/product-fruits.md): OpenAI LLMs
- [Productlane](https://thirdpartyindex.com/vendors/productlane.md): Microsoft Teams integration: thread notifications and replies when enabled
- [Propelus](https://thirdpartyindex.com/vendors/propelus.md): Cloud Provider
- [Prophet Security](https://thirdpartyindex.com/vendors/prophet-security.md): AI Services; Current – authorized as of September 10, 2026. Third Party Generative AI Service - access and utilize hosted AI models. Location optional - Custo…
- [PROS](https://thirdpartyindex.com/vendors/pros.md): Generative AI processing utilizing large language models via Azure OpenAI Service APIs Power BI for Customer reporting on User interactions; Hosting, cloud infr…
- [Prospeo](https://thirdpartyindex.com/vendors/prospeo.md): Optional customer-authorised integrations
- [Protiviti](https://thirdpartyindex.com/vendors/protiviti.md)
- [Pulse Insights](https://thirdpartyindex.com/vendors/pulse-insights.md): Cloud infrastructure & productivity; Infrastructure
- [Puzzel](https://thirdpartyindex.com/vendors/puzzel.md): Puzzel delivers the Services from Microsoft Azure as a hosting provider to Puzzel.
- [Pylon](https://thirdpartyindex.com/vendors/pylon.md): AI Inference
- [Qencode](https://thirdpartyindex.com/vendors/qencode.md): Cloud service platform used for infrastructure, video processing and analytics capabilities.
- [Qlik](https://thirdpartyindex.com/vendors/qlik.md): Customer may send data through Office 365; These Talend Cloud locations are hosted through Microsoft Azure
- [Qohash](https://thirdpartyindex.com/vendors/qohash.md): M365 module extension; Microsoft Azure Managed Application deployed into the customer's tenant, where scanning and data processing happen.
- [QorusDocs](https://thirdpartyindex.com/vendors/qorusdocs.md)
- [Quality Clouds](https://thirdpartyindex.com/vendors/quality-clouds.md): Cloud Service providing Infrastructure: Clusters, Logs; Product infrastructure
- [Qualtrics](https://thirdpartyindex.com/vendors/qualtrics.md): AI capabilities, including generative AI and translation services.; Microsoft Azure – VDI environment for support purposes – Limited to specific customers w…
- [Quickchannel](https://thirdpartyindex.com/vendors/quickchannel.md): Integrations to AzureAD and Sharepoint.; Optional subprocessor providing
- [QuilrAI](https://thirdpartyindex.com/vendors/quilrai.md)
- [Qumulo](https://thirdpartyindex.com/vendors/qumulo.md): Azure Native Qumulo Service Offering; Cloud provider
- [Quorum Cyber](https://thirdpartyindex.com/vendors/quorum-cyber.md): Cloud provider; General business purposes including document sharing and storage, Email services, Identity Management, Authentication, Security, Automation, Sto…
- [Rackspace](https://thirdpartyindex.com/vendors/rackspace.md): Products & Services – Public Cloud
- [Raklet](https://thirdpartyindex.com/vendors/raklet.md): Primary hosting for web applications, services, and databases
- [RampedUp](https://thirdpartyindex.com/vendors/rampedup-io.md)
- [Rannsolve](https://thirdpartyindex.com/vendors/rannsolve.md): Collaboration & Productivity; IT infrastructure
- [RavenDB](https://thirdpartyindex.com/vendors/ravendb.md): Cloud, productivity, and related business services, solely to the extent Customer Personal Data is Processed in connection with the Services
- [Read AI](https://thirdpartyindex.com/vendors/read-ai.md): Transactional messages; User and participant names; raw and summarized content and content extractions including key questions, action items, and other generate…
- [ReadySet Surgical](https://thirdpartyindex.com/vendors/readyset-surgical.md)
- [Real Intelligence](https://thirdpartyindex.com/vendors/real-intelligence.md): Outlook, Teams, Microsoft integrations
- [Reclaim.ai](https://thirdpartyindex.com/vendors/reclaim-ai.md): Cloud Platform
- [Red Box](https://thirdpartyindex.com/vendors/red-box.md): Cloud hosting, data storage and infrastructure support services
- [Red Pepper Software](https://thirdpartyindex.com/vendors/red-pepper-software.md): Cloud hosting provider; Hosting of custom software and data on projects that require hosting, including Red Pepper hosted SFTP.; Cloud services provider; Email,…
- [Redpanda](https://thirdpartyindex.com/vendors/redpanda.md): Hosting and Infrastructure
- [Redstor](https://thirdpartyindex.com/vendors/redstor.md): Azure Hosting
- [Referral Rock](https://thirdpartyindex.com/vendors/referral-rock.md)
- [Regal](https://thirdpartyindex.com/vendors/regal.md): Hosting LLM Models
- [Rehnable](https://thirdpartyindex.com/vendors/rehnable.md): Hosting of the application, database and encryption keys
- [Relevance AI](https://thirdpartyindex.com/vendors/relevance-ai.md): Productivity suite provider; Cloud provider
- [Reltio](https://thirdpartyindex.com/vendors/reltio.md): Infrastructure and cloud services provider; Cloud-based hosting services, database, networking and storage
- [remove.bg](https://thirdpartyindex.com/vendors/remove-bg.md): Cloud server hosting (only use for remove.bg)
- [replit](https://thirdpartyindex.com/vendors/replit.md)
- [Repsly](https://thirdpartyindex.com/vendors/repsly.md): Cloud Infrastructure Provider
- [Respondus](https://thirdpartyindex.com/vendors/respondus.md): Business Communication and Collaboration
- [Retell AI](https://thirdpartyindex.com/vendors/retell-ai.md)
- [Rev](https://thirdpartyindex.com/vendors/rev.md): Cloud computing platform
- [Revenue Grid](https://thirdpartyindex.com/vendors/revenue-grid.md): Azure OpenAI Service: cloud-based service from Microsoft that provides access to OpenAI’s powerful AI models. AI Chat functionality; Host core infrastructure …
- [revenue.io](https://thirdpartyindex.com/vendors/revenue-io.md): Communication/Collaboration Platform
- [RevoData](https://thirdpartyindex.com/vendors/revodata.md): Device Endpoint Manager; Document management; Public Cloud provider
- [Rhythms](https://thirdpartyindex.com/vendors/rhythms.md): Cloud Infrastructure and LLM services
- [RingCentral](https://thirdpartyindex.com/vendors/ringcentral.md): Intelligence development and/or features (including but not limited to productivity, conversational, sales intelligence)
- [Ringostat](https://thirdpartyindex.com/vendors/ringostat.md): Web analytics tool provided by Microsoft that helps us to analyze user behavior on their websites
- [Riot](https://thirdpartyindex.com/vendors/riot.md): Cloud & AI computing platform; Cloud provider
- [Ripcord](https://thirdpartyindex.com/vendors/ripcord.md)
- [Ripik.AI](https://thirdpartyindex.com/vendors/ripik-ai.md): Mail Service
- [Riverbed](https://thirdpartyindex.com/vendors/riverbed.md): Cloud hosting and infrastructure provider; Infrastructure for SaaS Accelerator’s accelerator service clusters
- [Rivery](https://thirdpartyindex.com/vendors/rivery.md): Azure Supplier Data Destination
- [Root](https://thirdpartyindex.com/vendors/root.md): - Aikido: AI inference - Noon: Mail integration, AI inference
- [Rootly](https://thirdpartyindex.com/vendors/rootly.md): Hosting
- [Rubrik](https://thirdpartyindex.com/vendors/rubrik.md)
- [Ruddr](https://thirdpartyindex.com/vendors/ruddr.md): Web session state replay
- [S2 Cognition](https://thirdpartyindex.com/vendors/s2-cognition.md): Collaboration, Communications, Productivity
- [Sahha](https://thirdpartyindex.com/vendors/sahha.md): Support email
- [Sakari](https://thirdpartyindex.com/vendors/sakari.md): Advertising
- [Salad](https://thirdpartyindex.com/vendors/salad.md)
- [Sales Kong](https://thirdpartyindex.com/vendors/sales-kong.md): Authentication (Entra ID), Transcription
- [SalesBlink](https://thirdpartyindex.com/vendors/salesblink.md): Sending and receiving mail from customer-connected Microsoft mailboxes
- [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md)
- [SalesHood](https://thirdpartyindex.com/vendors/saleshood.md): Content summarization, Q&A, word embedding
- [Salesloft](https://thirdpartyindex.com/vendors/salesloft.md): Artificial Intelligence analysis and insights; Service provider
- [Salespeak](https://thirdpartyindex.com/vendors/salespeak.md): AI infrastructure
- [SalesRabbit](https://thirdpartyindex.com/vendors/salesrabbit.md): Cloud infrastructure and security for the Analytics service
- [SalesReady](https://thirdpartyindex.com/vendors/salesready.md): Cloud Computing
- [SalesScreen](https://thirdpartyindex.com/vendors/salesscreen.md)
- [Salt Security](https://thirdpartyindex.com/vendors/salt-security.md): Generative AI services provider for intelligence product features
- [Salted CX](https://thirdpartyindex.com/vendors/salted-cx.md): AI model inference and related cloud services through Microsoft Azure.
- [Sapience Analytics](https://thirdpartyindex.com/vendors/sapience-analytics.md): Cloud hosting provider for Sapience Analytics and hosts cloud security tools and supporting infrastructure of Sapience products
- [Savio](https://thirdpartyindex.com/vendors/savio.md): Behavior analysis
- [Sawtooth Software](https://thirdpartyindex.com/vendors/sawtooth-software.md): Processing and transferring email content, attachments, messages, invitations, and recordings.; Microsoft Azure AI Foundry - When Data Subjects (i.e., Users and…
- [Sayari](https://thirdpartyindex.com/vendors/sayari.md): Microsoft 365 Suite; Cloud Service Provider
- [Scale AI](https://thirdpartyindex.com/vendors/scale-ai.md): Productivity
- [Scaleflex](https://thirdpartyindex.com/vendors/scaleflex.md): Cloud provider; Scaleflex works with Microsoft Inc. (Azure) as an Infrastructure-as-a-Service (IaaS) provider to support the reliable, scalable delivery of our …
- [Scalyr](https://thirdpartyindex.com/vendors/scalyr.md): LLM Hosting
- [Scratchpad](https://thirdpartyindex.com/vendors/scratchpad.md): Access control
- [SearchStax](https://thirdpartyindex.com/vendors/searchstax.md): Used OpenAI models and development
- [Secure Privacy](https://thirdpartyindex.com/vendors/secure-privacy.md): Issue tracking, task management, and collaboration for product development and engineering prioritization.
- [Seerist](https://thirdpartyindex.com/vendors/seerist.md): Communications, Collaboration
- [Segment](https://thirdpartyindex.com/vendors/segment.md): Microsoft Azure Transcribes voice media into text via automated speech recognition as enabled by customers for specific Twilio Products and Services; Microsoft …
- [Sendbird](https://thirdpartyindex.com/vendors/sendbird.md): Used to power AI features like language model inference and document parsing
- [SendGrid](https://thirdpartyindex.com/vendors/sendgrid.md): Microsoft Azure Transcribes voice media into text via automated speech recognition as enabled by customers for specific Twilio Products and Services; Microsoft …
- [Sendmarc](https://thirdpartyindex.com/vendors/sendmarc.md): Email and productivity tools; Productivity; Application hosting, application security, and hosted identity management; Infrastructure Hosting; Document Manageme…
- [SentinelOne](https://thirdpartyindex.com/vendors/sentinelone.md): LLM Hosting
- [SentiSum](https://thirdpartyindex.com/vendors/sentisum.md)
- [Sentra](https://thirdpartyindex.com/vendors/sentra.md): Hosted services
- [SEON](https://thirdpartyindex.com/vendors/seon.md): Cloud computing; Cloud environment used to invoke AI/LLM product capabilities within SEON's platform.
- [ServiceNow](https://thirdpartyindex.com/vendors/servicenow.md)
- [Sessionize](https://thirdpartyindex.com/vendors/sessionize.md): If you use social logins, your personal data from their services is retrieved only once during registration. We never share your data with them.; We're using a …
- [Shopify](https://thirdpartyindex.com/vendors/shopify.md): Conversational artificial intelligence services
- [Showpad](https://thirdpartyindex.com/vendors/showpad.md): Translation and TTS
- [Sibme](https://thirdpartyindex.com/vendors/sibme.md): Calendar Events & OAuth 2.0
- [Sidetrade](https://thirdpartyindex.com/vendors/sidetrade.md): Backup storage; Only for services managed in our North American Datacenter
- [Sierra Technologies](https://thirdpartyindex.com/vendors/sierra-technologies.md): AI services
- [Sifflet](https://thirdpartyindex.com/vendors/sifflet.md): Cloud provider; Optional. Used when \[Private Link with Azure\]( is enabled.
- [Sigma](https://thirdpartyindex.com/vendors/sigma.md): Cloud Infrastructure
- [SignalTo](https://thirdpartyindex.com/vendors/signalto.md): Cloud hosting and infrastructure
- [SIGNL4](https://thirdpartyindex.com/vendors/signl4.md): EU hosting of data and services (SIGNL4 Core)
- [Simplismart](https://thirdpartyindex.com/vendors/simplismart.md): IT infrastructure
- [Sinch](https://thirdpartyindex.com/vendors/sinch.md): Chatlayer Voicebots: Speech to Text, Text to Speech; Chatlayer: Machine Learning;; Voice API: Text To speech capabilities, Machine Learning
- [SingleStore](https://thirdpartyindex.com/vendors/singlestore.md): Hosting services and storage
- [Sirion](https://thirdpartyindex.com/vendors/sirion.md): Sirion platform, where all customer data is stored and processed, is; hosted on Microsoft Azure.; Microsoft services used to support email alerts and notificati…
- [Sisense](https://thirdpartyindex.com/vendors/sisense.md): AI Services: auto-generated narratives or chatbot
- [Sitecore](https://thirdpartyindex.com/vendors/sitecore.md): Cloud Service Provider; Customer Relations Performance; Data Visualization; Generative AI Services; Microsoft Azure Cloud Service Provider; Microsoft Azure Serv…
- [Skedda](https://thirdpartyindex.com/vendors/skedda.md): Cloud provider; Provides the hosting infrastructure for Skedda's primary application resources (web application firewalls, web application servers, database ser…
- [skie.io](https://thirdpartyindex.com/vendors/skie-io.md)
- [Skillable](https://thirdpartyindex.com/vendors/skillable.md): Cloud provider; End user PII
- [Skovik](https://thirdpartyindex.com/vendors/skovik.md): Storage, computation services and physical data centres.
- [Skyhigh Security](https://thirdpartyindex.com/vendors/skyhigh-security.md)
- [Skyhigh Security](https://thirdpartyindex.com/vendors/skyhighsecurity-com.md)
- [Skyvia](https://thirdpartyindex.com/vendors/skyvia.md): Cloud infrastructure
- [Slack](https://thirdpartyindex.com/vendors/slack.md): Provider of generative artificial intelligence services.
- [Slido](https://thirdpartyindex.com/vendors/slido.md): Office use applications
- [Smarsh](https://thirdpartyindex.com/vendors/smarsh.md)
- [SmartBear Software](https://thirdpartyindex.com/vendors/smartbear-software.md): Data Hosting
- [SmartRecruiters](https://thirdpartyindex.com/vendors/smartrecruiters.md): Data hosting, email and traffic redirection
- [Smartsheet](https://thirdpartyindex.com/vendors/smartsheet.md): Azure OpenAI processes Beta Content in connection with Smartsheet’s Beta and Early Adopter Program Features. These AI features may ingest, analyze, visualize …
- [SmartTask](https://thirdpartyindex.com/vendors/smarttask.md): Cloud infrastructure, hosting, storage, and databases
- [Smint.io](https://thirdpartyindex.com/vendors/smint-io.md): Data center operations
- [SnapLogic](https://thirdpartyindex.com/vendors/snaplogic.md): AI Data Processing
- [Snowfire AI](https://thirdpartyindex.com/vendors/snowfire-ai.md)
- [Snowflake](https://thirdpartyindex.com/vendors/snowflake.md): Cloud hosting and infrastructure provider; Cross-region inference feature of Cortex for Google Cloud Platform and Amazon Web Services regions
- [SocialPilot](https://thirdpartyindex.com/vendors/socialpilot.md): Analytics to improve our services
- [SocialWeaver](https://thirdpartyindex.com/vendors/socialweaver.md): Email communication and transactional email processing.
- [Sogolytics](https://thirdpartyindex.com/vendors/sogolytics.md): Cloud hosting, infrastructure, and storage, AI, natural language processing, and cognitive services
- [SolarWinds](https://thirdpartyindex.com/vendors/solarwinds.md): Customer Support; Notification Service
- [Solutions Plus](https://thirdpartyindex.com/vendors/solutions-plus.md): cloud hosting for all Services: web hosting, application compute, databases, file storage, secrets management, and logging/telemetry. Production infrastructure …
- [SOPHOS](https://thirdpartyindex.com/vendors/sophos.md): Data centre services, cloud infrastructure services and Generative AI
- [sparkpost](https://thirdpartyindex.com/vendors/sparkpost.md): Cloud Hosting Service Provider
- [Speechmatics](https://thirdpartyindex.com/vendors/speechmatics.md): Cloud hosting and infrastructure (Microsoft Azure); Document and communication system; User authentication as an identity provider (where selected as chosen ide…
- [SPEEXX](https://thirdpartyindex.com/vendors/speexx.md): Provider of communication  and data storage applications  such as: Outlook, SharePoint,  Teams and Azure as an  alternative business continuity infrastructure
- [Split.io](https://thirdpartyindex.com/vendors/split-io.md): --- Platform Services and Enablement ---Cloud Infrastructure;Data Platform; Collaboration and Communication
- [Spreadly](https://thirdpartyindex.com/vendors/spreadly.md): AI Services, Customer Service, Communication
- [Sprinklr](https://thirdpartyindex.com/vendors/sprinklr.md)
- [Spun s.r.l.](https://thirdpartyindex.com/vendors/spun-s-r-l.md): PurposeFallback STT and TTS for specialty languages and dialects
- [SquaredUp](https://thirdpartyindex.com/vendors/squaredup.md): Infrastructure
- [Squirro](https://thirdpartyindex.com/vendors/squirro.md): Office 365 / Sharepoint; Provider; SaaS for Operations; Cloud Computing Provider
- [SS&C Blue Prism](https://thirdpartyindex.com/vendors/ss-and-c-blue-prism.md): Cloud (Azure) hosting where a customer chooses to use Azure, Active Directory, security, cognitive services and O365.; Office 365 and Microsoft support services…
- [Stack Moxie](https://thirdpartyindex.com/vendors/stack-moxie.md)
- [StackGen](https://thirdpartyindex.com/vendors/stackgen.md): Cloud infrastructure, compute services, data storage, and application hosting
- [StackGuardian](https://thirdpartyindex.com/vendors/stackguardian.md): Identity Providers; Collaboration & Productivity; IT infrastructure
- [Stacksync](https://thirdpartyindex.com/vendors/stacksync.md): Azure hosting environment for Supplier services
- [Staffbase](https://thirdpartyindex.com/vendors/staffbase.md): This subprocessor is applicable to: Employee App & Front Door Intranet, and New SB Email. Microsoft offers: - ISO 27001 certified data hosting; - When part of C…
- [Starburst](https://thirdpartyindex.com/vendors/starburst.md): Cloud hosting services, applicable only to customers who have a compute cluster in the selected Azure region.
- [StarRez](https://thirdpartyindex.com/vendors/starrez.md): Document management; Multinational technology company providing software and productivity services.; Cloud provider; Multinational technology company providing …
- [StarTree](https://thirdpartyindex.com/vendors/startree.md): Data center
- [Statuspage](https://thirdpartyindex.com/vendors/statuspage.md): Cloud hosting provider
- [Steady](https://thirdpartyindex.com/vendors/steady.md): LLM inference
- [Stinto](https://thirdpartyindex.com/vendors/stinto.md): IAM providers
- [Stoch Analytics](https://thirdpartyindex.com/vendors/stoch-analytics.md)
- [Stormboard](https://thirdpartyindex.com/vendors/stormboard.md): Integration (Optional)
- [Stova](https://thirdpartyindex.com/vendors/stova.md): Cloud Hosting Services (For Stova’s On-Site Services Tools)
- [Stream.io](https://thirdpartyindex.com/vendors/stream-io.md): Cloud Service Provider - applicable to Video API
- [Strider Technologies](https://thirdpartyindex.com/vendors/strider-technologies.md): Client Communications
- [Striim](https://thirdpartyindex.com/vendors/striim.md): Microsoft Azure is a cloud computing platform for building, deploying and managing applications through a global network of Microsoft and third-party managed da…
- [Stripe](https://thirdpartyindex.com/vendors/stripe.md): Cloud Service Provider; Cloud service provider for Stripe Data Pipeline; Provide AI technology to improve the quality of user support operations
- [Strivelabs](https://thirdpartyindex.com/vendors/strivelabs.md): Large language models for prompt engineered features.
- [Submittable](https://thirdpartyindex.com/vendors/submittable.md): Cloud hosting
- [SubscriptionFlow](https://thirdpartyindex.com/vendors/subscriptionflow.md): Cloud Computing; Cloud computing services
- [Sun Security](https://thirdpartyindex.com/vendors/sun-security.md): Cloud provider
- [SuperOffice](https://thirdpartyindex.com/vendors/superoffice.md): Hosting Provider. Hosting and operations of servers, and infrastructure for SuperOffice CRM Online and operations. Identity provider and AI services
- [Superside](https://thirdpartyindex.com/vendors/superside.md)
- [Supervity](https://thirdpartyindex.com/vendors/supervity.md): Cloud Service Provider; Identity Provider
- [SurveyMonkey](https://thirdpartyindex.com/vendors/surveymonkey.md): Internal document repository
- [Swifteq](https://thirdpartyindex.com/vendors/swifteq.md)
- [SymphonyAI](https://thirdpartyindex.com/vendors/symphonyai.md): Summit Platform; and Data Storage
- [Synadia](https://thirdpartyindex.com/vendors/synadia.md): Hosting Services
- [Syncfusion](https://thirdpartyindex.com/vendors/syncfusion.md): Cloud Computing Services; Data hosting and application infrastructure services; AI Platform Services; Processing AI capabilities within the application
- [SynchrotronAI](https://thirdpartyindex.com/vendors/synchrotronai.md): Sign in with Microsoft (Microsoft Entra ID) and ScamFreeLife Outlook connections through Microsoft Graph, including change notifications.
- [Syndigo](https://thirdpartyindex.com/vendors/syndigo.md): The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: storage.; The s…
- [SynergyOS](https://thirdpartyindex.com/vendors/synergyos.md): Technical Services, Cloud Hosted Infrastructure and Data Hosting; Cloud Hosted Infrastructure and Data Hosting
- [Synthesia](https://thirdpartyindex.com/vendors/synthesia-io.md): Content moderation, text-to-speech, speech-to-text conversion, and voice cloning.
- [Synthflow](https://thirdpartyindex.com/vendors/synthflow.md): Cloud infrastructure and hosting
- [SysAid](https://thirdpartyindex.com/vendors/sysaid.md): Azure OpenAI Service provides large language model inference for SysAid Copilot and SysAid's AI capabilities. Prompts and responses are processed within Microso…
- [Sysdig](https://thirdpartyindex.com/vendors/sysdig.md): Data Storage; Advanced Language LLM (for content generation)
- [Syskit Point](https://thirdpartyindex.com/vendors/syskit-point.md): Cloud provider, Customer data hosting; Infrastructure; AI service providers, AI features
- [T-Pro](https://thirdpartyindex.com/vendors/t-pro.md): Collaboration and Productivity; Microsoft 365 provides T-Pro’s email, document storage, and Teams collaboration. It is used for corporate communication, inter…
- [Tableau](https://thirdpartyindex.com/vendors/tableau.md)
- [Tackle.io](https://thirdpartyindex.com/vendors/tackle-io.md): Cloud Service Provider
- [Tactiq](https://thirdpartyindex.com/vendors/tactiq.md): AI API Provider; We use Azure OpenAI services to provide Zero Data Retention for AI features to our enterprise customers.
- [Taimos](https://thirdpartyindex.com/vendors/taimos.md): IAM providers
- [Talent Plus](https://thirdpartyindex.com/vendors/talent-plus.md): Provides productivity and document mangement services used to support Talent Plus operations.; Provides cloud computing and hosting services used to support Tal…
- [TalentLMS](https://thirdpartyindex.com/vendors/talentlms.md): Videoconferencing
- [Talogy](https://thirdpartyindex.com/vendors/talogy.md): Hosting services, IAAS, PAAS, Data Analytics, Application Monitoring.; Hosting services, IAAS, PAAS, O365, Data Analytics, Application Monitoring.; Cloud Hostin…
- [Tanium](https://thirdpartyindex.com/vendors/tanium.md): Hosting services, storage services, artificial intelligence infrastructure and capabilities, email, chat, videoconferencing, data analytics, and dashboards
- [Tansi](https://thirdpartyindex.com/vendors/tansi.md): Cloud computing platform and infrastructure services. Provides compute, storage, networking, and enterprise cloud solutions.
- [TCP Software](https://thirdpartyindex.com/vendors/tcp-software.md): internal company’s mail and document store system
- [Team O'clock](https://thirdpartyindex.com/vendors/team-o-clock.md): Analytics
- [TeamDynamix](https://thirdpartyindex.com/vendors/teamdynamix.md)
- [Teamspective](https://thirdpartyindex.com/vendors/teamspective.md)
- [Technosylva](https://thirdpartyindex.com/vendors/technosylva.md): Cloud provider; Data Hosting/Storage
- [TeleMessage](https://thirdpartyindex.com/vendors/telemessage.md)
- [Tellent Recruitee](https://thirdpartyindex.com/vendors/tellent-recruitee.md): API Integrations, WhatsApp Hiring Integrations
- [telli](https://thirdpartyindex.com/vendors/telli.md)
- [Telnyx](https://thirdpartyindex.com/vendors/telnyx.md): Azure infrastructure hosting, backups, logging and monitoring; Azure speech synthesis for AI features; Microsoft Advertising. Data may include hosted customer d…
- [Templafy](https://thirdpartyindex.com/vendors/templafy.md): AI/LLM service provider; Cloud service provider
- [Temporal](https://thirdpartyindex.com/vendors/temporal.md): (Optional) Infrastructure for Namespaces that customers decide to host in Microsoft Azure.
- [Termly](https://thirdpartyindex.com/vendors/termly.md): SSO and identity provider; Team communication and video conferencing; File storage and collaboration; Search Engine advertising; Email hosting and mail services
- [testRigor](https://thirdpartyindex.com/vendors/testrigor.md): Data center and cloud hosting services.
- [Textkernel](https://thirdpartyindex.com/vendors/textkernel.md): AI services; Geocoding; Cloud hosting services
- [The Ksquare Group](https://thirdpartyindex.com/vendors/the-ksquare-group.md)
- [The Predictive Index](https://thirdpartyindex.com/vendors/the-predictive-index.md): Cloud provider; Data Hosting
- [ThinkLP](https://thirdpartyindex.com/vendors/thinklp.md): Office365
- [ThoughtExchange](https://thirdpartyindex.com/vendors/thoughtexchange.md): Azure OpenAI/GPT API; Cloud Service Provider
- [ThoughtSpot](https://thirdpartyindex.com/vendors/thoughtspot.md)
- [Threekit](https://thirdpartyindex.com/vendors/threekit.md): Document processing
- [TierPoint](https://thirdpartyindex.com/vendors/tierpoint.md): Products & Services
- [Tiger Data (creators of TimescaleDB)](https://thirdpartyindex.com/vendors/tiger-data-creators-of-timescaledb.md): Infrastructure Provider
- [Tiger Pistol](https://thirdpartyindex.com/vendors/tiger-pistol.md): Cloud infrastructure and managed database services.
- [Tikk](https://thirdpartyindex.com/vendors/tikk.md): Calendar integration (opt-in: Outlook Calendar)
- [TimelinesAI](https://thirdpartyindex.com/vendors/timelinesai.md): cloud hosting and AI transcription / summarization (EU)
- [Tivian](https://thirdpartyindex.com/vendors/tivian.md): Supplementary service (e.g. text analytics, bot)
- [Tomorro](https://thirdpartyindex.com/vendors/tomorro.md): AI integration
- [Tonkean](https://thirdpartyindex.com/vendors/tonkean.md): AI LLM engine services (opt in)
- [Torq Technologies](https://thirdpartyindex.com/vendors/torq-technologies.md): AI Model Provider; AI model provider; Customer support and communications
- [Tractian](https://thirdpartyindex.com/vendors/tractian.md): Comprehensive suite of productivity and collaboration tools offered by Microsoft, designed to enhance efficiency and streamline work processes; Document managem…
- [Traction Rec](https://thirdpartyindex.com/vendors/traction-rec.md)
- [TradeCentric](https://thirdpartyindex.com/vendors/tradecentric.md)
- [TransferMate](https://thirdpartyindex.com/vendors/transfermate.md): Email services
- [Traversal](https://thirdpartyindex.com/vendors/traversal.md): Team messaging
- [Trellis Tech](https://thirdpartyindex.com/vendors/trellis-tech.md): LLM inference (GPT-4o) for AI-powered guest communications and task management; speech-to-text transcription (Whisper)
- [Trellix](https://thirdpartyindex.com/vendors/trellix.md)
- [Trinsic](https://thirdpartyindex.com/vendors/trinsic-id.md): Cloud computing and security
- [Trintech](https://thirdpartyindex.com/vendors/trintech.md): Azure is used to support Beacon’s model-related functionality for Subscribers using Beacon; Cloud Service Provider
- [Trumpet](https://thirdpartyindex.com/vendors/trumpet.md): Powers trumpet AI features; \[Optional\] Where you have chosen to use AI Features in the Services, those AI Features are delivered via Vercel's AI Gateway, which …
- [Trust Swiftly](https://thirdpartyindex.com/vendors/trust-swiftly.md): Application Infrastructure, Email, and Internal Collaboration
- [TrustArc](https://thirdpartyindex.com/vendors/trustarc.md): Microsoft Azure AI Platform hosting large language model instance for AI-enabled features; Cloud services supporting application logging and messaging queue cap…
- [Trustmary](https://thirdpartyindex.com/vendors/trustmary.md): Microsoft Excel 365; Microsoft SSO
- [Trustwell](https://thirdpartyindex.com/vendors/trustwell.md): Cloud provider; Genesis Classic, Genesis Supplements, and FoodProcessor Cloud Provider
- [Tungsten Automation](https://thirdpartyindex.com/vendors/tungsten-automation.md): Hosting Service Provider for most Subscription Services; Tungsten Service(s): Printix and other Cloud Services
- [Tuvis](https://thirdpartyindex.com/vendors/tuvis.md): Data Storage Cloud infrastructure hosting Service Distribution
- [Twenty](https://thirdpartyindex.com/vendors/twenty.md): Microsoft Azure provides Azure Foundry inference for Twenty AI features when requests are routed to Azure. Data may include prompts, responses, and CRM content …
- [Twilio](https://thirdpartyindex.com/vendors/twilio.md): Microsoft Azure Transcribes voice media into text via automated speech recognition as enabled by customers for specific Twilio Products and Services; Microsoft …
- [Twingate](https://thirdpartyindex.com/vendors/twingate.md): Customer communications system (Microsoft Teams) and office apps
- [Twinit](https://thirdpartyindex.com/vendors/twinit.md): Identity management (Entra ID staff authentication), key storage, and network routing hubs.; Productivity and collaboration suite (email, document storage, cale…
- [Two Circles (GB)](https://thirdpartyindex.com/vendors/two-circles-gb.md)
- [TypeSafe AI](https://thirdpartyindex.com/vendors/typesafe-ai.md): Cloud provider
- [Ubiq Security](https://thirdpartyindex.com/vendors/ubiq-security.md): SharePoint, email, teams, Azure
- [UltraDNS](https://thirdpartyindex.com/vendors/ultradns.md): Provide advertising services; Provide cloud infrastructure, collaboration, source code management, email, and productivity services
- [Umbraco](https://thirdpartyindex.com/vendors/umbraco.md): Hosting platform (Umbraco offers multiple hosting locations dedicated to the specific project)
- [Unbabel](https://thirdpartyindex.com/vendors/unbabel.md): Cloud computing services provider / machine translation
- [Unblocked](https://thirdpartyindex.com/vendors/unblocked.md): Azure hosted OpenAI LLM
- [Unifyapps](https://thirdpartyindex.com/vendors/unifyapps.md): Hosting Subprocessor
- [Unily](https://thirdpartyindex.com/vendors/unily.md): Hosting (file storage and database) and Microsoft AI services (Azure OpenAI) for document extraction, chat, content generation, semantic search and image genera…
- [Uniphore](https://thirdpartyindex.com/vendors/uniphore.md): Cloud hosting, data storage and infrastructure support services
- [Unique AI](https://thirdpartyindex.com/vendors/unique-ai.md): Infrastructure, Cognitive Services, Azure OpenAI services, Emails
- [Unity](https://thirdpartyindex.com/vendors/unity.md)
- [UNLESS](https://thirdpartyindex.com/vendors/unless.md): Microsoft Azure cloud services
- [Unosecur](https://thirdpartyindex.com/vendors/unosecur.md)
- [Unstructured](https://thirdpartyindex.com/vendors/unstructured.md): Cloud infrastructure
- [Upstage](https://thirdpartyindex.com/vendors/upstage.md)
- [Usercentrics](https://thirdpartyindex.com/vendors/usercentrics.md)
- [Userlane](https://thirdpartyindex.com/vendors/userlane.md): Data Center Management (Userlane serves all its applications from Microsoft Azure Datacenters)
- [Vacation Tracker](https://thirdpartyindex.com/vendors/vacation-tracker.md): Administrative; Email and chat services
- [Validis](https://thirdpartyindex.com/vendors/validis.md): Cloud Hosting
- [Vanta](https://thirdpartyindex.com/vendors/vanta.md): Application AI Functionality; Vanta AI
- [Vapi](https://thirdpartyindex.com/vendors/vapi.md): Servers. If used, Transcriber, LLM, Voice.
- [Varonis](https://thirdpartyindex.com/vendors/varonis.md): Azure – Cloud service provider, DevOps App platforms (TFS/ADO) -Customer support management and collaboration Sentinel - Security information and event manage…
- [VAT IT](https://thirdpartyindex.com/vendors/vat-it.md): Hosting servers
- [Vectra AI](https://thirdpartyindex.com/vendors/vectra-ai.md): Cloud hosting and storage
- [Veeam Software](https://thirdpartyindex.com/vendors/veeam-software.md): Provides Microsoft Azure Services and infrastructure used for Veeam cloud services
- [Veeva Systems](https://thirdpartyindex.com/vendors/veeva-systems.md): Microsoft Azure cloud services for Veeva Digital Events (networking, computing, storage, and other solution offerings); SharePoint Online: cloud-based document …
- [Velocity T.K.](https://thirdpartyindex.com/vendors/velocity-t-k.md): Cloud Service Provider: Used to support AI-driven capabilities; such as language understanding and text analytics, enabling BigPanda; to enhance automation and …
- [VeloDB](https://thirdpartyindex.com/vendors/velodb.md): Customer support email; Processes customer communications submitted through support channels.; Cloud hosting and infrastructure; Provides cloud hosting and infr…
- [Vendr](https://thirdpartyindex.com/vendors/vendr.md): Data Backups, OCR and text transformation
- [Veracross](https://thirdpartyindex.com/vendors/veracross.md): Applications, Services, and Support; Business Operations; IaaS, database storage, identity management, SIEM
- [Vercel](https://thirdpartyindex.com/vendors/vercel.md): Hosting, storage and generative AI services
- [Viktor](https://thirdpartyindex.com/vendors/viktor.md): Core platform integration when Viktor is installed in Microsoft Teams; Integrations (if enabled by customer)
- [Vimeo](https://thirdpartyindex.com/vendors/vimeo.md): Natural language processing
- [VirtualSpeech](https://thirdpartyindex.com/vendors/virtualspeech.md): Azure OpenAI, for EU customers on request
- [Virtuozzo](https://thirdpartyindex.com/vendors/virtuozzo.md): Mail service, Call and Video Conferencing Service, Recording selected support sessions with customers
- [Visier](https://thirdpartyindex.com/vendors/visier.md): Generative AI solutions; Infrastructure as a Service
- [Vistaly](https://thirdpartyindex.com/vendors/vistaly.md): We use Microsoft to facilitate secure login through Microsoft's OAuth service. This allows users to log in to our platform using their Microsoft work, school, o…
- [Visualping](https://thirdpartyindex.com/vendors/visualping.md): AI change analysis
- [Vivantio](https://thirdpartyindex.com/vendors/vivantio.md): Hosting Providers
- [Vivox](https://thirdpartyindex.com/vendors/vivox.md)
- [vizrm](https://thirdpartyindex.com/vendors/vizrm.md): Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (EEA). Function: hosting and infrastructure…
- [Volantio](https://thirdpartyindex.com/vendors/volantio.md): Data Hosting & Processing
- [WalkMe](https://thirdpartyindex.com/vendors/walkme.md): Hosting infrastructure services; AI services (only in use in connection with WalkMe backend or optional Genertaive AI features)
- [Walnut](https://thirdpartyindex.com/vendors/walnut.md): Hosting
- [wandb](https://thirdpartyindex.com/vendors/wandb.md)
- [Warp](https://thirdpartyindex.com/vendors/warp.md)
- [WatchGuard Technologies](https://thirdpartyindex.com/vendors/watchguard-technologies.md): Cloud infrastructure (hosts certain applications).; Hosts certain WatchGuard applications (such as WatchGuard ID and licensing systems) that customers access.
- [Weaviate](https://thirdpartyindex.com/vendors/weaviate.md): Infrastructure; Infrastructure and hosting provider
- [Web3Forms](https://thirdpartyindex.com/vendors/web3forms.md): Product analytics and session replay to diagnose usability issues; may capture on-screen interaction data
- [WebFX](https://thirdpartyindex.com/vendors/webfx.md): Digital Marketing; Responsible for Cloud Infrastructure and Services.
- [Wellspring](https://thirdpartyindex.com/vendors/wellspring.md): Email and document storage; DocGen Service, IEdison Service, and Agreements AI Service; Hosting; Hosting, integration transport
- [Welocalize](https://thirdpartyindex.com/vendors/welocalize.md): Corporate Email and Collaboration platform
- [Whatfix](https://thirdpartyindex.com/vendors/whatfix.md): Hosting Providers
- [Whova](https://thirdpartyindex.com/vendors/whova.md): Video Conference Software
- [windsor.ai](https://thirdpartyindex.com/vendors/windsor-ai.md): Advertising, Analytics, and Marketing
- [WingRep](https://thirdpartyindex.com/vendors/wingrep.md): Calendar Integration, Authentication, and Meeting Platform
- [wiz.io](https://thirdpartyindex.com/vendors/wiz-io.md)
- [Wolfia](https://thirdpartyindex.com/vendors/wolfia.md): API-based AI inference only (Azure OpenAI Service, Azure AI Foundry, Azure AI Document Intelligence). No customer data is hosted or stored on Azure infrastructu…
- [WonderBotz](https://thirdpartyindex.com/vendors/wonderbotz.md): Cloud hosting and infrastructure
- [Wonderful](https://thirdpartyindex.com/vendors/wonderful.md): Cloud provider; Data storage, cloud hosting, and model serving
- [Workable](https://thirdpartyindex.com/vendors/workable.md): To provide AI model inference services.
- [Workato](https://thirdpartyindex.com/vendors/workato.md): Provision of Agent Studio, Workato Go, Intelligent Document Processing (IDP by Workato) and Agent X Support. Only applicable for customers who opt in to use the…
- [Workboard](https://thirdpartyindex.com/vendors/workboard.md): App Functionality – Hosting provider (Azure)
- [Workleap](https://thirdpartyindex.com/vendors/workleap.md): All Products and Workleap AI and AI Features; General cloud services (data hosting) and hosting and processing of data in connection with AI inference services …
- [WorkRamp](https://thirdpartyindex.com/vendors/workramp.md)
- [WorkSpan](https://thirdpartyindex.com/vendors/workspan.md): Cloud Infrastructure and hosting services
- [Workspot](https://thirdpartyindex.com/vendors/workspot.md): Customer contact information; Email, Web conferencing; Infrastructure as a Service
- [WP Engine](https://thirdpartyindex.com/vendors/wp-engine.md): Data Hosting
- [Wrike](https://thirdpartyindex.com/vendors/wrike.md)
- [Writer](https://thirdpartyindex.com/vendors/writer.md): Infrastructure
- [WSO2](https://thirdpartyindex.com/vendors/wso2.md): To host WSO2 public cloud services.
- [Xactus](https://thirdpartyindex.com/vendors/xactus.md)
- [Xero](https://thirdpartyindex.com/vendors/xero.md): Cloud infrastructure service provider
- [XING](https://thirdpartyindex.com/vendors/xing.md)
- [Xitoring](https://thirdpartyindex.com/vendors/xitoring.md): Hosting of the Xitoring platform. Does not access Customer Personal Data in the ordinary course; data is encrypted at rest and in transit.
- [Yeastar](https://thirdpartyindex.com/vendors/yeastar.md): Provide LLM-powered Call Summary services¹
- [Yellow.ai](https://thirdpartyindex.com/vendors/yellow-ai.md): Azure Open AI; Text to speech & Speech to text
- [Yoodli](https://thirdpartyindex.com/vendors/yoodli.md): AI Services
- [You.com](https://thirdpartyindex.com/vendors/you-com.md): Cloud hosting and infrastructure; Cloud provider
- [Younium](https://thirdpartyindex.com/vendors/younium.md): Provider of the cloud computing platform
- [YouScan](https://thirdpartyindex.com/vendors/youscan.md): Infrastructure Hosting
- [Yousign](https://thirdpartyindex.com/vendors/yousign.md): Cloud infrastructure and storage services
- [Yugabyte](https://thirdpartyindex.com/vendors/yugabyte.md): Data storage and processing
- [Yunu](https://thirdpartyindex.com/vendors/yunu.md): Office365 Accounts via Business Standard - Email - Teams Chat - Azure Active Directory
- [YuzeData](https://thirdpartyindex.com/vendors/yuzedata.md): Communication, document management, and productivity tools; Microsoft 365 is used for internal communication, email, file storage, and collaboration across team…
- [Zakeke](https://thirdpartyindex.com/vendors/zakeke.md): Data storage, Image processing
- [Zapier](https://thirdpartyindex.com/vendors/zapier.md): Artificial intelligence provider
- [ZeeMee](https://thirdpartyindex.com/vendors/zeemee.md)
- [Zendesk](https://thirdpartyindex.com/vendors/zendesk.md): Hosts large language models used to provide generative artificial intelligence and natural language processing services.
- [Zeplin](https://thirdpartyindex.com/vendors/zeplin.md): Zeplin uses Microsoft cookies to collect user information to engage in marketing efforts.
- [ZeroBounce](https://thirdpartyindex.com/vendors/zerobounce.md): Ad placement
- [Zesty](https://thirdpartyindex.com/vendors/zesty.md): Hosting
- [Zettagrid](https://thirdpartyindex.com/vendors/zettagrid.md): Office productivity and email
- [Zilliz](https://thirdpartyindex.com/vendors/zilliz.md): Cloud infrastructure services, data storage, and hosting
- [ZINFI](https://thirdpartyindex.com/vendors/zinfi.md): UPM AI Model Provider; Hosting & Infrastructure; UPM Reporting Solutions
- [Zip](https://thirdpartyindex.com/vendors/zip.md): Zip utilizes Microsoft Azure for customers enrolled in AI assisted features and functionality. If enabled by customers, Microsoft Azure may process customer dat…
- [zkipster](https://thirdpartyindex.com/vendors/zkipster.md)
- [Zoom](https://thirdpartyindex.com/vendors/zoom.md): Cloud Service Provider.; Microsoft’s Azure Speech (Speech-to-Text, Text-to-Speech, Speech Translation, Voice Cloning), Intelligent Features Service Provider.
- [ZS](https://thirdpartyindex.com/vendors/zs.md): Cloud hosting and service provider for client data storage; Cloud hosting provider for clients in China; E-mail and SharePoint
- [Zuora](https://thirdpartyindex.com/vendors/zuora.md): Zuora uses Microsoft's Power BI tools as part of Zuora Revenue Analytics to enable customers to create interactive visualizations and dashboards from their aggr…
- [Zyte](https://thirdpartyindex.com/vendors/zyte.md): Analytics and documentation tool

## Security record

CISA's Known Exploited Vulnerabilities catalog lists 391 vulnerabilities in its software:

- CVE-2026-124194 (Office), listed 2026-11-10: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
- CVE-2026-96951 (Windows), listed 2026-10-13: Microsoft Windows Command Injection Vulnerability
- CVE-2026-65660 (SharePoint), listed 2026-09-25: Microsoft SharePoint Code Injection Vulnerability
- CVE-2026-81963 (Windows), listed 2026-09-08: Microsoft Windows Link Following Vulnerability
- CVE-2026-85880 (Windows), listed 2026-09-08: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
- CVE-2019-1068 (SQL Server), listed 2026-08-26: Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-33824 (Internet Key Exchange (IKE) Service Extensions), listed 2026-08-18: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
- CVE-2026-55040 (SharePoint), listed 2026-08-18: Microsoft SharePoint Weak Authentication Vulnerability
- CVE-2026-68820 (Windows Ancillary Function Driver for WinSock), listed 2026-08-11: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
- CVE-2026-50522 (SharePoint), listed 2026-07-22: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- CVE-2026-58644 (SharePoint), listed 2026-07-16: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- CVE-2026-56155 (Active Directory Federation Services), listed 2026-07-14: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
- CVE-2026-56164 (SharePoint Server), listed 2026-07-14: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
- CVE-2026-45659 (SharePoint Server), listed 2026-07-01: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability (known ransomware use)
- CVE-2008-4250 (Windows), listed 2026-05-20: Microsoft Windows Buffer Overflow Vulnerability
- CVE-2009-1537 (DirectX), listed 2026-05-20: Microsoft DirectX NULL Byte Overwrite Vulnerability
- CVE-2010-0249 (Internet Explorer), listed 2026-05-20: Microsoft Internet Explorer Use-After-Free Vulnerability
- CVE-2010-0806 (Internet Explorer), listed 2026-05-20: Microsoft Internet Explorer Use-After-Free Vulnerability
- CVE-2026-41091 (Defender), listed 2026-05-20: Microsoft Defender Link Following Vulnerability
- CVE-2026-45498 (Defender), listed 2026-05-20: Microsoft Defender Denial of Service Vulnerability
- CVE-2026-42897 (Microsoft), listed 2026-05-15: Microsoft Exchange Server Cross-Site Scripting Vulnerability
- CVE-2026-32202 (Windows), listed 2026-04-28: Microsoft Windows Protection Mechanism Failure Vulnerability
- CVE-2026-33825 (Defender), listed 2026-04-22: Microsoft Defender Insufficient Granularity of Access Control Vulnerability (known ransomware use)
- CVE-2009-0238 (Office), listed 2026-04-14: Microsoft Office Remote Code Execution
- CVE-2026-32201 (SharePoint Server), listed 2026-04-14: Microsoft SharePoint Server Improper Input Validation Vulnerability
- CVE-2012-1854 (Visual Basic for Applications (VBA)), listed 2026-04-13: Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
- CVE-2023-21529 (Exchange Server), listed 2026-04-13: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability (known ransomware use)
- CVE-2023-36424 (Windows), listed 2026-04-13: Microsoft Windows Out-of-Bounds Read Vulnerability
- CVE-2025-60710 (Windows), listed 2026-04-13: Microsoft Windows Link Following Vulnerability (known ransomware use)
- CVE-2026-20963 (SharePoint), listed 2026-03-18: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- CVE-2008-0015 (Windows), listed 2026-02-17: Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
- CVE-2024-43468 (Configuration Manager), listed 2026-02-12: Microsoft Configuration Manager SQL Injection Vulnerability
- CVE-2026-21510 (Windows), listed 2026-02-10: Microsoft Windows Shell Protection Mechanism Failure Vulnerability
- CVE-2026-21513 (Windows), listed 2026-02-10: Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
- CVE-2026-21514 (Office), listed 2026-02-10: Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
- CVE-2026-21519 (Windows), listed 2026-02-10: Microsoft Windows Type Confusion Vulnerability
- CVE-2026-21525 (Windows), listed 2026-02-10: Microsoft Windows NULL Pointer Dereference Vulnerability
- CVE-2026-21533 (Windows), listed 2026-02-10: Microsoft Windows Improper Privilege Management Vulnerability
- CVE-2026-21509 (Office), listed 2026-01-26: Microsoft Office Security Feature Bypass Vulnerability
- CVE-2026-20805 (Windows), listed 2026-01-13: Microsoft Windows Information Disclosure Vulnerability
- CVE-2009-0556 (Office), listed 2026-01-07: Microsoft Office PowerPoint Code Injection Vulnerability
- CVE-2025-62221 (Windows), listed 2025-12-09: Microsoft Windows Use After Free Vulnerability
- CVE-2025-62215 (Windows), listed 2025-11-12: Microsoft Windows Race Condition Vulnerability
- CVE-2025-59287 (Windows), listed 2025-10-24: Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
- CVE-2025-33073 (Windows), listed 2025-10-20: Microsoft Windows SMB Client Improper Access Control Vulnerability
- CVE-2025-24990 (Windows), listed 2025-10-14: Microsoft Windows Untrusted Pointer Dereference Vulnerability
- CVE-2025-59230 (Windows), listed 2025-10-14: Microsoft Windows Improper Access Control Vulnerability
- CVE-2010-3962 (Internet Explorer), listed 2025-10-06: Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
- CVE-2011-3402 (Windows), listed 2025-10-06: Microsoft Windows Remote Code Execution Vulnerability
- CVE-2013-3918 (Windows), listed 2025-10-06: Microsoft Windows Out-of-Bounds Write Vulnerability
- CVE-2021-43226 (Windows), listed 2025-10-06: Microsoft Windows Privilege Escalation Vulnerability (known ransomware use)
- CVE-2007-0671 (Office), listed 2025-08-12: Microsoft Office Excel Remote Code Execution Vulnerability
- CVE-2013-3893 (Internet Explorer), listed 2025-08-12: Microsoft Internet Explorer Resource Management Errors Vulnerability
- CVE-2025-49704 (SharePoint), listed 2025-07-22: Microsoft SharePoint Code Injection Vulnerability (known ransomware use)
- CVE-2025-49706 (SharePoint), listed 2025-07-22: Microsoft SharePoint Improper Authentication Vulnerability (known ransomware use)
- CVE-2025-53770 (SharePoint), listed 2025-07-20: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (known ransomware use)
- CVE-2025-33053 (Windows), listed 2025-06-10: Microsoft Windows External Control of File Name or Path Vulnerability
- CVE-2025-30397 (Windows), listed 2025-05-13: Microsoft Windows Scripting Engine Type Confusion Vulnerability
- CVE-2025-30400 (Windows), listed 2025-05-13: Microsoft Windows DWM Core Library Use-After-Free Vulnerability
- CVE-2025-32701 (Windows), listed 2025-05-13: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
- CVE-2025-32706 (Windows), listed 2025-05-13: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
- CVE-2025-32709 (Windows), listed 2025-05-13: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
- CVE-2025-24054 (Windows), listed 2025-04-17: Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
- CVE-2025-29824 (Windows), listed 2025-04-08: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability (known ransomware use)
- CVE-2025-24983 (Windows), listed 2025-03-11: Microsoft Windows Win32k Use-After-Free Vulnerability
- CVE-2025-24984 (Windows), listed 2025-03-11: Microsoft Windows NTFS Information Disclosure Vulnerability
- CVE-2025-24985 (Windows), listed 2025-03-11: Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
- CVE-2025-24991 (Windows), listed 2025-03-11: Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
- CVE-2025-24993 (Windows), listed 2025-03-11: Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
- CVE-2025-26633 (Windows), listed 2025-03-11: Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability (known ransomware use)
- CVE-2018-8639 (Windows), listed 2025-03-03: Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability (known ransomware use)
- CVE-2024-49035 (Partner Center), listed 2025-02-25: Microsoft Partner Center Improper Access Control Vulnerability
- CVE-2025-24989 (Power Pages), listed 2025-02-21: Microsoft Power Pages Improper Access Control Vulnerability
- CVE-2025-21391 (Windows), listed 2025-02-11: Microsoft Windows Storage Link Following Vulnerability
- CVE-2025-21418 (Windows), listed 2025-02-11: Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
- CVE-2024-21413 (Office Outlook), listed 2025-02-06: Microsoft Outlook Improper Input Validation Vulnerability
- CVE-2024-29059 (.NET Framework), listed 2025-02-04: Microsoft .NET Framework Information Disclosure Vulnerability
- CVE-2025-21333 (Windows), listed 2025-01-14: Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
- CVE-2025-21334 (Windows), listed 2025-01-14: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
- CVE-2025-21335 (Windows), listed 2025-01-14: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
- CVE-2024-35250 (Windows), listed 2024-12-16: Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
- CVE-2024-49138 (Windows), listed 2024-12-10: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
- CVE-2024-43451 (Windows), listed 2024-11-12: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
- CVE-2024-49039 (Windows), listed 2024-11-12: Microsoft Windows Task Scheduler Privilege Escalation Vulnerability (known ransomware use)
- CVE-2024-38094 (SharePoint), listed 2024-10-22: Microsoft SharePoint Deserialization Vulnerability (known ransomware use)
- CVE-2024-30088 (Windows), listed 2024-10-15: Microsoft Windows Kernel TOCTOU Race Condition Vulnerability (known ransomware use)
- CVE-2024-43572 (Windows), listed 2024-10-08: Microsoft Windows Management Console Remote Code Execution Vulnerability
- CVE-2024-43573 (Windows), listed 2024-10-08: Microsoft Windows MSHTML Platform Spoofing Vulnerability
- CVE-2020-0618 (SQL Server), listed 2024-09-18: Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability (known ransomware use)
- CVE-2024-43461 (Windows), listed 2024-09-16: Microsoft Windows MSHTML Platform Spoofing Vulnerability
- CVE-2024-38014 (Windows), listed 2024-09-10: Microsoft Windows Installer Improper Privilege Management Vulnerability
- CVE-2024-38217 (Windows), listed 2024-09-10: Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
- CVE-2024-38226 (Publisher), listed 2024-09-10: Microsoft Publisher Protection Mechanism Failure Vulnerability
- CVE-2021-31196 (Exchange Server), listed 2024-08-21: Microsoft Exchange Server Information Disclosure Vulnerability
- CVE-2024-38106 (Windows), listed 2024-08-13: Microsoft Windows Kernel Privilege Escalation Vulnerability
- CVE-2024-38107 (Windows), listed 2024-08-13: Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
- CVE-2024-38178 (Windows), listed 2024-08-13: Microsoft Windows Scripting Engine Memory Corruption Vulnerability
- CVE-2024-38189 (Project), listed 2024-08-13: Microsoft Project Remote Code Execution Vulnerability
- CVE-2024-38193 (Windows), listed 2024-08-13: Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
- CVE-2024-38213 (Windows), listed 2024-08-13: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
- CVE-2018-0824 (Windows), listed 2024-08-05: Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
- CVE-2012-4792 (Internet Explorer), listed 2024-07-23: Microsoft Internet Explorer Use-After-Free Vulnerability
- CVE-2024-38080 (Windows), listed 2024-07-09: Microsoft Windows Hyper-V Privilege Escalation Vulnerability
- CVE-2024-38112 (Windows), listed 2024-07-09: Microsoft Windows MSHTML Platform Spoofing Vulnerability
- CVE-2024-26169 (Windows), listed 2024-06-13: Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability (known ransomware use)
- CVE-2024-30040 (Windows), listed 2024-05-14: Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
- CVE-2024-30051 (DWM Core Library), listed 2024-05-14: Microsoft DWM Core Library Privilege Escalation Vulnerability (known ransomware use)
- CVE-2024-29988 (SmartScreen Prompt), listed 2024-04-30: Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
- CVE-2022-38028 (Windows), listed 2024-04-23: Microsoft Windows Print Spooler Privilege Escalation Vulnerability
- CVE-2023-24955 (SharePoint Server), listed 2024-03-26: Microsoft SharePoint Server Code Injection Vulnerability (known ransomware use)
- CVE-2024-21338 (Windows), listed 2024-03-04: Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability (known ransomware use)
- CVE-2023-29360 (Streaming Service), listed 2024-02-29: Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
- CVE-2024-21410 (Exchange Server), listed 2024-02-15: Microsoft Exchange Server Privilege Escalation Vulnerability
- CVE-2024-21351 (Windows), listed 2024-02-13: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
- CVE-2024-21412 (Windows), listed 2024-02-13: Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability (known ransomware use)
- CVE-2023-29357 (SharePoint Server), listed 2024-01-10: Microsoft SharePoint Server Privilege Escalation Vulnerability (known ransomware use)
- CVE-2023-36584 (Windows), listed 2023-11-16: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
- CVE-2023-36025 (Windows), listed 2023-11-14: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
- CVE-2023-36033 (Windows), listed 2023-11-14: Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
- CVE-2023-36036 (Windows), listed 2023-11-14: Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability
- CVE-2023-36563 (WordPad), listed 2023-10-10: Microsoft WordPad Information Disclosure Vulnerability
- CVE-2023-41763 (Skype for Business), listed 2023-10-10: Microsoft Skype for Business Privilege Escalation Vulnerability
- CVE-2023-28229 (Windows CNG Key Isolation Service), listed 2023-10-04: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
- CVE-2023-36761 (Word), listed 2023-09-12: Microsoft Word Information Disclosure Vulnerability
- CVE-2023-36802 (Streaming Service Proxy), listed 2023-09-12: Microsoft Streaming Service Proxy Privilege Escalation Vulnerability
- CVE-2023-38180 (.NET Core and Visual Studio), listed 2023-08-09: Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
- CVE-2023-36884 (Windows), listed 2023-07-17: Microsoft Windows Search Remote Code Execution Vulnerability (known ransomware use)
- CVE-2023-32046 (Windows), listed 2023-07-11: Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability
- CVE-2023-32049 (Windows), listed 2023-07-11: Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability
- CVE-2023-35311 (Outlook), listed 2023-07-11: Microsoft Outlook Security Feature Bypass Vulnerability
- CVE-2023-36874 (Windows), listed 2023-07-11: Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability
- CVE-2016-0165 (Win32k), listed 2023-06-22: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2023-29336 (Win32k), listed 2023-05-09: Microsoft Win32K Privilege Escalation Vulnerability
- CVE-2023-28252 (Windows), listed 2023-04-11: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-1388 (Windows), listed 2023-04-07: Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability (known ransomware use)
- CVE-2013-3163 (Internet Explorer), listed 2023-03-30: Microsoft Internet Explorer Memory Corruption Vulnerability
- CVE-2023-23397 (Office), listed 2023-03-14: Microsoft Office Outlook Privilege Escalation Vulnerability
- CVE-2023-24880 (Windows), listed 2023-03-14: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (known ransomware use)
- CVE-2023-21715 (Office), listed 2023-02-14: Microsoft Office Publisher Security Feature Bypass Vulnerability
- CVE-2023-21823 (Windows), listed 2023-02-14: Microsoft Windows Graphic Component Privilege Escalation Vulnerability
- CVE-2023-23376 (Windows), listed 2023-02-14: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (known ransomware use)
- CVE-2022-41080 (Exchange Server), listed 2023-01-10: Microsoft Exchange Server Privilege Escalation Vulnerability (known ransomware use)
- CVE-2023-21674 (Windows), listed 2023-01-10: Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
- CVE-2022-44698 (Defender), listed 2022-12-13: Microsoft Defender SmartScreen Security Feature Bypass Vulnerability (known ransomware use)
- CVE-2022-41049 (Windows), listed 2022-11-14: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
- CVE-2022-41073 (Windows), listed 2022-11-08: Microsoft Windows Print Spooler Privilege Escalation Vulnerability (known ransomware use)
- CVE-2022-41091 (Windows), listed 2022-11-08: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability (known ransomware use)
- CVE-2022-41125 (Windows), listed 2022-11-08: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
- CVE-2022-41128 (Windows), listed 2022-11-08: Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
- CVE-2022-41033 (Windows COM+ Event System Service), listed 2022-10-11: Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability
- CVE-2022-41040 (Exchange Server), listed 2022-09-30: Microsoft Exchange Server Server-Side Request Forgery Vulnerability (known ransomware use)
- CVE-2022-41082 (Exchange Server), listed 2022-09-30: Microsoft Exchange Server Remote Code Execution Vulnerability (known ransomware use)
- CVE-2010-2568 (Windows), listed 2022-09-15: Microsoft Windows Remote Code Execution Vulnerability
- CVE-2022-37969 (Windows), listed 2022-09-14: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (known ransomware use)
- CVE-2022-21971 (Windows), listed 2022-08-18: Microsoft Windows Runtime Remote Code Execution Vulnerability
- CVE-2022-26923 (Active Directory), listed 2022-08-18: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
- CVE-2022-34713 (Windows), listed 2022-08-09: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
- CVE-2022-22047 (Windows), listed 2022-07-12: Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability
- CVE-2022-26925 (Windows), listed 2022-07-01: Microsoft Windows LSA Spoofing Vulnerability
- CVE-2022-30190 (Windows), listed 2022-06-14: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability (known ransomware use)
- CVE-2006-2492 (Word), listed 2022-06-08: Microsoft Word Malformed Object Pointer Vulnerability
- CVE-2009-0557 (Office), listed 2022-06-08: Microsoft Office Object Record Corruption Vulnerability
- CVE-2009-0563 (Office), listed 2022-06-08: Microsoft Office Buffer Overflow Vulnerability
- CVE-2010-2572 (PowerPoint), listed 2022-06-08: Microsoft PowerPoint Buffer Overflow Vulnerability
- CVE-2012-0151 (Windows), listed 2022-06-08: Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
- CVE-2012-1889 (XML Core Services), listed 2022-06-08: Microsoft XML Core Services Memory Corruption Vulnerability
- CVE-2012-4969 (Internet Explorer), listed 2022-06-08: Microsoft Internet Explorer Use-After-Free Vulnerability
- CVE-2013-1331 (Office), listed 2022-06-08: Microsoft Office Buffer Overflow Vulnerability
- CVE-2013-0074 (Silverlight), listed 2022-05-25: Microsoft Silverlight Double Dereference Vulnerability (known ransomware use)
- CVE-2013-3896 (Silverlight), listed 2022-05-25: Microsoft Silverlight Information Disclosure Vulnerability
- CVE-2013-7331 (Internet Explorer), listed 2022-05-25: Microsoft Internet Explorer Information Disclosure Vulnerability
- CVE-2014-2817 (Internet Explorer), listed 2022-05-25: Microsoft Internet Explorer Privilege Escalation Vulnerability
- CVE-2014-4077 (Input Method Editor (IME) Japanese), listed 2022-05-25: Microsoft IME Japanese Privilege Escalation Vulnerability
- CVE-2014-4123 (Internet Explorer), listed 2022-05-25: Microsoft Internet Explorer Privilege Escalation Vulnerability
- CVE-2014-4148 (Windows), listed 2022-05-25: Microsoft Windows Remote Code Execution Vulnerability
- CVE-2015-0016 (Windows), listed 2022-05-25: Microsoft Windows TS WebProxy Directory Traversal Vulnerability
- CVE-2015-0071 (Internet Explorer), listed 2022-05-25: Microsoft Internet Explorer ASLR Bypass Vulnerability
- CVE-2015-1671 (Windows), listed 2022-05-25: Microsoft Windows Remote Code Execution Vulnerability
- CVE-2015-1769 (Windows), listed 2022-05-25: Microsoft Windows Mount Manager Privilege Escalation Vulnerability
- CVE-2015-2360 (Win32k), listed 2022-05-25: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2015-2425 (Internet Explorer), listed 2022-05-25: Microsoft Internet Explorer Memory Corruption Vulnerability
- CVE-2015-6175 (Windows), listed 2022-05-25: Microsoft Windows Kernel Privilege Escalation Vulnerability
- CVE-2016-0034 (Silverlight), listed 2022-05-25: Microsoft Silverlight Runtime Remote Code Execution Vulnerability (known ransomware use)
- CVE-2016-3393 (Windows), listed 2022-05-25: Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
- CVE-2016-7256 (Windows), listed 2022-05-25: Microsoft Windows Open Type Font Remote Code Execution Vulnerability
- CVE-2016-0162 (Internet Explorer), listed 2022-05-24: Microsoft Internet Explorer Information Disclosure Vulnerability
- CVE-2016-3298 (Internet Explorer), listed 2022-05-24: Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
- CVE-2016-3351 (Internet Explorer and Edge), listed 2022-05-24: Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (known ransomware use)
- CVE-2017-0005 (Windows), listed 2022-05-24: Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability
- CVE-2017-0022 (XML Core Services), listed 2022-05-24: Microsoft XML Core Services Information Disclosure Vulnerability
- CVE-2017-0147 (SMBv1 server), listed 2022-05-24: Microsoft Windows SMBv1 Information Disclosure Vulnerability (known ransomware use)
- CVE-2017-0149 (Internet Explorer), listed 2022-05-24: Microsoft Internet Explorer Memory Corruption Vulnerability
- CVE-2017-0210 (Internet Explorer), listed 2022-05-24: Microsoft Internet Explorer Privilege Escalation Vulnerability
- CVE-2017-8543 (Windows), listed 2022-05-24: Microsoft Windows Search Remote Code Execution Vulnerability
- CVE-2018-8611 (Windows), listed 2022-05-24: Microsoft Windows Kernel Privilege Escalation Vulnerability
- CVE-2018-8589 (Win32k), listed 2022-05-23: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2019-0676 (Internet Explorer), listed 2022-05-23: Microsoft Internet Explorer Information Disclosure Vulnerability
- CVE-2019-0703 (Windows), listed 2022-05-23: Microsoft Windows SMB Information Disclosure Vulnerability
- CVE-2019-0880 (Windows), listed 2022-05-23: Microsoft Windows Privilege Escalation Vulnerability
- CVE-2019-1130 (Windows), listed 2022-05-23: Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-1385 (Windows), listed 2022-05-23: Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability (known ransomware use)
- CVE-2020-0638 (Update Notification Manager), listed 2022-05-23: Microsoft Update Notification Manager Privilege Escalation Vulnerability (known ransomware use)
- CVE-2020-1027 (Windows), listed 2022-05-23: Microsoft Windows Kernel Privilege Escalation Vulnerability
- CVE-2014-0322 (Internet Explorer), listed 2022-05-04: Microsoft Internet Explorer Use-After-Free Vulnerability
- CVE-2014-4113 (Win32k), listed 2022-05-04: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2021-40450 (Win32k), listed 2022-04-25: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2021-41357 (Win32k), listed 2022-04-25: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2022-21919 (Windows), listed 2022-04-25: Microsoft Windows User Profile Service Privilege Escalation Vulnerability
- CVE-2022-26904 (Windows), listed 2022-04-25: Microsoft Windows User Profile Service Privilege Escalation Vulnerability
- CVE-2022-22718 (Windows), listed 2022-04-19: Microsoft Windows Print Spooler Privilege Escalation Vulnerability
- CVE-2015-2502 (Internet Explorer), listed 2022-04-13: Microsoft Internet Explorer Memory Corruption Vulnerability
- CVE-2022-24521 (Windows), listed 2022-04-13: Microsoft Windows CLFS Driver Privilege Escalation Vulnerability (known ransomware use)
- CVE-2021-42278 (Active Directory), listed 2022-04-11: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (known ransomware use)
- CVE-2021-42287 (Active Directory), listed 2022-04-11: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (known ransomware use)
- CVE-2017-0148 (SMBv1 server), listed 2022-04-06: Microsoft SMBv1 Server Remote Code Execution Vulnerability (known ransomware use)
- CVE-2021-31166 (HTTP Protocol Stack), listed 2022-04-06: Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
- CVE-2021-34484 (Windows), listed 2022-03-31: Microsoft Windows User Profile Service Privilege Escalation Vulnerability
- CVE-2010-4398 (Windows), listed 2022-03-28: Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
- CVE-2011-2005 (Ancillary Function Driver (afd.sys)), listed 2022-03-28: Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
- CVE-2012-2539 (Word), listed 2022-03-28: Microsoft Word Remote Code Execution Vulnerability
- CVE-2013-2551 (Internet Explorer), listed 2022-03-28: Microsoft Internet Explorer Use-After-Free Vulnerability (known ransomware use)
- CVE-2013-3660 (Win32k), listed 2022-03-28: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2015-1770 (Office), listed 2022-03-28: Microsoft Office Uninitialized Memory Use Vulnerability
- CVE-2015-2419 (Internet Explorer), listed 2022-03-28: Microsoft Internet Explorer Memory Corruption Vulnerability
- CVE-2015-2426 (Windows), listed 2022-03-28: Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
- CVE-2016-0040 (Windows), listed 2022-03-28: Microsoft Windows Kernel Privilege Escalation Vulnerability
- CVE-2016-0151 (Client-Server Run-time Subsystem (CSRSS)), listed 2022-03-28: Microsoft Windows CSRSS Security Feature Bypass Vulnerability (known ransomware use)
- CVE-2016-0189 (Internet Explorer), listed 2022-03-28: Microsoft Internet Explorer Memory Corruption Vulnerability (known ransomware use)
- CVE-2016-7200 (Edge), listed 2022-03-28: Microsoft Edge Memory Corruption Vulnerability
- CVE-2016-7201 (Edge), listed 2022-03-28: Microsoft Edge Memory Corruption Vulnerability
- CVE-2017-0037 (Edge and Internet Explorer), listed 2022-03-28: Microsoft Edge and Internet Explorer Type Confusion Vulnerability
- CVE-2017-0059 (Internet Explorer), listed 2022-03-28: Microsoft Internet Explorer Information Disclosure Vulnerability
- CVE-2017-0213 (Windows), listed 2022-03-28: Microsoft Windows Privilege Escalation Vulnerability (known ransomware use)
- CVE-2018-8405 (DirectX Graphics Kernel (DXGKRNL)), listed 2022-03-28: Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability (known ransomware use)
- CVE-2018-8406 (DirectX Graphics Kernel (DXGKRNL)), listed 2022-03-28: Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability (known ransomware use)
- CVE-2018-8440 (Windows), listed 2022-03-28: Microsoft Windows Privilege Escalation Vulnerability (known ransomware use)
- CVE-2021-34486 (Windows), listed 2022-03-28: Microsoft Windows Event Tracing Privilege Escalation Vulnerability
- CVE-2021-38646 (Office), listed 2022-03-28: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability (known ransomware use)
- CVE-2014-6324 (Kerberos Key Distribution Center (KDC)), listed 2022-03-25: Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
- CVE-2014-6332 (Windows), listed 2022-03-25: Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
- CVE-2017-0146 (Windows), listed 2022-03-25: Microsoft Windows SMB Remote Code Execution Vulnerability (known ransomware use)
- CVE-2018-8373 (Internet Explorer Scripting Engine), listed 2022-03-25: Microsoft Scripting Engine Memory Corruption Vulnerability
- CVE-2018-8414 (Windows), listed 2022-03-25: Microsoft Windows Shell Remote Code Execution Vulnerability
- CVE-2019-0903 (Graphics Device Interface (GDI)), listed 2022-03-25: Microsoft GDI Remote Code Execution Vulnerability
- CVE-2022-21999 (Windows), listed 2022-03-25: Microsoft Windows Print Spooler Privilege Escalation Vulnerability (known ransomware use)
- CVE-2015-2546 (Win32k), listed 2022-03-15: Microsoft Win32k Memory Corruption Vulnerability (known ransomware use)
- CVE-2016-3309 (Windows), listed 2022-03-15: Microsoft Windows Kernel Privilege Escalation Vulnerability (known ransomware use)
- CVE-2017-0101 (Windows), listed 2022-03-15: Microsoft Windows Transaction Manager Privilege Escalation Vulnerability (known ransomware use)
- CVE-2018-8120 (Win32k), listed 2022-03-15: Microsoft Win32k Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-0543 (Windows), listed 2022-03-15: Microsoft Windows Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-0841 (Windows), listed 2022-03-15: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-1064 (Windows), listed 2022-03-15: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-1069 (Task Scheduler), listed 2022-03-15: Microsoft Task Scheduler Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-1129 (Windows), listed 2022-03-15: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-1132 (Win32k), listed 2022-03-15: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2019-1253 (Windows), listed 2022-03-15: Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-1315 (Windows), listed 2022-03-15: Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-1322 (Windows), listed 2022-03-15: Microsoft Windows Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-1405 (Windows), listed 2022-03-15: Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability (known ransomware use)
- CVE-2002-0367 (Windows), listed 2022-03-03: Microsoft Windows Privilege Escalation Vulnerability
- CVE-2004-0210 (Windows), listed 2022-03-03: Microsoft Windows Privilege Escalation Vulnerability
- CVE-2009-1123 (Windows), listed 2022-03-03: Microsoft Windows Improper Input Validation Vulnerability
- CVE-2009-3129 (Excel), listed 2022-03-03: Microsoft Excel Featheader Record Memory Corruption Vulnerability
- CVE-2010-0232 (Windows), listed 2022-03-03: Microsoft Windows Kernel Exception Handler Vulnerability
- CVE-2010-3333 (Office), listed 2022-03-03: Microsoft Office Stack-based Buffer Overflow Vulnerability
- CVE-2011-1889 (Forefront Threat Management Gateway (TMG)), listed 2022-03-03: Microsoft Forefront TMG Remote Code Execution Vulnerability
- CVE-2012-1856 (Office), listed 2022-03-03: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
- CVE-2013-1347 (Internet Explorer), listed 2022-03-03: Microsoft Internet Explorer Remote Code Execution Vulnerability
- CVE-2013-3897 (Internet Explorer), listed 2022-03-03: Microsoft Internet Explorer Use-After-Free Vulnerability
- CVE-2013-5065 (Windows), listed 2022-03-03: Microsoft Windows Kernel Privilege Escalation Vulnerability
- CVE-2014-4114 (Windows), listed 2022-03-03: Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
- CVE-2015-1642 (Office), listed 2022-03-03: Microsoft Office Memory Corruption Vulnerability
- CVE-2015-1701 (Win32k), listed 2022-03-03: Microsoft Win32k Privilege Escalation Vulnerability (known ransomware use)
- CVE-2015-2387 (ATM Font Driver), listed 2022-03-03: Microsoft ATM Font Driver Privilege Escalation Vulnerability
- CVE-2015-2424 (PowerPoint), listed 2022-03-03: Microsoft PowerPoint Memory Corruption Vulnerability
- CVE-2015-2545 (Office), listed 2022-03-03: Microsoft Office Malformed EPS File Vulnerability
- CVE-2016-0099 (Windows), listed 2022-03-03: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability (known ransomware use)
- CVE-2016-7193 (Office), listed 2022-03-03: Microsoft Office Memory Corruption Vulnerability
- CVE-2016-7262 (Excel), listed 2022-03-03: Microsoft Office Security Feature Bypass Vulnerability
- CVE-2017-0001 (Graphics Device Interface (GDI)), listed 2022-03-03: Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
- CVE-2017-0261 (Office), listed 2022-03-03: Microsoft Office Use-After-Free Vulnerability
- CVE-2017-11826 (Office), listed 2022-03-03: Microsoft Office Remote Code Execution Vulnerability
- CVE-2017-8540 (Malware Protection Engine), listed 2022-03-03: Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
- CVE-2018-8581 (Exchange Server), listed 2022-03-03: Microsoft Exchange Server Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-1297 (Excel), listed 2022-03-03: Microsoft Excel Remote Code Execution Vulnerability
- CVE-2021-41379 (Windows), listed 2022-03-03: Microsoft Windows Installer Privilege Escalation Vulnerability (known ransomware use)
- CVE-2014-6352 (Windows), listed 2022-02-25: Microsoft Windows Code Injection Vulnerability
- CVE-2017-0222 (Internet Explorer), listed 2022-02-25: Microsoft Internet Explorer Remote Code Execution Vulnerability
- CVE-2017-8570 (Office), listed 2022-02-25: Microsoft Office Remote Code Execution Vulnerability
- CVE-2013-3906 (Graphics Component), listed 2022-02-15: Microsoft Graphics Component Memory Corruption Vulnerability
- CVE-2014-1761 (Word), listed 2022-02-15: Microsoft Word Memory Corruption Vulnerability
- CVE-2018-8174 (Windows), listed 2022-02-15: Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability (known ransomware use)
- CVE-2019-0752 (Internet Explorer), listed 2022-02-15: Microsoft Internet Explorer Type Confusion Vulnerability (known ransomware use)
- CVE-2015-1635 (HTTP.sys), listed 2022-02-10: Microsoft HTTP.sys Remote Code Execution Vulnerability
- CVE-2017-0144 (SMBv1), listed 2022-02-10: Microsoft SMBv1 Remote Code Execution Vulnerability (known ransomware use)
- CVE-2017-0145 (SMBv1), listed 2022-02-10: Microsoft SMBv1 Remote Code Execution Vulnerability (known ransomware use)
- CVE-2017-0262 (Office), listed 2022-02-10: Microsoft Office Remote Code Execution Vulnerability
- CVE-2017-0263 (Win32k), listed 2022-02-10: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2017-8464 (Windows), listed 2022-02-10: Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
- CVE-2020-0796 (SMBv3), listed 2022-02-10: Microsoft SMBv3 Remote Code Execution Vulnerability (known ransomware use)
- CVE-2021-36934 (Windows), listed 2022-02-10: Microsoft Windows SAM Local Privilege Escalation Vulnerability
- CVE-2022-21882 (Win32k), listed 2022-02-04: Microsoft Win32k Privilege Escalation Vulnerability (known ransomware use)
- CVE-2014-1776 (Internet Explorer), listed 2022-01-28: Microsoft Internet Explorer Memory Corruption Vulnerability
- CVE-2020-0787 (Windows), listed 2022-01-28: Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability (known ransomware use)
- CVE-2018-8453 (Win32k), listed 2022-01-21: Microsoft Win32k Privilege Escalation Vulnerability (known ransomware use)
- CVE-2021-33766 (Exchange Server), listed 2022-01-18: Microsoft Exchange Server Information Disclosure
- CVE-2013-3900 (WinVerifyTrust function), listed 2022-01-10: Microsoft WinVerifyTrust function Remote Code Execution
- CVE-2019-1458 (Win32k), listed 2022-01-10: Microsoft Win32k Privilege Escalation Vulnerability (known ransomware use)
- CVE-2021-43890 (Windows), listed 2021-12-15: Microsoft Windows AppX Installer Spoofing Vulnerability (known ransomware use)
- CVE-2021-40449 (Windows), listed 2021-11-17: Microsoft Windows Win32k Privilege Escalation Vulnerability (known ransomware use)
- CVE-2021-42292 (Office), listed 2021-11-17: Microsoft Excel Security Feature Bypass
- CVE-2021-42321 (Exchange), listed 2021-11-17: Microsoft Exchange Server Remote Code Execution Vulnerability (known ransomware use)
- CVE-2012-0158 (MSCOMCTL.OCX), listed 2021-11-03: Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability (known ransomware use)
- CVE-2014-1812 (Windows), listed 2021-11-03: Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability (known ransomware use)
- CVE-2015-1641 (Office), listed 2021-11-03: Microsoft Office Memory Corruption Vulnerability
- CVE-2016-0167 (Win32k), listed 2021-11-03: Microsoft Win32k Privilege Escalation Vulnerability (known ransomware use)
- CVE-2016-0185 (Windows), listed 2021-11-03: Microsoft Windows Media Center Remote Code Execution Vulnerability
- CVE-2016-3235 (Office), listed 2021-11-03: Microsoft Office OLE DLL Side Loading Vulnerability
- CVE-2016-7255 (Win32k), listed 2021-11-03: Microsoft Win32k Privilege Escalation Vulnerability (known ransomware use)
- CVE-2017-0143 (Windows), listed 2021-11-03: Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability (known ransomware use)
- CVE-2017-0199 (Office and WordPad), listed 2021-11-03: Microsoft Office and WordPad Remote Code Execution Vulnerability (known ransomware use)
- CVE-2017-11774 (Office), listed 2021-11-03: Microsoft Office Outlook Security Feature Bypass Vulnerability
- CVE-2017-11882 (Office), listed 2021-11-03: Microsoft Office Memory Corruption Vulnerability (known ransomware use)
- CVE-2017-7269 (Internet Information Services (IIS)), listed 2021-11-03: Microsoft Windows Server Buffer Overflow Vulnerability
- CVE-2017-8759 (.NET Framework), listed 2021-11-03: Microsoft .NET Framework Remote Code Execution Vulnerability
- CVE-2018-0798 (Office), listed 2021-11-03: Microsoft Office Memory Corruption Vulnerability
- CVE-2018-0802 (Office), listed 2021-11-03: Microsoft Office Memory Corruption Vulnerability (known ransomware use)
- CVE-2018-8653 (Internet Explorer), listed 2021-11-03: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
- CVE-2019-0541 (MSHTML), listed 2021-11-03: Microsoft MSHTML Remote Code Execution Vulnerability
- CVE-2019-0604 (SharePoint), listed 2021-11-03: Microsoft SharePoint Remote Code Execution Vulnerability (known ransomware use)
- CVE-2019-0708 (Remote Desktop Services), listed 2021-11-03: Microsoft Remote Desktop Services Remote Code Execution Vulnerability (known ransomware use)
- CVE-2019-0797 (Win32k), listed 2021-11-03: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2019-0803 (Win32k), listed 2021-11-03: Microsoft Win32k Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-0808 (Win32k), listed 2021-11-03: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2019-0859 (Win32k), listed 2021-11-03: Microsoft Win32k Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-0863 (Windows), listed 2021-11-03: Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability
- CVE-2019-1214 (Windows), listed 2021-11-03: Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability
- CVE-2019-1215 (Windows), listed 2021-11-03: Microsoft Windows Privilege Escalation Vulnerability (known ransomware use)
- CVE-2019-1367 (Internet Explorer), listed 2021-11-03: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (known ransomware use)
- CVE-2019-1429 (Internet Explorer), listed 2021-11-03: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
- CVE-2020-0601 (Windows), listed 2021-11-03: Microsoft Windows CryptoAPI Spoofing Vulnerability
- CVE-2020-0646 (.NET Framework), listed 2021-11-03: Microsoft .NET Framework Remote Code Execution Vulnerability
- CVE-2020-0674 (Internet Explorer), listed 2021-11-03: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
- CVE-2020-0683 (Windows), listed 2021-11-03: Microsoft Windows Installer Privilege Escalation Vulnerability
- CVE-2020-0688 (Exchange Server), listed 2021-11-03: Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability (known ransomware use)
- CVE-2020-0878 (Edge and Internet Explorer), listed 2021-11-03: Microsoft Edge and Internet Explorer Memory Corruption Vulnerability (known ransomware use)
- CVE-2020-0938 (Windows), listed 2021-11-03: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
- CVE-2020-0968 (Internet Explorer), listed 2021-11-03: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (known ransomware use)
- CVE-2020-0986 (Windows), listed 2021-11-03: Microsoft Windows Kernel Privilege Escalation Vulnerability
- CVE-2020-1020 (Windows), listed 2021-11-03: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
- CVE-2020-1040 (Hyper-V RemoteFX), listed 2021-11-03: Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
- CVE-2020-1054 (Win32k), listed 2021-11-03: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2020-1147 (.NET Framework, SharePoint, Visual Studio), listed 2021-11-03: Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
- CVE-2020-1350 (Windows), listed 2021-11-03: Microsoft Windows DNS Server Remote Code Execution Vulnerability
- CVE-2020-1380 (Internet Explorer), listed 2021-11-03: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
- CVE-2020-1464 (Windows), listed 2021-11-03: Microsoft Windows Spoofing Vulnerability
- CVE-2020-1472 (Netlogon), listed 2021-11-03: Microsoft Netlogon Privilege Escalation Vulnerability (known ransomware use)
- CVE-2020-17087 (Windows), listed 2021-11-03: Microsoft Windows Kernel Privilege Escalation Vulnerability
- CVE-2020-17144 (Exchange Server), listed 2021-11-03: Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2021-1647 (Defender), listed 2021-11-03: Microsoft Defender Remote Code Execution Vulnerability
- CVE-2021-1675 (Windows), listed 2021-11-03: Microsoft Windows Print Spooler Remote Code Execution Vulnerability (known ransomware use)
- CVE-2021-1732 (Win32k), listed 2021-11-03: Microsoft Win32k Privilege Escalation Vulnerability (known ransomware use)
- CVE-2021-26411 (Internet Explorer), listed 2021-11-03: Microsoft Internet Explorer Memory Corruption Vulnerability (known ransomware use)
- CVE-2021-26855 (Exchange Server), listed 2021-11-03: Microsoft Exchange Server Remote Code Execution Vulnerability (known ransomware use)
- CVE-2021-26857 (Exchange Server), listed 2021-11-03: Microsoft Exchange Server Remote Code Execution Vulnerability (known ransomware use)
- CVE-2021-26858 (Exchange Server), listed 2021-11-03: Microsoft Exchange Server Remote Code Execution Vulnerability (known ransomware use)
- CVE-2021-27059 (Office), listed 2021-11-03: Microsoft Office Remote Code Execution Vulnerability
- CVE-2021-27065 (Exchange Server), listed 2021-11-03: Microsoft Exchange Server Remote Code Execution Vulnerability (known ransomware use)
- CVE-2021-27085 (Internet Explorer), listed 2021-11-03: Microsoft Internet Explorer Remote Code Execution Vulnerability
- CVE-2021-28310 (Win32k), listed 2021-11-03: Microsoft Win32k Privilege Escalation Vulnerability
- CVE-2021-31199 (Enhanced Cryptographic Provider), listed 2021-11-03: Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
- CVE-2021-31201 (Enhanced Cryptographic Provider), listed 2021-11-03: Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
- CVE-2021-31207 (Exchange Server), listed 2021-11-03: Microsoft Exchange Server Security Feature Bypass Vulnerability (known ransomware use)
- CVE-2021-31955 (Windows), listed 2021-11-03: Microsoft Windows Kernel Information Disclosure Vulnerability
- CVE-2021-31956 (Windows), listed 2021-11-03: Microsoft Windows NTFS Privilege Escalation Vulnerability
- CVE-2021-31979 (Windows), listed 2021-11-03: Microsoft Windows Kernel Privilege Escalation Vulnerability
- CVE-2021-33739 (Windows), listed 2021-11-03: Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
- CVE-2021-33742 (Windows), listed 2021-11-03: Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
- CVE-2021-33771 (Windows), listed 2021-11-03: Microsoft Windows Kernel Privilege Escalation Vulnerability
- CVE-2021-34448 (Windows), listed 2021-11-03: Microsoft Windows Scripting Engine Memory Corruption Vulnerability
- CVE-2021-34473 (Exchange Server), listed 2021-11-03: Microsoft Exchange Server Remote Code Execution Vulnerability (known ransomware use)
- CVE-2021-34523 (Exchange Server), listed 2021-11-03: Microsoft Exchange Server Privilege Escalation Vulnerability (known ransomware use)
- CVE-2021-34527 (Windows), listed 2021-11-03: Microsoft Windows Print Spooler Remote Code Execution Vulnerability (known ransomware use)
- CVE-2021-36942 (Windows), listed 2021-11-03: Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability (known ransomware use)
- CVE-2021-36948 (Windows), listed 2021-11-03: Microsoft Windows Update Medic Service Privilege Escalation Vulnerability
- CVE-2021-36955 (Windows), listed 2021-11-03: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (known ransomware use)
- CVE-2021-38645 (Open Management Infrastructure (OMI)), listed 2021-11-03: Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
- CVE-2021-38647 (Open Management Infrastructure (OMI)), listed 2021-11-03: Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability (known ransomware use)
- CVE-2021-38648 (Open Management Infrastructure (OMI)), listed 2021-11-03: Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
- CVE-2021-38649 (Open Management Infrastructure (OMI)), listed 2021-11-03: Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
- CVE-2021-40444 (MSHTML), listed 2021-11-03: Microsoft MSHTML Remote Code Execution Vulnerability (known ransomware use)

Material cybersecurity incidents reported to the SEC (Form 8-K Item 1.05):

- Form 8-K/A filed 2024-03-08: As disclosed in the Original Filing, the Company detected that beginning in late November 2023, a nation-state threat actor had gained access to and exfiltrated information from a very small percentage of employee email accounts including members of our senior leadership team and employees in our cy… (https://www.sec.gov/Archives/edgar/data/789019/000119312524062997/0001193125-24-062997-index.htm)
- Form 8-K filed 2024-01-19: On January 12, 2024, Microsoft (the “Company” or “we”) detected that beginning in late November 2023, a nation-state associated threat actor had gained access to and exfiltrated information from a very small percentage of employee email accounts including members of our senior leadership tea… (https://www.sec.gov/Archives/edgar/data/789019/000119312524011295/0001193125-24-011295-index.htm)

## Incidents reported by Microsoft's subprocessors

Incidents reported in the last 30 days on their own status pages by 8 vendors Microsoft lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor)
- 2026-11-11: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for DeepSeek V4.1 Flash 1017 (minor)
- 2026-11-11: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported access.redhat.com Community and Discussions (no impact stated)
- 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated)
- 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical)
- 2026-11-10: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-11-10: [Arkose Labs](https://thirdpartyindex.com/vendors/arkose-labs#status), which Microsoft lists as a subprocessor, reported US-WEST-2: Elevated latency and error rates (no impact stated)
- 2026-11-10: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Actions and Checks API (critical)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Webhooks and Actions (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor)
- 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor)
- 2026-11-08: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor)
- 2026-11-07: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor)
- 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Microsoft lists as a subprocessor, reported INC20000337 (minor)
- 2026-11-07: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor)
- 2026-11-07: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash US (minor)
- 2026-11-07: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor)
- 2026-11-07: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor)
- 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Microsoft lists as a subprocessor, reported INC20000336 (minor)
- 2026-11-06: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-06: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor)
- 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Actions (minor)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-05: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Docs.redhat.com - Intermittent performance degradation (major)
- 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor)
- 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor)
- 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for MiniMax M3.1 Flash (minor)
- 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash US (minor)
- 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor)
- 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-04: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Actions (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Actions and Pages (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor)
- 2026-11-04: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Git Operations (minor)
- 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor)
- 2026-11-03: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Microsoft lists as a subprocessor, reported Property Manager Property Activation Errors (no impact stated)
- 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor)
- 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor)
- 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor)
- 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor)
- 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor)
- 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor)
- 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor)
- 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor)
- 2026-11-02: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor)
- 2026-10-31: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor)
- 2026-10-31: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Dependabot (minor)
- 2026-10-30: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service degradation (no impact stated)
- 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Microsoft lists as a subprocessor, reported INC20000321 (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor)
- 2026-10-30: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported access.redhat.com - Community and Discussions (minor)
- 2026-10-30: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Microsoft lists as a subprocessor, reported Customer Security Advisory: CVE-2026-98432 (no impact stated)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Disruption with GitHub services (critical)
- 2026-10-30: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor)
- 2026-10-29: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported API errors (critical)
- 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Disruption with Copilot Cloud services (minor)
- 2026-10-29: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Red Hat Lightspeed Compliance Degraded Performance (minor)
- 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Microsoft lists as a subprocessor, reported INC20000319 (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor)
- 2026-10-28: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor)
- 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Disruption with some Copilot services (critical)
- 2026-10-28: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor)
- 2026-10-28: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for MiniMax M3.1 Flash (minor)
- 2026-10-28: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for MiniMax M3.1 Flash (minor)
- 2026-10-28: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for MiniMax M3.1 Flash (minor)
- 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Microsoft lists as a subprocessor, reported Performance Degradation for Customers in Mumbai and Chennai (no impact stated)
- 2026-10-27: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor)
- 2026-10-27: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Microsoft lists as a subprocessor, reported Enterprise Application Access (EAA) Connector Issues (minor)
- 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated)
- 2026-10-27: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor)
- 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for MiniMax M3.1 Flash (minor)
- 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor)
- 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-10-26: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Red Hat Connect Major Outage - Investigating (major)
- 2026-10-25: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor)
- 2026-10-25: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Microsoft lists as a subprocessor, reported Edge Delivery issues between Indonesia and Singapore (minor)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major)
- 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major)
- 2026-10-24: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Quayio Is Facing Intermittent 500s Due to a Service Maintenance (major)
- 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor)
- 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Disruption with Dependabot Alerts (minor)
- 2026-10-23: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor)
- 2026-10-23: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Microsoft lists as a subprocessor, reported Customer Security Advisory: Brotli Remote Code Execution Vulnerabilities \[CVE-2026-111497\] (no impact stated)
- 2026-10-23: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported access.redhat.com - Security Pages - CVE Outage (major)
- 2026-10-23: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported "access.redhat.com - Security Pages - CVE Outage (major)
- 2026-10-23: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Homepage - Access.redhat.com Outage (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Delayed Actions status check results (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for DeepSeek V4.1 Flash 1017 (minor)
- 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for DeepSeek V4.1 Flash 1017 (minor)
- 2026-10-22: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Microsoft lists as a subprocessor, reported Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for DeepSeek V4.1 Flash 1017 (minor)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Project updates delayed (minor)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Incident with Actions (minor)
- 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Elevated errors affecting Connectors (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor)
- 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor)
- 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor)
- 2026-10-21: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Registry Proxy Pull Performance is Degraded (major)
- 2026-10-21: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Multiple sites - SSO Outage (no impact stated)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Microsoft lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Microsoft lists as a subprocessor, reported Edge Delivery Secure CDN platform at Risk of Capacity Issues (no impact stated)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Microsoft lists as a subprocessor, reported INC20000301 (critical)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Microsoft lists as a subprocessor, reported Web Security Analytics, Reporting and Configuration Deployment Issues (minor)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Microsoft lists as a subprocessor, reported Customer Security Advisory: PHP Remote Code Execution Vulnerabilities (no impact stated)
- 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical)
- 2026-10-21: [Akamai](https://thirdpartyindex.com/vendors/akamai#status), which Microsoft lists as a subprocessor, reported NetStorage issues in Los Angeles (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for DeepSeek V4.1 Flash 1017 (minor)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Microsoft lists as a subprocessor, reported INC20000299 (minor)
- 2026-10-21: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-21: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor)
- 2026-10-20: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor)
- 2026-10-20: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor)
- 2026-10-20: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Intermittent pull failures in AU East (minor)
- 2026-10-20: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Microsoft lists as a subprocessor, reported INC20000294 (critical)
- 2026-10-20: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Elevated latency on some serverless models (no impact stated)
- 2026-10-19: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor)
- 2026-10-19: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor)
- 2026-10-19: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Docs.redhat.com - Intermittent performance degradation (minor)
- 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported File Download errors (minor)
- 2026-10-19: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Microsoft lists as a subprocessor, reported INC20000290 (minor)
- 2026-10-18: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor)
- 2026-10-18: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor)
- 2026-10-17: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor)
- 2026-10-17: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor)
- 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Microsoft lists as a subprocessor, reported INC20000287 (critical)
- 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-15: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-10-15: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor)
- 2026-10-15: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Kimi K3 (minor)
- 2026-10-14: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported CSP outage affecting multiple serverless models (minor)
- 2026-10-14: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor)
- 2026-10-14: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor)
- 2026-10-14: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Ask Red Hat - Major Agent Update (major)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-14: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Docs.redhat.com - Outage Investigating (major)
- 2026-10-14: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor)
- 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Microsoft lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor)
- 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Microsoft lists as a subprocessor, reported INC20000277 (minor)
- 2026-10-13: [Red Hat](https://thirdpartyindex.com/vendors/red-hat#status), which Microsoft lists as a subprocessor, reported Ask Red Hat - Model Upgrade (major)
- 2026-10-13: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor)
- 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Microsoft lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor)
- 2026-10-13: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which Microsoft lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor)

## Federal contracts

U.S. government prime awards and reported subawards to its UEI (FMVPEWNJGLM1, XHB1K9HA7VQ1), from USAspending, by funding agency. Records show funding, not use.

| Agency | Department | Prime awards | Obligated | Subawards | Subaward total | First | Last |
|---|---|---|---|---|---|---|---|
| Department of the Navy | Department of Defense | 400 | $1.28B | 48 | $1.23B | 2004-09-26 | 2026-07-23 |
| Department of the Army | Department of Defense | 451 | $1.58B | 31 | $37.5M | 2000-01-19 | 2026-07-21 |
| Department of the Air Force | Department of Defense | 200 | $897.2M | 53 | $46.0M | 2004-02-16 | 2026-07-28 |
| Defense Information Systems Agency | Department of Defense | 120 | $696.0M | 9 | $3.9M | 2007-09-25 | 2026-07-23 |
| Department of State | Department of State | 134 | $386.3M | 12 | $1.5M | 2009-09-14 | 2026-09-30 |
| Offices, Boards and Divisions | Department of Justice | 138 | $176.2M | — | — | 2012-06-12 | 2026-06-29 |
| Office of the Chief Information Officer | Department of Agriculture | 5 | $116.2M | — | — | 2006-11-15 | 2026-10-14 |
| Transportation Security Administration | Department of Homeland Security | 26 | $99.5M | 8 | $1.3M | 2008-06-23 | 2025-10-20 |
| Social Security Administration | Social Security Administration | 114 | $94.9M | — | — | 2009-01-13 | 2026-10-29 |
| Immediate Office of the Secretary of Defense | Department of Defense | 61 | $91.1M | 10 | $1.4M | 2006-09-15 | 2026-07-23 |
| Office of the Inspector General | Department of Defense | 14 | $81.9M | — | — | 2010-05-20 | 2026-01-06 |
| U.S. Citizenship and Immigration Services | Department of Homeland Security | 27 | $75.4M | — | — | 2008-11-03 | 2025-09-12 |
| Office of the Chief Procurement Officer | Department of Homeland Security | 58 | $69.8M | — | — | 2004-07-27 | 2024-03-07 |
| Defense Logistics Agency | Department of Defense | 11 | $61.9M | 2 | $1.2M | 2007-08-30 | 2026-07-09 |
| U.S. Coast Guard | Department of Homeland Security | 39 | $58.7M | 6 | $409.5K | 2008-12-05 | 2026-08-11 |

And 114 more agencies.
2780 records ([evidence](https://thirdpartyindex.com/evidence/233651)). Details: https://thirdpartyindex.com/vendors/microsoft/federal

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-10-24: Changed registry listing: fedramp:F1603087869 ([evidence](https://thirdpartyindex.com/evidence/151994))
- 2026-10-22: Changed registry listing: fedramp:F1209051525 ([evidence](https://thirdpartyindex.com/evidence/141337))
- 2026-10-22: Changed registry listing: fedramp:F1603087869 ([evidence](https://thirdpartyindex.com/evidence/141337))
- 2026-10-22: Changed registry listing: fedramp:MSO365MT ([evidence](https://thirdpartyindex.com/evidence/141337))
- 2026-10-15: Changed registry listing: fedramp:MSO365MT ([evidence](https://thirdpartyindex.com/evidence/105415))
- 2026-10-08: Changed registry listing: fedramp:F1209051525 ([evidence](https://thirdpartyindex.com/evidence/67847))
- 2026-10-08: Changed registry listing: fedramp:F1603087869 ([evidence](https://thirdpartyindex.com/evidence/67847))
- 2026-10-08: Changed registry listing: fedramp:MSO365MT ([evidence](https://thirdpartyindex.com/evidence/67847))
- 2026-10-07: Changed registry listing: fedramp:F1209051525 ([evidence](https://thirdpartyindex.com/evidence/61906))
- 2026-10-03: Changed registry listing: fedramp:F1209051525 ([evidence](https://thirdpartyindex.com/evidence/40338))
- 2026-10-03: Changed registry listing: fedramp:MSO365MT ([evidence](https://thirdpartyindex.com/evidence/40338))
- 2026-10-01: Changed registry listing: fedramp:F1209051525 ([evidence](https://thirdpartyindex.com/evidence/30708))
- 2026-09-30: Changed registry listing: fedramp:F1603087869 ([evidence](https://thirdpartyindex.com/evidence/25653))

Feed: https://thirdpartyindex.com/vendors/microsoft/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/microsoft

## Security contact

From its security.txt (https://www.microsoft.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/233729)):

- Contact: https://msrc.microsoft.com/report/vulnerability/new
- Disclosure policy: https://www.microsoft.com/en-us/msrc/bounty/
- Encryption key: https://msrc.microsoft.com/.well-known/csaf/openpgp/7BF8E0B9678F6599A6D0299F6332930CE9D13EF9.asc
- Acknowledgments: https://msrc.microsoft.com/update-guide/acknowledgement
- Languages: en
- Valid until 2027-10-27

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
