Data storage and processing in Intune
Storing customer data
After Intune collects the data, Intune follows the Data Handling Standard policy for Microsoft 365 that specifies how customer data is stored and processed. See Where your Microsoft 365 customer data is stored. Personal data is processed within the audited compliance boundary of the Intune service under the technical security measures assured through Microsoft Online Services Terms (OST).
Storage locations
Microsoft offers and operates Intune services in many regions worldwide. Intune respects the storage location elections made by the administrator for Customer Data.
For more information, see Data Center Locations.
Data residency option
We open new datacenter geographies for Intune to add capacity and compute resources to support our ongoing customer demand and usage growth. Additionally, the new datacenter geographies offer in-region data residency for Customer Data.
Existing customers that have their Customer Data stored in an already existing datacenter geography aren't impacted by the launch of a new datacenter geography. We introduce no unique capabilities, features, or compliance certifications with the new datacenter geography. As a customer, you'll experience the same quality of service, performance, and security controls in any of those two geographies.
We offer existing customers an option to request migration of their organization's Customer Data at rest to the datacenter geography that matches their signup Country or region.
With this option, eligible customers with data residency requirements can request migration of their organization's Customer Data at rest to their new datacenter geography if minimal data loss and reconfiguration is acceptable. Microsoft offers a committed deadline to all eligible customers who request migration. Contact support to request your data move. Our support team guides you through the preparation steps that you need to take and limitations you should be aware of. Data moves can take up to 24 months after the request period ends to complete.
During migration, certain features might not be accessible. The actual down time and impact to end-users depends on the volume of data to be migrated and features in use. When migration is complete, the support team contacts you to make sure everything is working.
Data moves to the new datacenter geographies are completed at no extra cost to the customer.
Personal data retention
Microsoft 365 Data Handling Standard policy specifies how long customer data is retained after deletion. There are two scenarios in which customer data is deleted:
-Active Deletion: The tenant has an active subscription and a user or administrator deletes data, or administrators delete a user. -Passive Deletion: The tenant subscription ends.
For each of the deletion scenarios, see Data Retention, Deletion, and Destruction in Microsoft 365.
In general, personal data collected by Intune is removed within 30 days after deletion. Audit logs are retained for up to one year for security purposes.
Processing personal data
Intune processes personal data with ISO certified systems. For more information, see the Service Trust Portal.
Profiling and marketing
Microsoft Intune doesn't use any personal data collected as part of providing the service for profiling or marketing purposes.
Next steps
Find out more about how Intune secures and shares personal data.