Laws CCCS Medium (Canada) Cyber Essentials Plus (UK) IRAP (Australia) Regional DJCP (China) DORA (EU) EN 301 549 (EU) ENISA IAF (EU) ENS (Spain) EU Model Clauses GB 18030 (China) GDPR (EU) Regional G-Cloud (UK) IDW PS 951 (Germany) ISMAP (Japan) ISMS (Korea) IT-Grundschutz workbook (Germany) MeitY (India) MTCS (Singapore) My Number (Japan) Regional National Information Assurance (Qatar) NZ CC Framework (New Zealand) PASF (UK) PDPA (Argenti
View source ↗SOC 2 company profile
Microsoft SOC 2 status and provider evidence
Review Microsoft’s public SOC 2 statement, report type, evidence source, and freshness.
SOC 2 statusself attested
Report typeNot publicly specified
Providers found0
Last checked2026-08-30
Providers
Microsoft’s SOC 2 stack
No provider is named on the current source.
We will update this page if the company publishes more detail.
Compliance coverage
Frameworks named by Microsoft
) CDSA DPP (UK) EBA (EU) FACT (UK) FCA + PRA (UK) FDA CFR Title 21 Part 11 Industry FERPA FFIEC (US) FINMA (Switzerland) FISC (Japan) FSA (Denmark) GLBA (US) GSMA GxP HDS (France) HIPAA / HITECH Industry HITRUST KNF (Poland) Know Your Third Party (KY3P) MARS-E (US) MAS + ABS (Singapore) MPA NBB + FSMA (Belgium) NEN-7510 (Netherlands) NERC OSFI (Canada) Industry PCI-3DS PCI-DSS RBI + IRDAI (India) SEC 17a-4, SEC 18a-6, FINRA 4511, & CFTC 1.31
View source ↗FACT (UK) FCA + PRA (UK) FDA CFR Title 21 Part 11 Industry FERPA FFIEC (US) FINMA (Switzerland) FISC (Japan) FSA (Denmark) GLBA (US) GSMA GxP HDS (France) HIPAA / HITECH Industry HITRUST KNF (Poland) Know Your Third Party (KY3P) MARS-E (US) MAS + ABS (Singapore) MPA NBB + FSMA (Belgium) NEN-7510 (Netherlands) NERC OSFI (Canada) Industry PCI-3DS PCI-DSS RBI + IRDAI (India) SEC 17a-4, SEC 18a-6, FINRA 4511, & CFTC 1.31 SEC Regulation SCI (US) S
View source ↗try-specific regulations for data collection and use. Global CIS Benchmark CSA-STAR attestation CSA-STAR certification CSA-STAR self-assessment CyberGRX ISO 20000-1:2011 ISO 22301 ISO 27001 Global ISO 27017 ISO 27018 ISO 27701 ISO 42001 ISO 9001 SOC 1 SOC 2 SOC 3 WCAG US Government CJIS CNSSI 1253 DFARS DoD IL2 DoD IL5 DoE 10 CFR Part 810 EAR (US Export Adm. Reg.) US Government FedRAMP FIPS 140-2 IRS 1075 ITAR NIST 800-171 NIST CSF Section 508 V
View source ↗A / HITECH Industry HITRUST KNF (Poland) Know Your Third Party (KY3P) MARS-E (US) MAS + ABS (Singapore) MPA NBB + FSMA (Belgium) NEN-7510 (Netherlands) NERC OSFI (Canada) Industry PCI-3DS PCI-DSS RBI + IRDAI (India) SEC 17a-4, SEC 18a-6, FINRA 4511, & CFTC 1.31 SEC Regulation SCI (US) Shared Assessments SOX TISAX Regional ABS OSPAR (Singapore) BIR 2012 (Netherlands) C5 (Germany) Canada Controlled Goods Canadian Privacy Laws CCCS Medium (Ca
View source ↗enchmark CSA-STAR attestation CSA-STAR certification CSA-STAR self-assessment CyberGRX ISO 20000-1:2011 ISO 22301 ISO 27001 Global ISO 27017 ISO 27018 ISO 27701 ISO 42001 ISO 9001 SOC 1 SOC 2 SOC 3 WCAG US Government CJIS CNSSI 1253 DFARS DoD IL2 DoD IL5 DoE 10 CFR Part 810 EAR (US Export Adm. Reg.) US Government FedRAMP FIPS 140-2 IRS 1075 ITAR NIST 800-171 NIST CSF Section 508 VPATS Industry 23 NYCRR Part 500 AFM + DNB (Netherlands) APRA (
View source ↗rk CSA-STAR attestation CSA-STAR certification CSA-STAR self-assessment CyberGRX ISO 20000-1:2011 ISO 22301 ISO 27001 Global ISO 27017 ISO 27018 ISO 27701 ISO 42001 ISO 9001 SOC 1 SOC 2 SOC 3 WCAG US Government CJIS CNSSI 1253 DFARS DoD IL2 DoD IL5 DoE 10 CFR Part 810 EAR (US Export Adm. Reg.) US Government FedRAMP FIPS 140-2 IRS 1075 ITAR NIST 800-171 NIST CSF Section 508 VPATS Industry 23 NYCRR Part 500 AFM + DNB (Netherlands) APRA (Austra
View source ↗-STAR attestation CSA-STAR certification CSA-STAR self-assessment CyberGRX ISO 20000-1:2011 ISO 22301 ISO 27001 Global ISO 27017 ISO 27018 ISO 27701 ISO 42001 ISO 9001 SOC 1 SOC 2 SOC 3 WCAG US Government CJIS CNSSI 1253 DFARS DoD IL2 DoD IL5 DoE 10 CFR Part 810 EAR (US Export Adm. Reg.) US Government FedRAMP FIPS 140-2 IRS 1075 ITAR NIST 800-171 NIST CSF Section 508 VPATS Industry 23 NYCRR Part 500 AFM + DNB (Netherlands) APRA (Australia) A
View source ↗Primary compliance evidence
Microsoft public statement
rk CSA-STAR attestation CSA-STAR certification CSA-STAR self-assessment CyberGRX ISO 20000-1:2011 ISO 22301 ISO 27001 Global ISO 27017 ISO 27018 ISO 27701 ISO 42001 ISO 9001 SOC 1 SOC 2 SOC 3 WCAG US Government CJIS CNSSI 1253 DFARS DoD IL2 DoD IL5 DoE 10 CFR Part 810 EAR (US Export Adm. Reg.) US Government FedRAMP FIPS 140-2 IRS 1075 ITAR NIST 800-171 NIST CSF Section 508 VPATS Industry 23 NYCRR Part 500 AFM + DNB (Netherlands) APRA (Austra
Open source ↗