3. SECURITY Is cloud computing secure? Are Microsoft Online Services secure? Is cloud computing secure? Are Microsoft Online Services secure? PRIVACY What does privacy at Microsoft mean? Where’s my data? What does privacy at Microsoft mean? Where’s my data? COMPLIANCE What certifications and capabilities does Microsoft hold? How does Microsoft support customer compliance needs? Do I have the right to audit Microsoft? What certifications and capabilities does Microsoft hold? How does Microsoft support customer compliance needs? Do I have the right to audit Microsoft?

7. Alignment and adoption of industry standards ensure a comprehensive set of practices and controls in place to protect sensitive data While not permitting audits, we provide independent third-party verifications of Microsoft security, privacy, and continuity controls This saves time and money for everyone, and allows Microsoft Online Services to provide assurances at scale Microsoft provides transparency

8. No advertising products out of Customer Data. No data mining of customer data for advertising At Microsoft, our strategy is to consistently set a “high bar” around privacy practices that support global standards for data handling and transfer No Advertising Foundation of Microsoft: Privacy in the CloudPrivacy in the Cloud Windows Azure Privacy Statement describes the specific privacy policy and practices Windows Azure Privacy Statement We Respect the Privacy of Your Data

9. Microsoft’s Office 365 & Windows Azure, CRM Standard Responses on STAR! Specific details about Security and Privacy is mapped to the CCM and our ISO certification. Microsoft’s Office 365 & Windows Azure, CRM Standard Responses on STAR! Specific details about Security and Privacy is mapped to the CCM and our ISO certification. Standard from the Cloud Security Alliance (CSA) The Cloud Security Alliance Cloud Controls Matrix (CCM) is specifically designed to provide fundamental security principles to guide cloud vendors and to assist prospective cloud customers in assessing the overall security risk of a cloud provider.

10. TitleLocation Trust Center – Windows Azure Standard Response papers (Office 365, Windows Azure and CRM (coming soon)) http://www.microsoft.com/d ownload/en/details.aspx?id =26647 Patriot Act Training & Docshttps://spsites.microsoft.co m/sites/bosm/boswiki/Page s/Patriot-Act.aspx SafeGovhttp://safegov.org/