3. Agenda Making it real: Microsoft Cloud in EuropeMicrosoft infrastructure investmentsAccelerate sales with trusted and global cloud servicesCall to action

4. Accelerate sales with Trusted and Global cloud services Reduce Sales Friction Expand Market Reach Synergistic Growth Innovate Locally, Expand Globally Opportunity For New Portfolio Of Offerings

5. Digital transformation Engage your customers Empower your employees Optimize your operations Transform your products

6. Trust in different types of infrastructure Trust Cloud 36% On-Premises 83% 47% Cloud Assurance Opportunity Where do cloud purchase decision makers trust placing high priority workloads?

7. Security and Compliance a key factor in cloud adoption Compliance was ranked the second in regards to importance to Cloud Trust 3000 customers were asked to rank their top 20 requirements related to Cloud Trust 12 3 Security and privacy are stated most important considerations while compliance drives behavior 2016 Microsoft Cloud Trust Research: Q58. What specific compliance concerns do you have with 3 rd party public cloud that you don’t have with your on-premises solutions?

8. A cloud you can trust At Microsoft, we never take your trust for granted We are serious about our commitment to protect customers in a cloud-first world. We live by standards and practices designed to earn your confidence. We collaborate with industry and governments to build trust in the cloud ecosystem. “Businesses and users are going to embrace technology only if they can trust it.” – Satya Nadella

9. Our commitment to trust PRIVACY SECURITY COMPLIANCE TRANSPARENC Y RELIABILITY/AVAILABILITY

10. Investing in security What we’re doing about it Our datacenters are equipped with state-of-the-art physical security measures. We operate a 24x7 incident response team to mitigate threats and attacks. We encrypt data transferred between our data centers. We protect your stored data with built-in tools and provide access to further encryption capabilities. Customers have a right to expect Your customer’s data will be safeguarded using state-of-the industry security technology and processes. Your customer’s data will be encrypted in transit and at rest. Your customers will have access to the controls and information to help you reduce risk

11. Protecting data privacy What we’re doing about it Your customers will have flexibility, choice and transparency on where their data is stored. We will not use your customer’s data for advertising or commercial purposes. We will not disclose your customer’s information outside of Microsoft except with your customer’s consent or when required by law. We can provide your customer with a variety of tools to extract their data. We delete your customer’s data no more than 180 days after your service is terminated or expires. Customers have a right to expect Your customer controls who has access to their data. Lock box controls require permissions by your customer for Microsoft personnel and its subcontractors to obtain access to your data. Your customer’s will be able to delete their data or take it with them if they leave.

12. Enabling your Customer’s compliance What we’re doing about it We lead the industry in pursuing compliance with the latest standards for data privacy and security, such as ISO 27018. We regularly undergo independent audits to certify our compliance. We collaborate with our partners, when requested, to work with their customers and regulators to help them meet their compliance requirements. Customers have a right to expect We enable compliance by adhering to international standards, certifications and applicable regulatory requirements. Your customers have the ability to see the certifications for each Microsoft service.

13. Industry’s Largest Compliance Portfolio Microsoft is meeting customer security needs with the industry's largest compliance portfolio ISO 27001 PCI DSS Level 1 SOC 2 Type 2 ISO 27018 Cloud Controls Matrix Content Delivery and Security Association Shared Assessments SOC 1 Type 2 Worldwide Regional European Union Model Clauses China Multi Layer Protection Scheme Singapore MTCS Level 3 China GB 18030 New Zealand GCIO Australian Signals Directorate Japan Financial Services China CCCPPF United Kingdom G-Cloud ENISA IAF Government HIPAA / HITECH FIPS 140-2DISA Level 2FERPAFedRAMP JAB P-ATO ITAR-readyCJIS21 CFR Part 11 IRS 1075Section 508 VPAT

14. Maintaining transparency What we’re doing about it We provide understandable and strict policy of what we will—and will NOT—use your customer’s data for. When responding to law enforcement requests, we strive to defend customer rights and privacy, and ensure due process is followed. For each of our services, we provide your customers with information on where their data may be stored and processed. Customers have a right to expect Your customer will have a clear, plain-language explanation of how Microsoft uses, manages and protects their company data. Microsoft will be transparent about law enforcement requests by publishing semi-annual law enforcement request reports.

15. The Microsoft Trust Center www.microsoft.com/trustcenter

16. The world of international cloud computing is complex National and regional lawsIndustry standards within countriesCross-border data flowsMulti-national corporationsInternational standards

17. What is the Microsoft Trust Center? Centralized resource documenting adherence to international and regional security and privacy compliance Detailed information on security and privacy policies, practices, and product features Information organized around the trust pillars: Privacy, security, compliance, and transparency

18. Customers have questions Where Can I find a PCI DSS Attestation of Compliance (AoC)? Which Azure Services comply with EU Model Clauses? Is Azure certified in Japan for? When I use Azure, what data is exported? Where can If find a list of subcontractors with access to our data? What encryption options do I have for Office 365?

19. Trust Center demo

20. Cloud is an architecture Microsoft’s comprehensive set of cloud options – public, private, and hybrid – enables organizations to take advantage of the agility of cloud computing in a way that best suits their needs. Cloud services deployed on dedicated resources, hosted or operated by a Microsoft partner. Provides integrated or industry-specific service offerings. Partner Datacenter Global: Hyper-scale, globally connected cloud services deployed from regional Microsoft datacenters. Local datacenters enable customers to address local data residency requirements. Sovereign: Hyper-scale cloud services, isolated from global cloud services. Deployed from local datacenters to meet unique requirements of specific markets. Microsoft Datacenter Public Deployed on customer- dedicated resources with Microsoft products and technologies. Benefit from cloud experiences on your own premises. Customer Datacenter Private Hybrid

21. Microsoft infrastructure investments 36 datacenter locations worldwide 1 Central US West US East US North Central US Brazil South West Europe Japan East South India SE Asia Australia South East Australia East India Central West India Japan West East Asia China West* North Europe Germany Northeast** Canada East Canada Central South Central US China East* Germany Central** West US 2 Korea South East US 2 Korea Central 100 + datacenters One of 3 largest networks in the world United Kingdom West United Kingdom South West Central US Chile Asia Vienna Finland

22. Specific compliance certifications unblock what were once only on premises apps/workloads Ex: IRAP Compliance Investments to address business and regulatory needs Infrastructure geo-expansion helps address some common cloud ‘blockers’ for many geographies and industries. Local datacenters allow customer data at rest to be kept within a geography, enabling customers to help meet local data residency requirements* Data Residency Local datacenters can help reduce latency for developers and partners, which fuels local innovation Performance *For further details, see http://azuredatacentermap.azurewebsites.net/http://azuredatacentermap.azurewebsites.net/

23. Microsoft Cloud in Europe Microsoft Cloud Regional Globally connected cloud services deployed from regional Microsoft datacenters in Europe Complies with EU model clauses 2010/87/EU Local – United Kingdom Customer data at rest is kept within the UK, enabling customers to address most local data residency requirements** Complies with EU model clauses 2010/87/EU Open to all public cloud users within the UK Azure regions can be selected, including access to WW regions Office 365 regions are assigned Sovereign – Microsoft Cloud Germany Built to specifically address unique German data access requirements A dedicated network within Germany, independent from the public cloud network Unique Data Trustee model-German partner controls physical and logical access to customer data All customer data and required supporting systems reside in German datacenters EU/EFTA business address is required for us Partner Cloud Strategic Partnership Deploying the Microsoft Cloud Platform and powerful hybrid cloud solutions for customers worldwide requires Managed Service Providers and Hosting Service Providers Service Providers play a critical role helping customer’s transition to the cloud delivering geo affine cloud scenarios (data sovereignty, local datacenters, customer intimacy, custom SLAs) as well as customer centric solutions Microsoft Hybrid technologies help partners deliver differentiated Microsoft-validated services that attract new customers and drive revenue and growth Microsoft Cloud service providers ExpressRoute partners Microsoft Datacenters Ireland Dublin United Kingdom Regions Netherlands Amsterdam Germany Frankfurt Germany Magdeburg Finland Helsinki Vienna Austria For further details, see http://azuredatacentermap.azurewebsites.net/http://azuredatacentermap.azurewebsites.net/ For updated compliance information visit the Microsoft Trust Center

24. Real investments, Real Results Security-first Products & Services Compliance Leadership Global Cloud Solutions

25. Call To Action Go to www.microsoft.com/trust to learn how to leverage the “trusted cloud principles” in sales discussions with your customerswww.microsoft.com/trust Address customer concerns early in the sales cycle with the Microsoft Trusted Cloud Principles to accelerate cloud adoption and sales Differentiate and grow your Trust and Compliance Practice by leveraging Microsoft Trusted Cloud Principles to solve customer blockers across the entire hybrid cloud continuum Licensing Solution Provider Visit the Office 365 Trust Center to learn more about the latest security and compliance features in Office 365 E5 Share the Office 365 security white paper with your customers Review the top 10 security and privacy features to help your customers determine the security and trustworthiness of cloud service providers and their services All information is located at https://products.office.com/en- US/business/office-365-trust-center- welcome https://products.office.com/en- US/business/office-365-trust-center- welcome Get the facts-Microsoft Cloud Trust and Security webcast series https://blogs.office.com/2015/06/23/ge t-the-facts-microsoft-cloud-trust-and- security-webcast-series https://blogs.office.com/2015/06/23/ge t-the-facts-microsoft-cloud-trust-and- security-webcast-series Managed Service Provider Get the facts-Microsoft Cloud Trust and Security webcast series https://blogs.office.com/2015/06/23/ get-the-facts-microsoft-cloud-trust- and-security-webcast-series/ https://blogs.office.com/2015/06/23/ get-the-facts-microsoft-cloud-trust- and-security-webcast-series/ Learn and leverage Office 365 Advanced Security Management to give your customers more control of their Office 365 Environment at https://blogs.office.com/2016/06/01/ga in-enhanced-visibility-and-control- with-office-365-advanced-security- management/ https://blogs.office.com/2016/06/01/ga in-enhanced-visibility-and-control- with-office-365-advanced-security- management/ For detailed information about Microsoft Dynamics CRM Online security go to https://www.microsoft.com/ en-us/TrustCenter/CloudServices/ Dynamics https://www.microsoft.com/ en-us/TrustCenter/CloudServices/ Dynamics ISV Partner To learn about Enterprise-grade security for your cloud applications go to https://blogs.technet.microsoft.com/ server-cloud/ https://blogs.technet.microsoft.com/ser ver-cloud/2015/11/17/new-cloud- enterprise-innovations-in-enterprise- security/https://blogs.technet.microsoft.com/ server-cloud/ https://blogs.technet.microsoft.com/ser ver-cloud/2015/11/17/new-cloud- enterprise-innovations-in-enterprise- security/ For detailed information about Microsoft Azure security, privacy, control, compliance and transparency go to https://www.microsoft.com/ en-us/TrustCenter/CloudServices/Azurehttps://www.microsoft.com/ en-us/TrustCenter/CloudServices/Azure White papers including “Security Best Practices for Developing Azure Solutions” located at https://www.microsoft.com/en- us/TrustCenter/Resources/default.aspx? service=whitePaper#Resources https://www.microsoft.com/en- us/TrustCenter/Resources/default.aspx? service=whitePaper#Resources Hosting Solution Provider To learn about Enterprise-grade security for your cloud applications go to https://blogs.technet.microsoft.com/ server-cloud/https://blogs.technet.microsoft.com/ server-cloud/ https://blogs.technet.microsoft.com/ser ver-cloud/2015/11/17/new-cloud- enterprise-innovations-in-enterprise- security/ To talk to customers about taking the security of their on-premises systems to use with their cloud applications https://www.microsoft.com/ en-us/server-cloud/products/cloud- app-security/ https://www.microsoft.com/ en-us/server-cloud/products/cloud- app-security/ Additional detail on how Microsoft Azure can accelerate cloud adoption and sales go to https://www.microsoft.com/en- us/CloudandHosting/Azure Hosting.aspx https://www.microsoft.com/en- us/CloudandHosting/Azure Hosting.aspx