Data Protection and Security
In line with data minimization, only the strictly necessary user data are stored in the M365 user directory.
Authentication is performed via a local directory service of Technical University of Leoben.
Data stored by users in the M365 cloud are held by Microsoft on servers within the EU. Technical University of Leoben has concluded a contract guaranteeing that the data are stored in data centers located in Austria.
Microsoft guarantees that data are used solely for the provision of the services.
Policies can define how sensitive data are handled. An appropriate classification of the data by users is a prerequisite for this.
Data transmission to the M365 cloud is encrypted using TLS. Data at rest can be protected with BitLocker encryption.
Technical University of Leoben employs M365’s advanced threat protection—such as Exchange Online Protection, Anti-Phishing Protection, Safe Links, and Safe Attachments (Defender for M365)—to ensure the highest possible level of security.
Versioning of stored documents is enabled to undo accidental changes.
Microsoft provides comprehensive retention policies to restore accidentally deleted data.
Additionally, Technical University of Leoben uses a local backup to further enhance data security.