Compliance: ISO/IEC 27001 (company-wideThe mark rests on a sentence that names no product, so check on the page whether it covers this one.); HIPAA BAA (company-wideThe mark rests on a sentence that names no product, so check on the page whether it covers this one.); HITRUST (company-wideThe mark rests on a sentence that names no product, so check on the page whether it covers this one.); GDPR (company-wideThe mark rests on a sentence that names no product, so check on the page whether it covers this one.); DPA (company-wideThe mark rests on a sentence that names no product, so check on the page whether it covers this one.).
Data: Training use, default retention, zero-retention option and data residency not stated on the pages readWe read a page that could answer and found no sentence that does. It says nothing about what the maker does..
Model and where it runs: Hosted by the maker; model provider and where it can run not stated on the pages readWe read a page that could answer and found no sentence that does. It says nothing about what the maker does..
Details: What the maker's own pages state, not a compliance determination, unverified after 2026-12-23: trust page, learn.microsoft.com.
What the maker's own pages said on the dates shown, not a compliance determination.
Our reading of vendors' pages, as of the dates shown. Confirm on the vendor's page before relying on any line that cites it. To report an error write to report@crinaro.ai