As users of Office 365, your organization has a Shared Responsibility Model with Microsoft. Microsoft ensures that the SaaS infrastructure is up-and-running while your organization is responsible for Office 365 data backup, retention, security and governance. Therefore your organization is responsible for protecting user data from insider threats, outside attacks, and data compliance - such as GDPR, CCPA, and legal holds. Read more ⶠ|