Privacy controls allow customers to configure who in the organization has access to their cloud data, and what they can access. Design elements prevent the mingling of your data with that of other organizations using Office 365, and extensive auditing and supervision help ensure that admins do not get unauthorized access to customer data. We contractually commit to the promises made with our Online Services Terms (OST). In particular, Microsoft provides a firm contractual commitment to remain certified under both the EU and Swiss Safe Harbor programs as long as they are maintained by the US government. Microsoft also agrees to the EU model clauses by default. With the OST, Microsoft makes its most customer-friendly contract terms available by default and not something privacy-conscious consumers need to opt-in for. For more information about privacy, security, and compliance in Office 365, visit the Office 365 Trust Center.