Multi Tenant Architecture

    •
    m365maps.comMicrosoft 365 ServiceConnection to the nearest available compute within the Microsoft secure global network. This is usually within the geography of the end user or the data, but varies based on local availability and load balancing requirements. Compute platform is shared by multiple customers.Shared ComputeData is encrypted with customer unique encryption keys and tagged with customer unique identifiers. Location is determined by the individual tenant data map and Core Online Services contract terms. Storage is shared by multiple customers.Shared StorageSome services run in the network, but outside Microsoft 365End users connect to the nearest Microsoft network node over secure, encrypted channels. Data remains tagged to each customer throughout.Microsoft Global NetworkOptional Connected ExperiencesThe global network provides access to Microsoft 365Microsoft 365 Multi-Tenant ArchitectureApril 2025m365maps.comAdditional Services StorageA tenant is a logical construct where each customer is assigned a unique identifier and encryption keys to tag and secure their data from other tenants in the service. A map of data locations is defined based on sign up geography and Core Online Services contract terms.TenantsEvery Microsoft 365 user identity has a unique account ID connected with their home tenant.End UsersService migration and residency for additional workloadsAdvanced Data ResidencySplit a tenancy over multiple geographiesMulti-GeoMicrosoft 365 Service ComponentSupporting Azure ComponentsUser 1 Customer AUser 2 Customer BFor example: OneDrive, Teams, or CopilotFor example: Video Streaming or Gen-AI Models.Data remains secure within the serviceSecure access control and platform intelligence layerFor example: Web site content and LOB apps dataCustomer A has Core Online Services data at rest in AustraliaCustomer B has Core Online Services data at rest in SingaporeFor example: Forms stores data in USA for Singapore·Microsoft Product Terms·Microsoft 365 Data Residency·Microsoft 365 Tenant IsolationMicrosoft GraphGraph ConnectorsBing services add to the Microsoft 365 experienceRelated ServicesResources·Unique customer identifier ·Unique encryption keys ·List of data storage locations ·Core online services data residency in AustraliaCustomer A·Unique customer identifier ·Unique encryption keys ·List of data storage locations ·Core online services data residency in SingaporeCustomer BData at Rest in SingaporeData at Rest in AustraliaCore Online Services StorageInternetMicrosoft BingMicrosoft Network Edge