Question 1

Where does Microsoft Azure AI store patient data?

Accepted Answer

Azure Speech: data is stored only in the region where the Speech resource was created. Australia East (australiaeast) is listed as a supported Azure Speech region under the Asia Pacific geography. Published statement: "Azure Speech doesn't store or process your data outside the region of your Azure Speech resource. The data is stored or processed only in the region where the resource is created." (source: https://learn.microsoft.com/en-us/azure/ai-services/speech-service/regions, checked 2026-09-25). Azure Australia geography is served from datacentres in Melbourne and Sydney (stated in Microsoft's IRAP compliance page). Published statement: "hosted from datacenters in Melbourne and Sydney. These two datacenters give Australian customers control over where their customer data is stored" (source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-irap-australia, checked 2026-09-25). Foundry Models sold by Azure (incl. Azure OpenAI): data at rest is stored in the customer-designated Azure geography, including for Global and DataZone deployment types. Published statement: "any data stored at rest, such as uploaded data, and including the abuse monitoring data store created for Global and DataZone deployments, is stored in the customer-designated geography." (source: https://learn.microsoft.com/en-us/azure/ai-foundry/responsible-ai/openai/data-privacy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 2

Where does Microsoft Azure AI process data?

Accepted Answer

Foundry models page says global training does not offer data residency and is available to Foundry resources in Australia East. Published statement: "Global training provides more affordable training per token, but doesn't offer data residency. It's currently available to Foundry resources in the following regions: Australia East" (source: https://learn.microsoft.com/en-us/azure/ai-foundry/openai/concepts/models, checked 2026-09-25). Azure Speech: processing occurs only in the region of the Speech resource. Australia East is listed as supporting real-time transcription, fast transcription, batch transcription, Whisper via batch transcription, custom speech training, neural text to speech and real-time speech translation. Published statement: "The data is stored or processed only in the region where the resource is created. For example, if you create a Foundry resource for speech in the westus region, the data is only in the westus region." (source: https://learn.microsoft.com/en-us/azure/ai-services/speech-service/regions, checked 2026-09-25). Global deployment types: processing is NOT restricted to the customer geography — prompts and responses may be processed in any geography where the model is deployed. Storage at rest remains in the customer-designated geography. Published statement: "For any deployment type labeled 'Global,' prompts and responses may be processed in any geography where the relevant model sold by Azure is deployed" (source: https://learn.microsoft.com/en-us/azure/ai-foundry/responsible-ai/openai/data-privacy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 3

Which AI models does Microsoft Azure AI use?

Accepted Answer

Foundry 'models sold by Azure' includes Azure OpenAI models. Azure Speech region tables additionally name gpt-realtime, gpt-4o/4.1/5.x, mai-transcribe, phi4 and Whisper model families as available in specific regions. Published statement: "A 'model sold by Azure' is an AI model designated and deployed as such in Foundry, and includes Azure OpenAI models." (source: https://learn.microsoft.com/en-us/azure/ai-foundry/responsible-ai/openai/data-privacy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 4

What certifications does Microsoft Azure AI publish?

Accepted Answer

IRAP: Microsoft states ACSC certification of Azure and Office 365 at the PROTECTED classification (April 2018), with the September 2019 assessment scope covering 113 services at PROTECTED, and further incremental Azure/Dynamics and Office 365 assessments completed December 2020. Published statement: "In April 2018, the ACSC announced the certification of Azure and Office 365 at the PROTECTED classification." (source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-irap-australia, checked 2026-09-25). ISO/IEC 27001 and HITRUST CSF: BAA-covered Microsoft services are audited by accredited independent auditors for these certifications. Published statement: "undergo audits conducted by accredited independent auditors for the Microsoft ISO/IEC 27001 certification and the HITRUST Common Security Framework (CSF) certification" (source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 5

Which subprocessors does Microsoft Azure AI name?

Accepted Answer

Microsoft publishes a Microsoft Online Services Subprocessors List identifying subprocessors authorised to process customer data or personal data. Named list not enumerated on the page checked. Published statement: "The publicly disclosed Microsoft Online Services Subprocessors List identifies subprocessors authorized to process customer data or personal data." (source: https://azure.microsoft.com/en-us/explore/global-infrastructure/data-residency/, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 6

What does Microsoft Azure AI publish about TGA status?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 7

Which practice management systems does Microsoft Azure AI list as integrations?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 8

Which Australian or New Zealand entity does Microsoft Azure AI contract through?

Accepted Answer

MICROSOFT PTY LTD, ABN 29 002 589 460, Australian Private Company, ABN active from 01 Apr 2000, GST registered from 01 Jul 2000, main business location NSW 2060. Recorded from the Australian Business Register; the register does not state which Microsoft entity contracts for Azure services. Published statement: "Entity name: MICROSOFT PTY LTD" (source: https://abr.business.gov.au/ABN/View/29002589460, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 9

What support hours does Microsoft Azure AI publish?

Accepted Answer

Published response-time targets on paid plans include: Minimal business impact (Sev C) within eight business hours; Moderate business impact (Sev B) within four hours; Critical business impact (Sev A) within one hour. Published statement: "Moderate business impact (Sev B): Within four hours Critical business impact (Sev A): Within one hour" (source: https://azure.microsoft.com/en-us/support/plans/, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Microsoft Azure AI

Data storage region

Data processing region

Model provenance

Subprocessors

Certifications

TGA status

PMS integrations

ANZ entity

Support hours

What Microsoft Azure AI publishes — answered from the record

Something wrong or out of date?