Office 365 is a cloud-based service designed to help meet your organization’s needs for robust security, reliability, and user productivity, to help save time and money.
When you move your organization to a cloud service, you must be able to trust your service provider with your most important, sensitive, and confidential data or choose to move only your least sensitive data to the cloud. Because security is paramount for business success, Microsoft has robust policies, controls, and systems built into Office 365 to help keep your information safe. Office 365 is designed on the principles of the Security Development Lifecycle, a mandatory Microsoft process that embeds security requirements into every phase of development.
Microsoft-managed service-level security technologies and policies are enabled by default, and customer-managed controls allow you to customize your Office 365 environment to fit your organization’s security needs. Office 365 is continuously updated to enhance security.
Data you put into Office 365 belongs to you, that means you have complete control of it. We give you extensive privacy controls and visibility into where your data resides and who has access to it, as well as availability and changes to the subscription service. If you end your subscription, you can take your data with you at any time (https://www.microsoft.com/en-us/trustcenter/security/office365-security).