||Data center and infrastructure for both cloud service and various internal systems, including CRM and support.
||Theoretical access to all unencrypted data in databases, upon read to memory, and by unencrypted transmission between virtual machines in private VLAN.
|Microsoft Online Services
||Email and collaborative tools.
||Emails, chat, and documents stored/shared via OneDrive/Sharepoint Online and user information related to these.
||USA, transfer by Standard Contractual Clauses.
||SMS gateway for one time passcodes, system notifications and simulated phishing.
||Phone number for SMS recipients and SMS content.
||Data related to billing/accounting
||The customer's billing contact.