extrasphere.

AI governance, put to work.

Free tools
Menu
SSPA Section K

Does Section K apply to us?

Five questions to help you identify what to check with your Microsoft contact.

No email required. Your answers stay on this page.

Shown on your result and when you print it.

Five questions

Does this engagement process Microsoft data?

Consider Microsoft personal data or confidential data.

Are AI systems used on that Microsoft work?

Answer for this engagement, rather than every tool your company uses.

What is your role in those AI systems?

Choose the description that best matches your company.

Where is the data processed?

Use what you know about this engagement.

What does your current SSPA profile say?

If you haven’t checked it, choose “I’m not sure.”

This is a starting point, not a decision about your SSPA profile. Confirm it with your Microsoft contact. Based on the distinctions in Microsoft’s Supplier Security and Privacy Assurance Program Guide, version 12.