Microsoft cloud background check

Candidates hired as employees who provide and maintain Microsoft online services in the United States must complete a Microsoft Cloud Background Check. Microsoft employees in the United States who might access customer data in their role must follow the Microsoft Cloud Background Check process required by all Microsoft online services. Outside of the United States, the process varies.

To the extent local law permits, the Microsoft Cloud Background Check includes the following checks:

• United States: Social Security Number trace
• Criminal history checks up to seven years for felony and misdemeanor offenses at the state, county, and local levels, and at the federal level if appropriate in the United States. An international criminal history check (dependent on local law) applies for areas outside of the United States.
• Global sanctions and enforcement check, including Office of Foreign Assets Control (OFAC) list, Bureau of Industry and Security (BIS) list, and Office of Defense Trade Controls Debarred Persons (DDTC) list checks.

We store evidence of the Microsoft Cloud Background Check in our employee database and connect it to our datacenter access control and remote access provisioning systems. If the Microsoft Cloud Background Check expires and the employee doesn't renew it, we revoke access to Microsoft services until the Microsoft Cloud Background Check is completed. When the employment relationship with Microsoft ends, we immediately revoke all datacenter access.

All employees with physical or logical access to the environments that run United States Government services must have their United States citizenship verified. To verify citizenship, Microsoft orders a background screen for employees and new hire candidates in Microsoft's background screening provider's system. The employee or new hire candidate must provide an unexpired US Passport, which the background screening provider's system validates. Microsoft's HR systems record the verified results.

Personnel with logical access to Microsoft online services for the U.S. Government Community Cloud must comply with federal government requirements of the FBI's Criminal Justice Information Services (CJIS), including personnel screening. CJIS screening in support of the Microsoft 365 U.S. Government service includes a fingerprint-based criminal background check adjudicated by the CJIS system agency designated adjudicator in states that have enrolled in the Microsoft Online Services CJIS support program.

Periodic rescreening

Certain management, security, or other roles might require periodic rescreening and additional background checks, including employees in roles that require access to customer data.

Resources

• Microsoft Offering: Criminal Justice Information Services (CJIS) Security Policy