If you are you are a supplier of goods and services to Microsoft which requires you to work with personal data and/or Microsoft confidential data, you will need to enrol in the Supplier Security and Privacy Assurance (SSPA) Program.

Our team of expert data protection consultants provides support to clients to meet the requirements of the SSPA Program. We have the experience and knowledge to carry out an independent assessment and we can assist you to fulfil your requirements.

Suppliers to Microsoft are required to take part in Microsoft’s annual compliance cycle to meet the Microsoft Supplier Data Protection Requirements (DPR). All enrolled suppliers must complete an annual self-attestation of DPR compliance. If you are a new supplier, you cannot start work until you have demonstrated compliance.

Pembroke Privacy can assist you to complete issued requirements to secure a SSPA Status Green (compliant) so that you can move your engagement with Microsoft forward.

Once the assessment is completed and all non-compliant issues have been resolved, we will provide you with a Confirmation Letter that can be submitted to the Microsoft Supplier Compliance Portal for SSPA team review.