Data residency and privacy in Azure SRE Agent

This article explains how the SRE Agent handles your data, including where it stores your data, how it processes your data, and the privacy measures it uses to protect your information.

Azure SRE Agent supports multiple AI model providers for investigations, incident response, and operational automation. Anthropic is one of the available providers and operates as a non-Microsoft provider managed by Microsoft.

Data residency

Data residency depends on where your selected model provider processes inference requests and where Azure SRE Agent stores your data.

Model inference

Azure SRE Agent processes model inference requests according to the selected provider:

• Azure OpenAI: For agents deployed in EU and EFTA regions, inference stays within Microsoft's EU Data Boundary. Outside the boundary, inference can happen globally.
• Anthropic: Inference can happen globally and isn't covered by Microsoft's EU Data Boundary commitments.

The default and available providers vary by region:

Stored data

Azure SRE Agent stores data according to the following rules, regardless of where your managed resources are located.

• Conversation history and uploaded files: Stored in the agent region you select. Conversation history includes prompts, responses, and serialized tool messages, which can contain resource analysis, result excerpts, or summaries.
• Memory and knowledge search indexes: Stored in the selected agent region unless the following table specifies another region.

Search-index regional placement

For the following agent regions, memory and knowledge search indexes might be stored in another region.

Verify the active model provider

To check which AI model provider your agent is currently using:

1. Go to the Azure SRE Agent portal.
2. Select your agent, and then go to Settings.
3. Under AI Model Provider, view the active provider.

Enable Anthropic where it's available as an opt-in choice

If Anthropic is available as an opt-in choice for your agent:

1. Go to the Azure SRE Agent portal.
2. Select your agent, and then go to Settings.
3. Under AI Model Provider, select Anthropic.
4. Review the data residency notice and confirm.

Data handling

When your agent investigates an issue, it queries your data sources. The service stores tool results, which can include query results, with the conversation thread.

Anthropic operates under Microsoft's oversight with contractual safeguards and technical and organizational measures in place. The Microsoft Product Terms and Microsoft Data Protection Addendum (DPA) apply when you use Anthropic models through Azure SRE Agent.

For more information about non-Microsoft data access, see Microsoft Data Access Management. For a list of all non-Microsoft providers that Microsoft works with, see the Service Trust Portal.

For Azure OpenAI data handling, see Data, privacy, and security for Azure OpenAI.

Privacy

Microsoft and Anthropic don't use your data to train AI models. The service uses your data only to provide, support, and debug the service, and it isolates your data by tenant and Azure subscription.

Microsoft engineers don't have default access to Azure SRE Agent customer data. Access required for support or service operations is governed by Microsoft Data Access Management.

Customer Lockbox for Microsoft Azure isn't currently supported for Azure SRE Agent.

Data retention and deletion

Azure SRE Agent keeps your conversations, uploaded knowledge, agent memory, and connector settings until you delete them. It doesn't delete them automatically.

• Threads: Delete a thread to remove its conversation, files, and session insights. Agent memory learned from a deleted thread might remain until you delete the agent.
• Knowledge documents: Remove a document from the knowledge base.
• Connectors: Remove a connector to delete its stored credentials.
• Agent: Delete the agent to remove its agent-managed data, including conversations, memory, knowledge, files, search indexes, and credentials.
• Application Insights: Data sent to your Application Insights resource follows that resource's retention settings.

Related content