Vast amounts of highly sensitive police data are stored on Microsoft's cloud platforms, according to a Guardian investigation. This includes criminal records, victim statements, internal emails, and other confidential information from over 40 police forces across the UK. Some of this data may be classified as "secret" or "top secret," according to a police document reviewed by the Guardian. The cloud platform in question is Microsoft Azure, a widely used service by governments and businesses worldwide. Azure relies on a global network of data centers, networking equipment, and fiber optic cables spread across more than 100 countries. In recent years, concerns have grown about the security of data stored on cloud platforms. In 2017, British police decided to place some of their most sensitive data on Microsoft's platform, a decision recorded in a document examined by the Guardian. Police officers at the time acknowledged that "US government insiders" could access the data and that it could be transmitted worldwide, though the full extent of this was unknown. Experts who reviewed the Guardian's findings said these risks still exist today. Almost every UK police force now uses Microsoft Azure, and the UK government spends at least £1.9bn annually on Microsoft software. A senior figure in UK policing told the Guardian that the data stored on Microsoft's cloud is "some of the most sensitive that exists," adding that if it were to fall into the wrong hands or be inaccurate, it could result in harm or even death. When the Guardian raised concerns about the security of this data, police officials downplayed the risks, stating that US authorities could not access the data without explicit permission and that the data remained in the UK. However, these claims contradict Microsoft's own disclosures. In 2023, Microsoft told Police Scotland that data "can go outside the UK" and that it "cannot guarantee data sovereignty." The company also said it does not provide any government with direct or unfettered access to customer data and has not shared UK data in response to US government requests. The risks of data exposure were discussed in a 2017 meeting led by senior police officer Ian Dyson. The meeting evaluated 15 potential risks associated with transferring police data to Microsoft's global cloud. It noted that Microsoft's software could be vulnerable to cyberattacks and that police data could be stored and transmitted worldwide, with the extent of this unknown. The document specifically highlighted the risk posed by "US government insiders" and acknowledged that a significant volume of the data being considered for migration exceeded the "official" classification, potentially falling into the "secret" or "top secret" categories. The assessment concluded that Microsoft's platform could not guarantee the security of this data, making it a more attractive target for attackers.