The answer must be:
1. Microsoft Privacy Statement
2. Online Services Terms: The Online Services Terms (OST) is a legal agreement between Microsoft and the customer. The OST details the obligations by both parties with respect to the processing and security of customer data and personal data. The OST applies specifically to Microsoft's online services that you license through a subscription, including Azure, Dynamics 365, Office 365, and Bing Maps.
3. Data Protection Addendum: The Data Protection Addendum (DPA) further defines the data processing and security terms for online services. These terms include, Disclosure of processed data, Data transfer, retention, and deletion, etc..
https://docs.microsoft.com/en-gb/learn/modules/examine-privacy-compliance-data-protection-standards/3-access-microsoft-privacy-statement