--- title: 5 Ways Office 365 Has Gained Trust in the Life Science Industry description: Five ways that make Microsoft Office 365 stand alone when it comes to managing GxP content in regulated industries. image: https://blog.montrium.com/hubfs/5%20qualifiers%20that%20endorse%20the%20use%20of%20Office%20365%20for%20life%20sciences-1.jpg --- [![Montrium-header-logo](https://blog.montrium.com/hs-fs/hubfs/2%20-%20Logos/Header-Logo.png?width=166&name=Header-Logo.png "Header-Logo")](https://www.montrium.com) - [Products](https://www.montrium.com) - [Platform Overview](https://www.montrium.com/platform-overview) - [eTMF Connect](https://www.montrium.com/etmf-connect) - [RegDocs Connect](https://www.montrium.com/regdocs-connect) - [Quality Connect](https://www.montrium.com/quality-management) - [Demo Center](https://www.montrium.com/demo-center) - [Pricing](https://www.montrium.com/pricing) - [Adobe Services](https://www.montrium.com/adobe-sign-validation-services) - [Insights](https://www.montrium.com/resource-center) - [Connect Blog](https://blog.montrium.com/blog) - [The Experts Blog](https://blog.montrium.com/experts) - [Knowledge Center](https://www.montrium.com/resource-center) - [Webinars](https://www.montrium.com/webinars) - [Demo Center](https://www.montrium.com/demo-center) - [News & Press](https://www.montrium.com/newsroom) - [Conferences & Events](https://www.montrium.com/events-conferences) - [About](https://www.montrium.com/about) - [Our Company](https://www.montrium.com/about) - [Our Customers](https://www.montrium.com/customers) - [Careers](https://www.montrium.com/careers) - [Contact Us](https://www.montrium.com/contact-us) - [Request Demo](https://www.montrium.com/demo) # 5 Ways Office 365 Has Gained Trust in the Life Science Industry by [Gianna De Rubertis](https://blog.montrium.com/experts/author/gianna-de-rubertis) [Regulations & Standards](https://blog.montrium.com/experts/topic/regulations-standards) It’s no big secret that the regulated industry of the life sciences is regarded as extremely conservative, detail-oriented and risk-averse. As a result, when compared to other industries, life science companies have been slower to adopt cloud-based solutions including SaaS, PaaS, and IaaS.   One of the reasons giving companies ‘cold feet’ when it comes to making the transition is due to concern over the shift in control regarding software, platform and infrastructure design and development. The traditional ways of implementing change control, configuration management, and logical security are challenged as responsibilities transfer towards the cloud service provider making changes in the system.  Despite reservations, **more and more life science companies are recognizing the need to transition to cloud technologies in order to encourage innovation and to remain competitive.** Cloud service providers can facilitate these customers’ transition to the cloud by being fully transparent about the standards and practices they follow. Providing this information reassures life science organizations that the service provider’s processes are in line with the expectations of GxP regulated industries.   Microsoft is no exception. Just like other cloud service providers, Microsoft must earn the trust of its customers and potential customers. For life science companies who are considering Office 365 as a business solution, here is a list of qualifying resources that may alleviate some of the concerns about Microsoft’s ability to provide Office 365 services in a manner that meets GxP expectations. ## **Office 365 functionality is affirmed by industry experts** Office 365 regularly (annually) undergoes independent audits by third-party accredited assessors. These audits cover several standards and security frameworks, including:  - SOC 1 Type II (SSAE 18)   - SOC 2 Type II (SSAE 18)   - ISO/IEC 27001:2013   - ISO/IEC 27017:2015  - ISO/IEC 27018:2014   - HITRUST   - FedRAMP (NIST SP 800-53 Rev. 4)   The latest certificates and audit reports are available to customers in Microsoft’s [Service Trust Portal](https://servicetrust.microsoft.com/).  Although none of these certifications and attestations are specifically targeted for GxP compliance, their scope is closely aligned with the controls required to meet regulatory requirements, such as FDA 21 CFR Part 11 and EU Volume 4 Annex 11.   Office 365 customers have shared responsibilities with Microsoft to manage applicable controls. It is possible – and recommended – to review the controls identified within the certificates and audit reports, to map them to regulatory requirements, and to ensure that no compliance deficiencies are identified for activities carried out under Microsoft’s purview. [![Modernizing GxP Content Migration In & Out of Office 365](https://blog.montrium.com/hs-fs/hubfs/5%20-%20CTAs/CTA-WEBINAR-SOCIAL---Migrating-Content-in-and-out.jpg?width=796&name=CTA-WEBINAR-SOCIAL---Migrating-Content-in-and-out.jpg)](https://info.montrium.com/migration-getting-gxp-content-in-and-out-of-office-365) ## **Contractual commitments are clear-cut** Life science companies are driven by regulatory guidance to establish mutual expectations of services delivery in a formal Service Level Agreement (SLA) or Quality Agreement.  Microsoft imparts SLA that describes their commitments regarding uptime and connectivity for Office 365 services, maintaining a financially-backed 99.9% uptime guarantee that your services and documents are available.  Built-in diagnostic tools allow administrators to monitor Office 365 service health, including critical issues affecting service availability (active incidents) and posted advisories which help with application troubleshooting.   The SLA also describes the conditions for obtaining service credits and the process for submitting claims. Moreover, Microsoft publishes Online Services Terms (OST) which is updated monthly and explains Microsoft’s contractual commitments towards services delivery and protection of customer data.   The latest SLA and OST are publicly available for download on the [Licensing terms](https://www.microsoft.com/en-us/licensing/product-licensing/products) page of Microsoft’s website. Microsoft’s SLA and OST are relevant and provide coverage of the commitments defined in a typical Quality Agreement. **Ample GxP training resources provided** Microsoft offers an [Office 365 Training Center](https://support.office.com/office-training-center?redirectSourcePath=%252fen-US%252farticle%252foffice-training-center-b8f02f81-ec85-4493-a39b-4c48e6bc4bfb) that provides a wide range of training material and online learning resources as a hub for “modern workplace training” to empower end users to comply with GxP regulations. The content is updated constantly to reflect the current spectrum of features and service offerings. Subscribers can find cheat sheets, videos, tips, guides, templates and more to learn the basics, get up to speed, and increase productivity.   As a platform for ongoing knowledge support, this provides customers with the opportunity to acquire the knowledge and skills needed to continuously use and maintain their collaborative Office 365 environment. ## Transparent product roadmap updates Transparency of upcoming updates is crucial to life science customers who have a traditional change control mindset and wish to evaluate changes before they are implemented.  The [Office 365 Roadmap](https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=) has recently been updated to become a part of the Microsoft 365 Roadmap, where the latest updates on products are shared in one consolidated place. The Microsoft 365 Roadmap lists planned updates on products, features, and services - providing foresight on updates that are in development. As an update in development gets closer to being rolled out and then launched, it is communicated to customers in detail via the Roadmap. ## Detailed GxP Guidelines The [Microsoft Office 365 GxP Guidelines](https://info.montrium.com/office-365-whitepaper) is a handbook written for life sciences organizations using Office 365 to manage GxP-regulated content. Containing a great amount of useful information, the document includes an overview of the processes and controls used by Microsoft to preserve the confidentiality, integrity and availability of customers’ data.  The Guidelines also provide an overview of key Office 365 features that customers should use to meet regulatory requirements and recommendations for validation. If you're interested in learning more on the topic, check out Chrysa's article on how to implement a [risk-based approach](https://blog.montrium.com/experts/implementing-a-risk-based-approach-to-office-365-sharepoint-online-validation) to validating Office 365 and SharePoint Online.    --- ## **Final Words** As discussed, Office 365 is a line of subscription services offered by Microsoft, a global leader in computing technologies [making impressive strides in the life sciences space](https://techcommunity.microsoft.com/t5/Healthcare-and-Life-Sciences/bg-p/HealthcareAndLifeSciencesBlog). Any concerns that life sciences organizations may have about security and data integrity in Office 365 for GxP content management are arguably unfounded.   [Cl](https://blog.montrium.com/experts/6-cloud-compliance-challenges-facing-life-science-companies-and-how-to-combat-them)[oud compliance](https://blog.montrium.com/experts/6-cloud-compliance-challenges-facing-life-science-companies-and-how-to-combat-them) and data protection is part of Microsoft’s core business and it is inconceivable that a life sciences company (whose core business is not computing technologies) could ever have the same standard of resources and experts for data security as Microsoft does.   Many useful and reputable sources are available that demonstrate how Microsoft follows best practices and provides Office 365 services in a manner that meets GxP expectations. Life sciences organizations are encouraged to consult and leverage these resources as they seek to benefit from the full potential of cloud-based solutions, including Office 365. Our [Office 365 Compliance Toolkits](https://www.montrium.com/office-365-compliance-toolkits)enable organizations in regulated industries to move towards operating in alignment with GxP compliance standards in the cloud.  [![Montrium Office 365 compliance toolkits](https://no-cache.hubspot.com/cta/default/334618/1d12f701-2322-497f-b9db-5923f0fb6d94.png)](https://cta-redirect.hubspot.com/cta/redirect/334618/1d12f701-2322-497f-b9db-5923f0fb6d94) By [Gianna De Rubertis](https://blog.montrium.com/experts/author/gianna-de-rubertis) | February 5, 2019 at 9:15 AM | [Regulations & Standards](https://blog.montrium.com/experts/topic/regulations-standards) | [0 Comments](https://blog.montrium.com/experts/5-ways-office-365-has-gained-trust-in-the-life-science-industry#comments-listing) #### Share This Story, Choose Your Platform! - [Tweet](https://twitter.com/share) ### About the Author: [Gianna De Rubertis](https://blog.montrium.com/experts/author/gianna-de-rubertis) ![](https://blog.montrium.com/hubfs/gianna%20copy_150x150.png) Gianna is the Director of the Professional Services team and is responsible for in-house verification projects as well as validation services provided to external clients. She has extensive validation experience, which includes validation of manufacturing equipment, utilities, and computerized systems (including ERP, EDMS, and eSignature solutions). Gianna has also developed a solid understanding of the various regulations which apply to the pharmaceutical, biotech and device industries. [Facebook](http://www.facebook.com/montrium) [LinkedIn](http://ca.linkedin.com/pub/gianna-de-rubertis/1a/16b/744) [Twitter](https://www.twitter.com/montrium) ### Related posts [![How to Navigate Controls for Advanced Data Governance in Office 365](https://blog.montrium.com/hubfs/How%20to%20Navigate%20Controls%20for%20Advanced%20Data%20Governance%20in%20Office%20365.jpg)](https://blog.montrium.com/experts/how-to-navigate-controls-for-advanced-data-governance-in-office-365) #### [How to Navigate Controls for Advanced Data Governance in Office 365](https://blog.montrium.com/experts/how-to-navigate-controls-for-advanced-data-governance-in-office-365) [![Business Performance Enhancements Series – How to Get Started With Flow and SharePoint Online](https://blog.montrium.com/hubfs/Blog-CTA---Business-Process-Enhancements.jpg)](https://blog.montrium.com/experts/business-performance-enhancements-series-how-to-get-started-with-flow-and-sharepoint-online) #### [Business Performance Enhancements Series – How to Get Started With Flow and SharePoint Online](https://blog.montrium.com/experts/business-performance-enhancements-series-how-to-get-started-with-flow-and-sharepoint-online) [![What You Should Know About Continuous Validation in Office 365](https://blog.montrium.com/hubfs/11%20-%20Images/CTAs/Blog-Featured-image---What-you-should-know-about-CVaaS.jpg)](https://blog.montrium.com/experts/continuous-validation-in-office-365) #### [What You Should Know About Continuous Validation in Office 365](https://blog.montrium.com/experts/continuous-validation-in-office-365) [![Why You Need to Validate (and Re-Validate) a Cloud-Based System](https://blog.montrium.com/hubfs/CTA_Why%20You%20Need%20to%20Validate%20(and%20Re-Validate)%20a%20Cloud-Based%20System.jpg)](https://blog.montrium.com/experts/why-you-need-to-validate-and-re-validate-a-cloud-based-system) #### [Why You Need to Validate (and Re-Validate) a Cloud-Based System](https://blog.montrium.com/experts/why-you-need-to-validate-and-re-validate-a-cloud-based-system)  [![Office 365 Compliance Toolkits](https://no-cache.hubspot.com/cta/default/334618/2c86971b-7abc-4028-811f-b523b2f44280.png)](https://cta-redirect.hubspot.com/cta/redirect/334618/2c86971b-7abc-4028-811f-b523b2f44280) ### Recent Posts #### NEWSLETTER SIGNUP - PRODUCTS - [Clinical Solutions](https://www.montrium.com/etmf-connect) - [Regulatory Solutions](https://www.montrium.com/regdocs-connect) - [Quality Solutions](https://www.montrium.com/quality-connect) - Adobe - [Adobe Validation Services](https://www.montrium.com/adobe-sign-validation-services) - [Adobe Acrobat Sign Validation Pack](https://www.montrium.com/adobe-sign-validation-pack) - COMPANY - [About Us](https://www.montrium.com/about) - [Careers](https://www.montrium.com/careers) - [Blog](https://blog.montrium.com/blog) [![Montrium-Logo_email header](https://blog.montrium.com/hs-fs/hubfs/2%20-%20Branding/Current%20Montrium%20Logos/Montrium-Logo_email%20header.png?width=353&name=Montrium-Logo_email%20header.png)](https://www.montrium.com/) Montrium is a knowledge based company, that focuses on leveraging its deep understanding of GxP processes and technologies to provide cost-effective solutions to life science organizations. Copyright 2026 Montrium Inc | All Rights Reserved | [Privacy Policy](https://www.montrium.com/privacy-policy) | [Terms & Conditions](https://www.montrium.com//terms-conditions) - [](http://www.facebook.com/Montrium) - [](http://www.twitter.com/Montrium) - [](http://www.youtube.com/user/Montrium) - [](https://plus.google.com/+Montrium) - [](http://www.linkedin.com/company/montrium) - [](mailto:info@montrium.com) ![](https://dc.ads.linkedin.com/collect/?pid=568201&fmt=gif)