The Microsoft SSPA initiative (formerly known as Vendor Privacy Assurance Program compliance) is designed to standardize and strengthen the handling of Microsoft customer, partner, and employee personal information by Microsoft vendors worldwide. Microsoft vendors who collect, store or process customer, partner or employee personal information are required to comply with the program.

https://www.microsoft.com/en-us/procurement/msp-overview.aspx