This unit provides you with a copy of a recent Microsoft Attestation of Compliance. One of the most important aspect of it is the geographical and functional scope that is claims.

It is definitely worthwhile reviewing this.

The responsibility matrix (other document) elaborates in more detail where Microsoft's responsibility stops.