Microsoft SSPA Attestation

Elevate your relationship with Microsoft through the SSPA Attestation

Organizations who are or want to be a Microsoft vendor must meet the requirements within the Supplier Security and Privacy Assurance Program (SSPA). This program requires that any vendor that collects, stores, or processes customer, partner, or employee information meet the reporting requirements. As a Microsoft Preferred Assessor, A-LIGN has the experience needed to secure your path.

…[I]t’s been a great experience working with [A-LIGN on Microsoft SSPA], and I sincerely appreciate the responsiveness and attention to detail throughout.”

– Robert Half

The A-LIGN Difference


Fortune 500 Clients Served


Client Satisfaction Rating


Average Years of Experience


Client Retention Rating

ISO 27001 + ISO 27701

Together the ISO 27001 and ISO 27701 certifications satisfy the requirements of Microsoft SSPA. These two certifications provide the controls and guidance required for establishing, implementing, maintaining, and continually improving an organization’s privacy information management systems (PIMS). The need for both ISO 27701 and ISO 27001 certifications will become increasingly important as privacy concerns and requirements continue to grow within organizations. An ISO 27001 and ISO 27701 certificate will be valid for three (3) years upon completion.

Contact Us

Microsoft SSPA Assessment

A-LIGN can conduct a Microsoft SSPA assessment which will include a review of organizational controls as they relate to Microsoft’s Supplier Data Protection Requirements (DPR). This will include identification of any gaps against the requirements along with remediation recommendations. At the end of the assessment a practitioner’s report will be provided. A Microsoft SSPA Assessment will be valid for one (1) year upon completion.

Learn More

Reach the Top

Ready to partner with A-LIGN for Microsoft SSPA? Our team is available to guide you with any of your cybersecurity and compliance needs. Complete the form and our team will reach out within 24 hours.