Power Query · Trust Center

Power Query Trust Center

Trust center

Power Query has no product-specific trust portal. It inherits the Microsoft corporate trust program: the Microsoft Trust Center for policy, the Service Trust Portal for audit reports, and the Microsoft compliance offerings index for the certification list. The offerings index explicitly scopes Power Platform — the family Power Query dataflows ship in — alongside Azure, Dynamics 365 and Microsoft 365.

Power Query maintains a public trust center documenting ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, ISO/IEC 42001, ISO 22301, ISO 9001, SOC 1, SOC 2, SOC 3, CSA STAR (attestation, certification, self-assessment), FedRAMP, FIPS 140-2, DoD IL2 / IL5, NIST 800-171, HIPAA / HITECH, HITRUST, PCI DSS, PCI 3DS, GxP / FDA CFR Title 21 Part 11, GDPR, DORA (EU), C5 (Germany), IRAP (Australia), and ISMAP (Japan) compliance.

Business IntelligenceData IntegrationData TransformationETLMicrosoftMicrosoft FabricPower BIDataflowsM LanguageData ConnectorsSelf-Service ETL

Trust center: https://www.microsoft.com/en-us/trust-center

Certifications & Compliance

ISO/IEC 27001ISO/IEC 27017ISO/IEC 27018ISO/IEC 27701ISO/IEC 42001ISO 22301ISO 9001SOC 1SOC 2SOC 3CSA STAR (attestation, certification, self-assessment)FedRAMPFIPS 140-2DoD IL2 / IL5NIST 800-171HIPAA / HITECHHITRUSTPCI DSSPCI 3DSGxP / FDA CFR Title 21 Part 11GDPRDORA (EU)C5 (Germany)IRAP (Australia)ISMAP (Japan)

Source

Trust Center

generated: '2026-08-29'
method: searched
source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-home
provider: Power Query
providerId: power-query
description: 'Power Query has no product-specific trust portal. It inherits the Microsoft corporate trust program:
  the Microsoft Trust Center for policy, the Service Trust Portal for audit reports, and the Microsoft compliance
  offerings index for the certification list. The offerings index explicitly scopes Power Platform — the family
  Power Query dataflows ship in — alongside Azure, Dynamics 365 and Microsoft 365.'
trust_center:
  url: https://www.microsoft.com/en-us/trust-center
  status: 403
  note: Bot-challenged for non-browser clients; the page demonstrably exists and is linked from the Power BI security
    documentation.
  report_portal: https://servicetrust.microsoft.com/
  report_portal_status: 200
  report_access: sign-in required for audit reports
  compliance_index: https://learn.microsoft.com/en-us/compliance/regulatory/offering-home
  compliance_index_status: 200
scope_note: These are Microsoft-wide / Power Platform-wide attestations. No attestation scoped to "Power Query"
  as a discrete service was found.
certifications:
- ISO/IEC 27001
- ISO/IEC 27017
- ISO/IEC 27018
- ISO/IEC 27701
- ISO/IEC 42001
- ISO 22301
- ISO 9001
- SOC 1
- SOC 2
- SOC 3
- CSA STAR (attestation, certification, self-assessment)
- FedRAMP
- FIPS 140-2
- DoD IL2 / IL5
- NIST 800-171
- HIPAA / HITECH
- HITRUST
- PCI DSS
- PCI 3DS
- GxP / FDA CFR Title 21 Part 11
- GDPR
- DORA (EU)
- C5 (Germany)
- IRAP (Australia)
- ISMAP (Japan)
data_protection:
  privacy_statement: https://www.microsoft.com/en-us/privacy/privacystatement
  services_agreement: https://www.microsoft.com/en-us/servicesagreement/
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
  url: https://apievangelist.com
certification_detail:
- name: ISO/IEC 27001
  category: global
- name: ISO/IEC 27017
  category: global
- name: ISO/IEC 27018
  category: global
- name: ISO/IEC 27701
  category: global
- name: ISO/IEC 42001
  category: global
  note: AI management system.
- name: ISO 22301
  category: global
- name: ISO 9001
  category: global
- name: SOC 1
  category: global
- name: SOC 2
  category: global
- name: SOC 3
  category: global
- name: CSA STAR (attestation, certification, self-assessment)
  category: global
- name: FedRAMP
  category: us-government
- name: FIPS 140-2
  category: us-government
- name: DoD IL2 / IL5
  category: us-government
- name: NIST 800-171
  category: us-government
- name: HIPAA / HITECH
  category: industry
- name: HITRUST
  category: industry
- name: PCI DSS
  category: industry
- name: PCI 3DS
  category: industry
- name: GxP / FDA CFR Title 21 Part 11
  category: industry
- name: GDPR
  category: regional
- name: DORA (EU)
  category: regional
- name: C5 (Germany)
  category: regional
- name: IRAP (Australia)
  category: regional
- name: ISMAP (Japan)
  category: regional
url: https://www.microsoft.com/en-us/trust-center

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/power-query-trust-center"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.