Does Microsoft 365 Work in China? The 21Vianet Sovereign-Cloud Instance, Data Residency & Cross-Border

Microsoft 365 is available in mainland China — but through a separate, physically isolated sovereign cloud, Microsoft 365 operated by 21Vianet (世纪互联), with its own endpoints (partner.outlook.cn, *.sharepoint.cn) and its own sign-up, not the global worldwide service. The real decision for a China-facing deployment isn't speed — it's data residency: running the worldwide service from the mainland puts mailboxes, files, Teams content and the employee directory, nearly all of it personal information, in Microsoft's datacenters outside China, a PIPL cross-border transfer, while the data-resident lawful path is the 21Vianet-operated China service. A compliance-first look at the two services, the cross-border-data question, Cybersecurity Law Article 39 (formerly Article 37) residency, and the lawful in-country path.

By the 21YunBox Compliance Team · Reviewed 2026-10-08 · Verified against Microsoft 365's own documentation

Does Microsoft 365 work in China?

Yes — Microsoft 365 is available in mainland China, but through a separate, physically isolated sovereign cloud: "Microsoft 365 operated by 21Vianet" (世纪互联), not the worldwide service most organizations sign in to. Microsoft documents it as a China-specific service, operated inside the mainland by 21Vianet from local datacenters that keep data within China, with its own endpoints (partner.outlook.cn, *.sharepoint.cn) and its own sign-up.

Because a lawful in-country option exists, the real decision is data residency, not speed. Microsoft 365 holds an organization's most sensitive records — mailboxes, documents, Teams conversations and the employee directory, nearly all of it personal information under Chinese law. Run those on the worldwide service from the mainland and the data sits in Microsoft's datacenters outside China, a PIPL cross-border transfer (and, for a CII operator, a residency problem under Cybersecurity Law Article 39 (formerly Article 37)); larger or sensitive transfers can add a CAC data-export security assessment. The data-resident path is the 21Vianet-operated China service — subject to availability and feature parity, which you confirm with Microsoft and 21Vianet.

21YunBox maps the service choice, localizes your collaboration onto the data-resident China path, and delivers the China-facing apps and portals that surface it in-country on ICP-filed infrastructure — so it runs legally in the mainland, with no circumvention of any kind. Treat the specifics as a risk to confirm with counsel.

Compliance snapshot

Microsoft 365 is available in mainland China — but through a separate, physically isolated sovereign cloud, Microsoft 365 operated by 21Vianet (世纪互联), which Microsoft documents as a China-specific service with its own endpoints (partner.outlook.cn, *.sharepoint.cn), kept within China.

Running the worldwide service from the mainland puts mailboxes, SharePoint/OneDrive files, Teams content and the Entra directory — nearly all of it personal information — in Microsoft's datacenters outside China: a PIPL cross-border transfer (Articles 38–43).

The data-resident lawful path is the 21Vianet-operated China service, where Microsoft says data is kept in-country; it is a separate deployment with its own sign-up (subject to availability and feature parity — confirm with Microsoft and 21Vianet).

For a critical information infrastructure operator, Cybersecurity Law Article 39 (formerly Article 37) and PIPL Article 40 require in-country storage; larger-volume or sensitive cross-border transfers add a CAC data-export security assessment.

The China-facing apps, intranets and portals that sign in against Microsoft 365 are themselves mainland services — they need an ICP filing and in-country delivery; 21YunBox maps the service choice, localizes onto the data-resident path, and delivers it in-country.

Get a compliance assessment

We map the service choice, localize onto the data-resident China path, and deliver it in-country

What Microsoft 365's own documentation says about China

Fact	Primary source
Microsoft 365 runs in China through a China-specific service operated by 21Vianet. Microsoft's service description states that “21Vianet operates, provides, and manages delivery of the service” and “operates local Microsoft 365 data centers to provide the ability to use Microsoft 365 services while keeping data within China.” It is a distinct China service, not the worldwide one.	Microsoft Learn — Microsoft 365 operated by 21Vianet, service description (learn.microsoft.com), updated 2026, retrieved 2026-10-08
The China service has its own endpoints, separate from the worldwide service. Microsoft's network documentation lists China-specific endpoints — partner.outlook.cn for Exchange Online, *.sharepoint.cn for SharePoint and OneDrive, and login.partner.microsoftonline.cn for sign-in — distinct from the worldwide Microsoft 365 service.	Microsoft Learn — URLs and IP address ranges for Microsoft 365 operated by 21Vianet (learn.microsoft.com), updated 2026-07-31, retrieved 2026-10-08
Microsoft states the China service is subject to Chinese law and not at full feature parity. The service description says “These services are subject to Chinese laws,” and that “there are some features that have not yet been enabled,” with the service coming “closer to full feature parity over time” — so availability must be confirmed per workload.	Microsoft Learn — Microsoft 365 operated by 21Vianet, service description (learn.microsoft.com), updated 2026, retrieved 2026-10-08
Using the worldwide service for China data is a cross-border transfer. Sending a Chinese user's or organization's personal information to Microsoft 365 hosted outside the mainland triggers PIPL Chapter III (Articles 38–43): notice, a separate consent, and one transfer mechanism — a CAC security assessment, the CAC standard contract, or certification — with in-country storage under Article 40 (and Cybersecurity Law Article 39 (formerly Article 37)) for CII operators.	Personal Information Protection Law of the PRC, Chapter III, Articles 38–43 (cac.gov.cn), retrieved 2026-10-08

Sources verified by the 21YunBox compliance team on 2026-10-08.

For a mainland-China audience, the first thing to settle about Microsoft 365 is not how quickly Outlook loads or a file syncs — it is which Microsoft 365 you are running. Microsoft operates two separate things that matter here: the global, worldwide Microsoft 365 most organizations sign in to, and a distinct, physically separate China service — Microsoft 365 operated by 21Vianet (世纪互联) — run inside the mainland by a licensed local operator, with its own endpoints (partner.outlook.cn, *.sharepoint.cn, login.partner.microsoftonline.cn), its own sign-up, and data kept in-country. So the honest answer to “does Microsoft 365 work in China?” is yes — but through a specific service, on a specific legal footing.

Because a lawful in-country option already exists, the decision moves off the speed axis and onto a data one. Microsoft 365 is where an organization’s most sensitive records live — mailboxes, documents, chat histories, the employee directory itself — and nearly all of it is personal information under Chinese law. Run those on the global, worldwide service from the mainland and the data rests in Microsoft’s commercial datacenters outside China, which is a cross-border transfer under PIPL; run them on the 21Vianet-operated China service and Microsoft’s own documentation says the data is kept within China. Which service you deploy, and how you deliver the apps and portals that surface it, is the compliance question — not the sync speed.

Microsoft Learn service description 'Microsoft 365 operated by 21Vianet' stating the service is specific to China, operated by 21Vianet from local datacenters that keep data within China, subject to Chinese laws, with some features not yet enabled — Microsoft's own service description, “Microsoft 365 operated by 21Vianet” (Microsoft Learn, updated 2026), states — verbatim — that “The Microsoft 365 operated by 21Vianet version of Microsoft 365 is specific to China,” that 21Vianet “operates local Microsoft 365 data centers to provide the ability to use Microsoft 365 services while keeping data within China,” that “These services are subject to Chinese laws,” and that “there are some features that have not yet been enabled,” with the service coming “closer to full feature parity over time.” Source: learn.microsoft.com — Microsoft 365 operated by 21Vianet

Microsoft 365 in China at a glance

What decides it	In Microsoft's own terms — and China's law
What it is	Microsoft 365 — Exchange Online mail, SharePoint and OneDrive files, Teams, the Office apps, and the Microsoft Entra directory behind them. Two separate services matter for China: the global, worldwide service, and a distinct China service, Microsoft 365 operated by 21Vianet (世纪互联), run inside the mainland.
Is it available in the mainland?	Yes — through the separate, physically isolated China service. Microsoft documents "Microsoft 365 operated by 21Vianet" with its own endpoints (partner.outlook.cn, *.sharepoint.cn, login.partner.microsoftonline.cn) and its own sign-up, operated by 21Vianet. The worldwide service is a different deployment and is not connected to it.
Where the data lives	On the 21Vianet-operated China service, Microsoft says data is kept within China. On the worldwide service, mailboxes, documents, Teams content and the directory — overwhelmingly personal information — sit in Microsoft's datacenters outside the mainland, which is the cross-border question for China users and China data.
Cross-border & residency	Pushing China personal information to the worldwide service is a cross-border transfer under PIPL (Articles 38–43: notice, a separate consent, one transfer mechanism). For a critical information infrastructure operator, in-country storage is required under PIPL Article 40 and Cybersecurity Law Article 39 (formerly Article 37); larger-volume or sensitive transfers can add a CAC data-export security assessment.
The lawful path	Deploy on the 21Vianet-operated China service (or otherwise keep the data in-country), and deliver the China-facing apps, intranets and portals that surface it on ICP-filed, in-country infrastructure. 21YunBox maps the service choice, localizes your collaboration onto the data-resident path, and delivers it in-country — subject to the China service's availability and feature parity, which you confirm with Microsoft and 21Vianet.

Availability: a distinct China service, operated by 21Vianet

Microsoft 365’s presence in the mainland is set in Microsoft’s own documentation, not by a load-time test. The service description for “Microsoft 365 operated by 21Vianet” states that the service is “powered by technology that Microsoft has licensed to 21Vianet,” that “Microsoft does not operate the service itself” — “21Vianet operates, provides, and manages delivery of the service” — and that 21Vianet “operates local Microsoft 365 data centers to provide the ability to use Microsoft 365 services while keeping data within China.” Microsoft’s network documentation lists China-specific endpoints — partner.outlook.cn for Exchange Online, *.sharepoint.cn for SharePoint and OneDrive, login.partner.microsoftonline.cn for sign-in — that are entirely separate from the worldwide service. This is a sovereign cloud: operated inside the mainland by a licensed local operator, physically separate, with data kept in-country.

Two things follow. First, the China service is a separate deployment with its own sign-up — it is not a region you flip on inside a worldwide tenant, so “turning on China” is a migration decision, not a toggle. Second, Microsoft states plainly that “there are some features that have not yet been enabled” and that the service will come “closer to full feature parity over time” — so which workloads, apps and capabilities you depend on are offered in the China service is something to confirm directly with Microsoft and 21Vianet before you commit. For that reason this page publishes no first-party China latency figure for Microsoft 365: a lawful in-country service already exists, so speed is not the axis the decision turns on.

The cross-border-data story: mailboxes, files and the directory are personal information

The gate that actually decides a China Microsoft 365 deployment is the data. A mailbox is a running record of who an organization talks to and about what; a SharePoint or OneDrive library holds contracts, HR files and customer documents; Teams carries the day-to-day conversation; and Microsoft Entra ID behind it all is a directory of named employees. Almost all of it is personal information under China’s Personal Information Protection Law. Served to users in China from the worldwide service, that data rests in Microsoft’s commercial datacenters outside the mainland, and moving it there is a cross-border transfer. PIPL puts the duty on the handler — you, not Microsoft: Chapter III (Articles 38–43) requires notice, a separate consent distinct from the user’s agreement to use the mailbox or the file share, and one transfer mechanism — a CAC security assessment, the CAC standard contract, or certification.

Underneath that sits residency. A critical information infrastructure operator or a large-volume handler must store personal information collected in China inside the mainland — PIPL Article 40, together with Cybersecurity Law Article 39 (formerly Article 37), the data-localization article renumbered by the 2025 amendment that took effect on January 1, 2026 — an obligation the worldwide, offshore service structurally cannot meet. And where data volumes or sensitivity cross the thresholds, the transfer itself needs a CAC data-export security assessment before it may proceed. How heavy each of these is scales with your data and your role, so treat it as a risk to confirm with counsel against what you actually deploy — not a default assumption.

The data-resident path: the 21Vianet-operated China service

The lawful, in-country footing is the one Microsoft already documents: the 21Vianet-operated China service, where — in Microsoft’s words — data is kept within China. On that path the cross-border question does not arise in the same way, because the data does not leave. The work is to plan the deployment onto it. Because the China service is a separate sign-up rather than a region of a worldwide tenant, mailboxes, sites, identities and policies are stood up there rather than switched over by a flag, and any tenant-to-tenant move needs its own plan. And because Microsoft states some features “have not yet been enabled,” the first step is an availability-and-parity check: confirming that the workloads your organization runs on — the specific Exchange, SharePoint, Teams, Purview and Entra capabilities — are offered in the China service as you need them. That check is not a formality; it is what tells you whether the data-resident path carries your deployment as-is or needs adjustment.

The lawful path — and where 21YunBox fits (map, localize, deliver)

There is a lawful way to run Microsoft 365 for users in China, and its shape is clear: the data stays in-country on the 21Vianet-operated China service, and the China-facing apps and portals that hang off it are themselves delivered compliantly inside the mainland. That second half is easy to overlook. An intranet, a customer portal, or a line-of-business app that signs in against Microsoft 365 or embeds its content is a public-facing service in China, so it carries an ICP filing (备案) duty and needs compliant in-country delivery like any other China property — a portal that authenticates instantly but hangs off an unfiled, offshore front end has solved only half the problem.

That is the footing 21YunBox owns, and it is more than advice. Our China team does three things on it. We map the service choice and your PIPL and residency exposure, so you know which Microsoft 365 you should be running and what each option obliges. We localize your collaboration onto the data-resident path — standing up and integrating the 21Vianet-operated China service, or otherwise keeping the data in-country, in place of a worldwide service that cannot meet the residency duty. And we deliver the China-facing apps and portals that surface your mail, files and sites in-country on ICP-filed infrastructure — the 21YunBox Optimizer — in front of what you already run, with no rebuild and no re-platform. The result is a Microsoft 365 deployment that runs legally and compliantly for your users in China. What we do not do is route anyone around anyone’s terms or around China’s network controls: this is a lawful in-country deployment built on the China service Microsoft and 21Vianet already provide, and we neither use nor suggest circumvention of any kind.

Get a compliance assessment →

Related reading:

================= BLOCK 2 — ENHANCEMENT-JSON (merge into src/data/page-enhancements.json) =================

{

Frequently Asked Questions

Is Microsoft 365 available in mainland China?

Yes. Microsoft 365 is available in the mainland through a separate, physically isolated sovereign cloud — “Microsoft 365 operated by 21Vianet” (世纪互联) — which Microsoft operates from local datacenters that keep data within China, with its own endpoints (partner.outlook.cn, *.sharepoint.cn) and its own sign-up. That is a different service from the worldwide Microsoft 365, and the two are not connected. Microsoft notes some features are not yet enabled and parity improves over time, so confirm the specifics with Microsoft and 21Vianet.

Can we just use our existing (worldwide) Microsoft 365 for users in China?

You can reach it, but that is the compliance question, not a speed one. The worldwide service stores mailboxes, files, Teams content and the employee directory in Microsoft's datacenters outside the mainland, so pushing Chinese personal information to it is a cross-border transfer under PIPL (Articles 38–43: notice, a separate consent, and a transfer mechanism), and for a critical information infrastructure operator, in-country storage is required under PIPL Article 40 and Cybersecurity Law Article 39 (formerly Article 37). Larger or sensitive transfers can also need a CAC data-export security assessment. Confirm your exact obligations with counsel.

What's the data-resident, compliant path for Microsoft 365 in China?

Deploy on the 21Vianet-operated China service (or otherwise keep the data in-country), which keeps mailboxes, files and sites inside the mainland, and deliver the China-facing apps, intranets and portals that surface them on ICP-filed, in-country infrastructure. Because the China service is a separate sign-up with its own feature set, start with an availability-and-parity check for the workloads you rely on. 21YunBox maps the service choice and your PIPL and residency exposure, localizes your collaboration onto the data-resident path, and provides the in-country delivery — no rebuild and no re-platform, and no circumvention of any kind.