

Well, for once you need a commissioned data processing contract with Microsoft to let Microsoft (a third party) process your users private data. And probably a case-by-case study as Office365/Teams/… consists of a wide variety of different services and products and has lots of configurable options as well. And then we had the Datenschutzkonferenz come to the conclusion Office365 is not allowed in 2022. And it got messy after that. A big debate. The EU and several German states and different institutions doing reviews over the years and coming to different (sometimes opposing) conclusions. And the law concerning data safe harbour / EU data boundary got updated. And we have 2025 now and the situation in the US changes daily. On the upside I believe they’ve all renewed the Data Privacy Framework certifications so it’s legally possible to use the services. But I don’t think the debate is solved or over yet. And you’ll get some 50+ pages PDF instructions on how to configure your company/organization’s cloud office to be in line.
I suppose it’s similar for Google? But I see less professional use of their cloud services, I believe it’s more popular with smaller organizations and individuals. Honestly I don’t know much about that one, I’ve never considered Google for data that need protection, as that company is one of the largest data leeches on earth.
In any case OP needs to qualify for their NGO programs, as both Google and Microsoft cost about $1,000 a year for like 15 people and that’s well above their weight. And GDPR compliance for group members and commissioned data processing is a business feature, that’s not in your average private (free) Google account.
Other than that, you can google “office365 gdpr” (or dsgvo) if you haven’t heard of it yet and see all the different opinions out there.
I don’t think you read what I wrote. The debate is if and how cloud office solutions can be used according to law. Obviously that’s about the GDPR because that’s how the law concerned with it is called…
And the second thing: That’s what I wrote?! I could improve a bit on the grammar…