Microsoft can read every file on OneDrive. They scan them, their Copilot AI processes them, and Microsoft was the first company on the NSA's PRISM surveillance slides in 2007. In 2022, a Microsoft employee was caught accessing customer emails without authorisation. The company that built the backdoor for the NSA now stores your documents, reads them with AI, and connects them to 801 advertising partners. OneDrive syncs your files to the cloud by default — many users don't realise their desktop is being uploaded. If Microsoft's automated scanner flags something in your files, you lose access to your email (Outlook), your documents (Office 365), your gaming library (Xbox), and your Windows licence. One algorithm's judgment call, and your entire digital life is locked. Microsoft's Community Standards give them the right to make that call.
What they claim: OneDrive securely stores and protects files.
What we found: Microsoft holds keys. Not zero-knowledge. Scans for 'objectionable content.' PRISM first participant (2007). Same infrastructure: Outlook (801 ad partners), Copilot AI, Recall, DiagTrack.
What they claim: OneDrive integration is for convenience.
What we found: Every M365 document defaults to OneDrive. Combined with Outlook, Teams, DiagTrack -- Microsoft has most complete user data picture of any company.
What they claim: Personal Vault provides extra security.
What we found: Adds authentication but NOT zero-knowledge encryption. Microsoft can still access Vault files. Access control, not encryption upgrade.
What they claim: OneDrive gives users control over files.
What we found: Syncs Desktop/Documents/Pictures by default on Windows. Account suspension affects ALL Microsoft services. No way to use Windows Home without Microsoft account.