Is OneDrive Safe for Photos? Microsoft's Terms

What Microsoft can see in your OneDrive photos

Microsoft's page on how OneDrive safeguards your data says data is protected with TLS while it travels, and that "each file is encrypted at rest with a unique AES256 key. These unique keys are encrypted with a set of master keys that are stored in Azure Key Vault." That stops someone who intercepts the traffic or takes a disk. It does not stop Microsoft, which keeps the master keys.

The direct answer: OneDrive is not end-to-end encrypted, and Microsoft says in writing what it may do with the content. Its Services Agreement says "we may use automated systems and humans to review content to identify suspected spam, viruses, fraud, phishing, malware, jailbreaking, or other illegal or harmful content or conduct." Its privacy statement says Microsoft may disclose personal data,"including your content (like the content of your emails in Outlook.com or files in OneDrive)", to "comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies."

Viallo is a private photo sharing app: albums are shared by link, and a viewer opens one without an account. Photos are stored at full resolution, and Viallo's privacy page says it "does not use AI to process, analyze, or organize your photos, and never uses your photos for AI training." Viallo is not end-to-end encrypted either, so the difference from OneDrive is what the provider does with the photos, not whether it could open them.

The same question for other big providers is covered in Google Drive photo safety and Google Photos vs Amazon Photos. If the provider must not be able to open your files at all, Proton Drive, Tresorit and Ente each describe their storage as end-to-end encrypted on their own pages.

OneDrive's AI face grouping: on by default in most places

In October 2025 Slashdot reported that OneDrive had begun testing face recognition for photos with some preview users, and a Microsoft publicist confirmed the preview to it. Microsoft's help page for grouping photos by people now says the feature "is rolling out gradually and might not be available in your account or region yet", and that when it arrives "the People section appears on its own - though some regions require your consent before we can begin processing your photos."

• On by default, outside consent regions. You do not switch it on; where no consent is required, it starts by itself.
• The toggle limit was real, and today's page drops it. Slashdot and PCMag reported in October 2025 that the setting could be changed only three times a year. Microsoft's page now says "you can turn this feature off at any time through Settings".
• Turning it off deletes the data. "All facial grouping data will be permanently removed within 30 days."
• Not used for training, not shared. Microsoft says it does not use your facial scans to train or improve the model overall, and that face groupings are not shared when you share a photo or album. The face data still sits on Microsoft's servers while the feature is on.

Thorin Klosowski of the Electronic Frontier Foundation told Slashdot: "Any feature related to privacy really should be opt-in and companies should provide clear documentation so its users can understand the risks and benefits to make that choice for themselves."On the three-changes-a-year limit he added: "People should also be able to change those settings at-will whenever possible because we all encounter circumstances were we need to re-evaluate and possibly change our privacy settings."

Personal Vault: more security, but not privacy from Microsoft

What the Personal Vault help page says it provides:

• A second step of identity verification before access: fingerprint, face, PIN, or a code sent by email or SMS
• Automatic locking after a period of inactivity
• Items that do not appear in search results
• BitLocker encryption while files are in use locally on a Windows 10 PC
• Sharing blocked, so a vault file cannot be shared by accident
• Availability on OneDrive Basic, Personal and Family subscriptions

BitLocker on a Windows PC is the only encryption that page names. It describes nothing that would keep vault files from Microsoft, and the privacy statement's disclosure clause covers "files in OneDrive" without an exception for the vault. Personal Vault is good protection against someone who gets into your Microsoft account, since they would still need the second step. It is not protection against Microsoft or a legal request.

AI Restyle: photo editing with privacy guardrails

Restyle with AI applies AI-generated styles to a photo and is available to Microsoft 365 Premium subscribers in OneDrive for iOS, Android and the web. Microsoft's transparency note for AI Restyle states:

• Photos processed with it "are not used to train, improve, fine-tune, or evaluate Microsoft generative AI models"
• Requests are sent over encrypted network connections
• A temporary copy of the photo is processed in a Microsoft-managed cloud AI service and deleted after the edit

Microsoft is explicit about not training on these edits. The editing still happens in Microsoft's cloud, not on your device, so every restyled photo leaves your phone.

OneDrive vs Google Photos vs Viallo for photos

Checked on 26 October 2026: each OneDrive and Google value comes from that company's own help or US pricing page, linked in the cell, and Viallo's plan values from its own code and privacy page. Prices are in US dollars per month, before tax.

OneDrive's strength is value if you already pay for Microsoft 365: Personal includes 1 TB. Google One Premium gives twice the storage for the same $9.99. The privacy terms above do not change with the plan.

OneDrive privacy settings worth changing

1. Turn off face grouping: in OneDrive Settings, where Microsoft says it can be turned off at any time. The facial grouping data is removed within 30 days.
2. Use Personal Vault for sensitive photos: it is not end-to-end encrypted, but it adds a second step that an account thief would also need.

Both reduce exposure inside your account. Neither changes the key arrangement, the content review clause or the legal-process clause above.

Who should (and shouldn't) use OneDrive for photos

OneDrive makes sense if:

• You already pay for Microsoft 365 and want to use the included 1 TB
• You mainly need backup and sync, not sharing
• Your organisation already runs on Microsoft's ecosystem

OneDrive is wrong for you if:

• Privacy from the storage provider matters to you
• You do not want face grouping that switches itself on
• You want location grouping and a map view built around albums

For sharing albums, Viallo's no-account sharing gives recipients a gallery with automatic location grouping and a map view through a single link, with no Microsoft account or any other account.

How was this checked?

On 26 October 2026 every statement here about Microsoft, Google, Proton, Tresorit and Ente was matched, word for word, against that company's own help, pricing, terms or privacy page, fetched with curl and Python's urllib; the 2025 rollout, the toggle limit and the EFF quotes were matched against the Slashdot and PCMag stories. Viallo's limits and prices were read from its own code. The 44 quotes and their URLs are in dataset.csv, and check.py fetches every page again and reports any quote that is gone.

Frequently Asked Questions