Ratings / Hardware

Microsoft Pluton

Clear   Rating 4 / 5 · Clear — Privacy aware. Generally safe.

Claim evaluated

Microsoft Pluton, announced in November 2020, is a security processor integrated directly into the CPU, designed to protect credentials, identities, personal data, and encryption keys from physical attacks by eliminating the communication channel to a discrete TPM. This technical

Analysis

Microsoft Pluton, announced in November 2020, is a security processor integrated directly into the CPU, designed to protect credentials, identities, personal data, and encryption keys from physical attacks by eliminating the communication channel to a discrete TPM. This technical mechanism significantly enhances on-device security. Microsoft's privacy statement (S0) generally commits to "protecting the security of your personal data" and using "a variety of security technologies and procedures" including encryption. However, Microsoft's broader privacy record includes a June 2023 FTC fine for COPPA violations related to collecting children's data without consent, and a January 2024 disclosure of a corporate email system data breach. While Pluton offers robust hardware-level protection, these incidents highlight ongoing company-wide privacy and security challenges.

Sources

• https://www.microsoft.com/en-us/privacy/privacystatement
• https://www.microsoft.com/en-us/security/blog/2020/11/17/meet-the-microsoft-pluton-processor-the-security-chip-designed-for-the-future-of-windows-pcs/
• https://www.ftc.gov/news-events/news/press-releases/2023/06/ftc-will-require-microsoft-pay-20-million-over-charges-it-illegally-collected-personal-information
• https://firewalltimes.com/microsoft-data-breach-timeline/