You can’t guarantee privacy unless, as part of the lease, you get to keep the hard drive(s).
No hard drives. This is all SSD I’m sure.
Last century thinking. Under the seat license program (which this basically is), it will all be on MS servers in the 'cloud'.