Source: Microsoft Source EMEA
Microsoft has announced a significant expansion of its Sovereign Cloud capabilities, taking a workload-based approach rather than forcing every application into the same deployment model. Announced at an event in Paris, the changes let organizations apply different levels of control to each workload across the Sovereign Public Cloud, Sovereign Private Cloud, and the Sovereign Partner Ecosystem.
Oversight of who touches your systems
For customers in the EU and EFTA, Microsoft is introducing Data Guardian, which provides European-resident oversight by a trusted EU partner for qualifying remote access by Microsoft engineers to in-scope production systems. A companion tool, Production Touch Ledger, creates tamper-evident records of that access and the actions performed. The aim is to give organizations verifiable answers to a question that data residency promises alone cannot settle: who can actually reach your systems, and can you prove it?
On the encryption side, External Key Management with Azure Managed HSM is now generally available, giving organizations that need it physical control of their root encryption keys outside Microsoft infrastructure.
A control panel for sovereignty
A new Sovereign Control Panel enters public preview at Microsoft Ignite. It provides a unified experience inside the Azure portal that helps organizations understand their sovereignty posture, manage controls, identify gaps and risks, and take action. It also supports business continuity planning by giving greater visibility into workload dependencies and portability across operating environments.
AI that runs even when disconnected
Sovereign Private Cloud, built on Azure Local, is gaining the ability to transition workloads from connected to disconnected operations in public preview. New and expanded local capabilities include DocumentDB and Blob Storage on Azure Local, GitHub Enterprise Local, GitHub Copilot with locally hosted models, and Foundry Local for connected and disconnected operations. The message is that data, code, AI models, and development tools can increasingly stay inside environments the customer operates and controls.
What European organizations should take from this
Microsoft frames these controls as a continuum, and the company is clear that sovereignty now extends beyond where data is stored to who can access systems, which dependencies matter, and how critical services continue when conditions change. For regulated industries and public sector bodies in Europe, the practical work is mapping each workload to the right level of control, and that is exactly the kind of assessment where independent advice pays off. If you want help building a sovereignty strategy for your Azure workloads, contact us through our contact page.