Microsoft is adding new controls to its sovereign cloud for governments and regulated companies, giving customers more say over who can reach their systems and letting them run more AI tools on their own hardware. CEO Satya Nadella announced the changes in Paris, where he described them as new capabilities for organizations running their most sensitive workloads.
Douglas Phillips, who leads Microsoft's specialized clouds unit, laid out the plans. They extend the Microsoft Sovereign Cloud, which the company first launched in June 2025 amid rising European concern over dependence on U.S. cloud firms. Phillips framed the approach around the type of work being run rather than the provider. "Our approach to digital sovereignty starts with the workload," he said.
What is Microsoft's Data Guardian?
The most closely watched change applies to customers in the EU and the European Free Trade Association. Microsoft is rolling out a tool called Data Guardian, under which a trusted European partner will oversee remote logins by Microsoft engineers to customers' production systems. A second tool, Production Touch Ledger, will keep records of that access in a form that cannot be altered without detection.
Who holds the encryption keys in Microsoft's Sovereign Cloud?
Encryption keys are also moving closer to the customer. Customers can now hold the master key that protects their data on hardware they own, rather than leaving that key with Microsoft.
For administrators, a new Sovereign Control Panel in the Azure portal will show the status of each system and flag gaps in compliance. The panel enters public preview at Microsoft's Ignite conference, which runs from November 17 to 19 in San Francisco.
Most of the new tools run on Azure Local, the version of Microsoft's cloud that sits in a customer's own data center. That design is what allows some of the features to work without a connection to the internet.
Can Microsoft's sovereign cloud AI tools run offline?
Two AI-related products are moving to general availability at Ignite. Foundry Local runs AI models on site, while GitHub Enterprise Local lets developers use GitHub Copilot with locally hosted models. Both can work fully offline.
Other additions include SQL Server on Azure Local, which is now generally available. Microsoft 365 Local, which connects to a customer's own SharePoint and Exchange servers, is in preview for approved customers. Systems will also be able to switch between connected and disconnected modes, a capability that matters most for organizations that cannot rely on a constant link to outside networks.
Microsoft has lined up 29 partners for the effort. They include Bleu in France, Delos Cloud in Germany, Mistral, Nvidia and Dell. The partner list underscores how much of the sovereign push depends on local providers that can hold data and oversight functions inside Europe.
The announcement arrives as governments and large companies in Europe continue to weigh how much control they have over systems run by American technology firms. Microsoft's latest changes aim to give those buyers tools to verify and limit that access, rather than asking them to take the company's word for it.
Este artículo fue escrito con la asistencia de IA.
News Factory APP - noticias agénticas para impulsar tu SEO y AEO.