Microsoft announced a new package of updates and technical capabilities aimed at enhancing the concept of "Digital Sovereignty" for government institutions, sensitive entities, and heavily regulated sectors. This announcement expands the scope of control and security options in public cloud environments, private cloud environments, and locally managed systems.
Microsoft's updated strategy relies on a "Workload"-based approach, allowing organizations to apply varying levels of control over data, operations, and technical dependencies for each application individually, without imposing a unified deployment model on all systems.
Key Sovereign Public Cloud Capabilities
Microsoft introduced new tools that increase visibility and control over public cloud services:
- Sovereign Control Panel: Enters public preview at Microsoft Ignite, providing a unified interface to monitor sovereignty status, apply governance, and identify vulnerabilities and risks.
- Access Protection Tools: The launch of the Data Guardian feature in the European Union and the European Free Trade Association for trusted partner supervision over Microsoft engineers' access to systems, alongside the Production Touch Ledger to record operations in a tamper-resistant manner.
- External Encryption Key Management: External management of encryption keys via Azure Managed HSM is now generally available, enabling customers to keep encryption keys on hardware they own.
- Azure Confidential Clean Rooms: Entered limited preview to support secure multi-party collaboration while analyzing sensitive data without exposing it.
Expanding Local Control via Sovereign Private Cloud
To meet operational needs in connected and disconnected environments, Microsoft has expanded the capabilities of the Azure Local platform:
- Local Databases and Storage: DocumentDB and Blob Storage on Azure Local have entered public preview.
- Development and AI Tools: The availability of GitHub Enterprise Local as a locally certified module, and the launch of Foundry Local to support local operations of large models, inference, and data-backed search locally for enterprises.
- Multitenancy Support: The Azure Local platform will include support enabling resource separation and governance across multiple tenants on the same infrastructure.
What is Changing Practically?
These updates give organizations the ability to integrate the public cloud, private cloud, and partner network (such as the Bleu cloud in France) into a single digital architecture. This allows for running artificial intelligence applications and sensitive services locally or within strictly controlled environments, while maintaining cloud flexibility and continuous innovation without compromising the legal and geographical requirements of the data.