Microsoft expands sovereign cloud controls and offline AI tools
European partners will oversee engineers’ remote access, while customers gain options for keeping encryption keys and running AI on their own hardware.
Microsoft is expanding its sovereign cloud offering for governments and regulated companies, adding oversight of remote access and more options for running AI locally. CEO Satya Nadella announced the changes in Paris on October 20, 2026.
For customers in the EU and the European Free Trade Association (EFTA), the company is introducing Data Guardian. Under the arrangement, a trusted European partner will supervise remote access by Microsoft engineers to production systems. Another tool, Production Touch Ledger, will create access records designed to reveal any subsequent changes.
Microsoft said customers can now keep the master key used to protect their data on hardware they own, instead of entrusting it to the company. Its new Sovereign Control Panel will display system status and identify gaps through the Azure portal. Public preview is scheduled for Ignite, held in San Francisco from 17 to 19 November.
Azure Local, which operates in customers’ own data centers, supports most of the additions. Foundry Local for on-site AI models and GitHub Enterprise Local, which supports GitHub Copilot using locally hosted models, will reach general availability at Ignite. Microsoft said both products can operate entirely offline.
SQL Server is now generally available on Azure Local. Microsoft 365 Local remains in preview for approved customers and connects to their own SharePoint and Exchange servers. The company also said systems will be able to move between connected and disconnected operation.
The expansion builds on Microsoft Sovereign Cloud, introduced in June 2025. Microsoft named 29 partners involved in the effort, among them Bleu, Delos Cloud, Mistral, Nvidia and Dell.
