Microsoft previews new sovereign-cloud controls and local AI options

Microsoft's October 20 sovereign-cloud update divides an increasingly complicated question into separate controls over access, encryption, deployment location and continuity of service. The company says its Sovereign Control Panel, due in public preview at Ignite, will give Azure users a consolidated view of sovereignty controls, potential gaps, workload dependencies and portability. That preview should not be confused with a general-availability release: the announcement separately identifies external key management with Azure Managed HSM as generally available.

For customers concerned about who can reach sensitive systems, Microsoft describes Data Guardian as European-resident oversight by an EU partner for qualifying engineer access to covered EU and EFTA production environments. A related Production Touch Ledger is intended to provide tamper-evident access records, while Microsoft says a connected-to-disconnected operating mode for Sovereign Private Cloud is entering public preview. These are distinct mechanisms, not a guarantee that every workload can operate under the same sovereignty arrangement.

The company is also pitching an AI development environment that can remain on customer-operated infrastructure, naming locally hosted Copilot models, Foundry Local and GitHub Enterprise Local among its options. Microsoft documentation describes GitHub Enterprise Local as a self-hosted GitHub Enterprise Server environment on Azure Local, including disconnected deployment configurations. Its onboarding documentation still describes the product as a preview requiring an authorization process, an important qualification for buyers planning production migrations.