Microsoft on October 20, 2026, announced new capabilities for Microsoft Sovereign Cloud, expanding its digital sovereignty offerings across public cloud and customer-operated environments.
Public cloud sovereignty and visibility
Microsoft said Sovereign Control Panel will enter public preview at Microsoft Ignite, providing a unified Azure portal experience to help organizations manage sovereignty posture, identify security gaps, and evaluate workload portability.
For customers in the European Union and the European Free Trade Association, Microsoft is rolling out Data Guardian, which adds European-resident oversight for qualifying engineer remote access. The company is also deploying Production Touch Ledger to maintain tamper-evident records of engineer access and actions.
Microsoft announced that external key management with Azure Managed HSM is now generally available, enabling organizations to keep root encryption keys on customer-owned hardware on-premises or with a third party. In addition, Azure Confidential Clean Rooms has entered limited preview to support multiparty data analysis.
Bringing the application lifecycle under local control
To support customer-operated environments on Azure Local, Microsoft announced that GitHub Enterprise Local and Foundry Local will become generally available at Microsoft Ignite. GitHub Enterprise Local delivers a validated GitHub Enterprise Server appliance, while Foundry Local brings local inference, agentic retrieval, and an expanded model catalog to connected and disconnected setups.
Microsoft stated that Confidential virtual machines on Azure Local and SQL Server on Azure Local are generally available. DocumentDB and Blob Storage on Azure Local are entering public preview, alongside capabilities allowing Sovereign Private Cloud workloads to transition between connected and disconnected operations.
The company added that Azure Local will gain multitenancy support to separate governance across multiple tenants, while Microsoft 365 Local integration is currently available in preview for approved customers using local Exchange and SharePoint servers.
Resilience and partner cloud ecosystem
To assist organizations in maintaining operations through geopolitical or connectivity disruptions, Microsoft announced it is publishing new sovereign business continuity guidance and architecture patterns.
Microsoft highlighted its Sovereign Partner Ecosystem, pointing to National Partner Clouds such as Bleu in France for independently operated environments, alongside software partners and local implementation specialists.
Key facts and where they come from
- External key management with Azure Managed HSM is now generally available.
External key management with Azure Managed HSM is now generally available
- Sovereign Control Panel will enter public preview at Microsoft Ignite.
Sovereign Control Panel, entering public preview at Microsoft Ignite, brings these signals together in a unified Azure portal experience.
- GitHub Enterprise Local will become generally available at Microsoft Ignite on Azure Local.
GitHub Enterprise Local will become generally available at Microsoft Ignite as a validated GitHub Enterprise Server appliance on Azure Local
- Confidential virtual machines on Azure Local are generally available.
Confidential virtual machines on Azure Local are generally available, extending confidential computing capabilities to customer-controlled infrastructure.
- Data Guardian is rolling out for EU and EFTA customers.
For customers in the European Union (EU) and the European Free Trade Association (EFTA), we are rolling out Data Guardian
