Digital sovereignty has become one of the major concerns for European companies. The growing reliance on cloud services, advances in artificial intelligence, and regulatory demands are forcing organizations to rethink how they manage their information and the extent to which they maintain control over their technology infrastructure.
In this context, Microsoft has announced a new slate of capabilities for its Microsoft Sovereign Cloud platform, aimed at giving businesses greater autonomy over their data, applications, and AI systems. The new features affect both the public cloud and on-premises/local environments, and seek to make it easier for each organization to choose where to run its services and who has access to them.
Although many of these solutions are particularly aimed at large companies and regulated sectors, digital sovereignty is also starting to gain importance among SMEs, which are increasingly dependent on external providers to manage their business processes, store customer information, or incorporate AI tools.
More control over corporate data
One of the main novelties announced by Microsoft is Sovereign Control Panel, a tool that will be integrated into the Azure portal and will allow organizations to oversee their digital sovereignty controls from a single environment.
This solution, whose public preview is scheduled for Microsoft Ignite, will facilitate risk identification, security policy management, and assessment of each company’s technology dependencies.
The company is also strengthening the oversight mechanisms on data access. In Europe, the deployment of Data Guardian contemplates the involvement of a trusted European partner to supervise certain remote accesses by Microsoft engineers to production systems.
Joining this initiative is Production Touch Ledger, which will provide a verifiable log of accesses and interventions performed by the provider’s technical staff.
Another novelty is the availability of External Key Management with Azure Managed HSM, a capability that enables organizations to keep encryption keys in their own infrastructure or in trusted third-party-managed environments.
For SMEs handling especially sensitive information, such as professional service firms, healthcare organizations, or firms that manage financial data, these capabilities can be relevant when evaluating their technology vendors.
AI can also run in on-premises environments
Artificial intelligence is taking a prominent place in Microsoft’s new strategy. As companies adopt intelligent assistants and automate processes, another concern arises: what happens to the data these systems use and where it is processed.
To address this need, Microsoft is expanding the capabilities of Sovereign Private Cloud, its Azure Local-based offering that allows cloud services to run on infrastructures managed by the customers themselves.
Among the innovations is Foundry Local, whose general availability on Azure Local is expected at Microsoft Ignite, in both connected and disconnected environments. This technology will allow running AI models locally and querying business information in natural language without necessarily moving data to external services.
Developer capabilities are also expanding with GitHub Enterprise Local and the use of GitHub Copilot with locally hosted models.
These capabilities could open up new possibilities for organizations that need to leverage AI without losing control over confidential information, intellectual property, or strategic processes.
Preventing a disruption from halting business operations
Another pillar of Microsoft’s strategy is operational continuity. The company is working on new capabilities to facilitate the movement of workloads between connected and disconnected environments, so that certain critical services can keep running even when connectivity issues occur.
Additionally, it will publish new guides and reference architectures to help organizations design business continuity strategies.
For small and medium-sized businesses, this issue is especially important. A prolonged outage of their enterprise applications, e-commerce platforms, or customer service systems can quickly translate into financial losses.
However, simply having sovereign cloud solutions does not automatically eliminate these risks. Companies also need proper backup policies, recovery plans, and procedures to keep operations running in the face of incidents.
