Microsoft has expanded its certification under the National Security Scheme (ENS) in the high category, the most stringent level, reinforcing its stance on security and compliance.
The company is responding to the growing demand from public administrations, regulated entities, and Spanish organizations that require advanced guarantees of security, compliance, and digital sovereignty in their cloud, productivity, and support services.
Microsoft has renewed and expanded the certification for its key platforms and has significantly broadened its reach, increasing from 20 to 66 certified cloud regions—not only in Europe but worldwide—which host more than 500 data centers and are integrated into a global network spanning over 500,000 miles, roughly the distance for nearly 20 trips around the Earth. This coverage enables Spanish organizations to design resilient architectures with geographic redundancy and business continuity, while maintaining ENS compliance at all times.
The company has raised to 300 the number of ENS high-certification services that encompass key capabilities ranging from the Azure cloud infrastructure to productivity and collaboration tools like Microsoft 365, enterprise management solutions such as Dynamics 365, or development and automation platforms like Power Platform, along with data services, security and AI capabilities.
Specifically, Microsoft Azure now counts 197 services with high ENS certification; Microsoft 365 and Microsoft 365 for Education account for 80, and Dynamics 365 and Microsoft Power Platform together account for 23.
Incorporation of Microsoft Unified Support
One of the main innovations is the inclusion of Microsoft Unified Support within the scope of ENS at the high category. This means that services such as 24/7 incident management, specialized technical assistance, or cyber security incident response are now covered under the same compliance standards, allowing organizations to maintain compliance during critical operation and support phases. It is also a particularly relevant element, as it strengthens a differentiating Microsoft proposition compared to other hyperscalers by extending compliance guarantees to the support domain.
The announcement also includes Azure Local and Microsoft 365 Local, two solutions aimed at organizations with advanced digital sovereignty requirements, enabling cloud capabilities to be deployed in on-premises environments or trusted partner environments, while preserving the public cloud experience with greater control over where data is located and how it is operated.
This evolution responds to the growing demand for models that combine hyperscale cloud capabilities —continuous innovation, scale, artificial intelligence, and managed security— with the data control and operational requirements typical of sectors such as the Public Administration, Defense, or critical infrastructure.
Commitment to Spain’s security and digital sovereignty
Microsoft continues to evolve its compliance offerings to accompany public administrations, regulated entities, and strategic organizations in the secure adoption of cloud services, artificial intelligence, and productivity solutions, maintaining identity, security, privacy, and governance controls integrated throughout the service lifecycle.
The renewal and expansion of the ENS sit within Microsoft’s ecosystem of more than 100 compliance certifications maintained at a global scale, also aligned with the NIS2 directive, the DORA regulation in the financial sector, and the broader European framework for digital resilience.
“This advance reinforces Microsoft’s commitment to a trusted cloud for Spain. Our goal is for public administrations, regulated entities, and organizations to innovate with full guarantees, choosing the deployment model—whether hyperscale, hybrid, or local—that best fits their security, compliance, and digital sovereignty needs. All of this without sacrificing innovation or the capabilities offered by artificial intelligence,” says Alberto Pinedo, National Technology Officer of Microsoft in Spain.
