Microsoft is expanding sovereign cloud—what is actually available?
New controls, local data services and disconnected AI span general availability, public preview, limited preview and future commitments. Buyers should not treat the announcement as one completed security product.
The short version
- What happened
- Microsoft says SQL Server and confidential virtual machines on Azure Local are generally available, while several data, continuity and control features are previews.
- Who it affects
- Public-service and regulated-sector staff may gain more options to run data and AI locally, but preview services can change and need operational testing before supporting essential work.
- What remains unproven
- All central claims come from Microsoft, which sells the products and services described.
Keep in mind
All central claims come from Microsoft, which sells the products and services described.
Release stages vary from generally available to limited preview and undated future support.
No independent security, continuity, residency or customer-outcome evaluation is reported.
Source analysis · 1 linked source. Primary analysed source date: 20 October 2026.
Read the full report · 3 min The evidence, methods, implications and limitations
The announcement contains several different release stages
Microsoft has grouped public-cloud controls, customer-operated infrastructure and partner-run environments under an expanded Sovereign Cloud offer. In Azure Local, SQL Server for connected and disconnected deployments and confidential virtual machines are already generally available. DocumentDB, Blob Storage and the ability to transition workloads from connected to disconnected operation are entering public preview.
At Microsoft Ignite, Foundry Local and GitHub Enterprise Local are due to become generally available. Microsoft says local models can support inference and retrieval against enterprise data, while GitHub Copilot can use locally hosted models. Integration with Microsoft 365 Local is limited to a preview for approved customers. Azure Confidential Clean Rooms is in limited preview, and Azure Local multitenancy is described as a future capability without a date.[1]
Control features still need workload-specific evidence
For governments, hospitals and critical-infrastructure operators, local operation may reduce some dependencies and keep selected data or inference inside a customer-controlled environment. In the EU and EFTA, Microsoft is also rolling out Data Guardian oversight for qualifying engineer access and a Production Touch Ledger intended to create tamper-evident access records. A Sovereign Control Panel is entering public preview.
These are vendor-described controls, not certification that every workload is sovereign or resilient. Microsoft reports no customer denominator, independent penetration test, failover duration, disconnected-service benchmark or audit result. Buyers still need to map each component's release status, operator access, update path, hardware dependency and legal jurisdiction to their own threat model—and test whether critical services continue when connectivity is lost.[1]
The distinction that matters
Availability is not uniform
Microsoft's announcement mixes deployed products, previews and promises.
Available
SQL Server and confidential VMs
Deployable on Azure Local now
Preview
Control, storage and continuity features
Evaluation stage with limits
Planned
Multitenancy and other extensions
No completed capability yet