Microsoft is rolling out Data Guardian for cloud customers in the EU and the four EFTA countries, which include Norway and Switzerland. When a Microsoft engineer needs qualifying remote access to production systems, a trusted EU partner now oversees it, and a new ledger records what the engineer did. Microsoft announced this on 20 October, along with local AI for customers who run its cloud in their own data centre.
Oversight moves from Microsoft’s own staff to an outside EU partner
Data Guardian is not a new idea. Microsoft first announced it in June 2025. Back then, Microsoft staff living in Europe would approve and monitor access by engineers based elsewhere. The version now rolling out gives that oversight to “a trusted EU partner”. A second company now watches qualifying access, instead of Microsoft checking itself.
Microsoft leaves the important details open. It does not name the partner. It does not say whether the partner can refuse access or only watches it. It also does not define “qualifying” access or “in-scope” systems. So you cannot yet tell which services and kinds of access are covered. There are no rollout dates and no prices.
Production Touch Ledger is the audit side. It records each such access and the actions performed, in a log where any later change would show. Microsoft is rolling it out in phases across the EU and EFTA. It has not said who can read the ledger, or whether customers see their own entries.
Key management is ready now, local AI arrives at Ignite
The announcement mixes features you can use today with features that are weeks or more away:
- Generally available now: external key management with Azure Managed HSM. You keep the root encryption key in hardware you own and operate on your own premises, or with a trusted third party.
- Generally available now: confidential virtual machines on Azure Local, which protect data while it is being processed.
- Rolling out in the EU and EFTA, without dates: Data Guardian and Production Touch Ledger.
- At Microsoft Ignite, 17 to 20 November: Foundry Local and GitHub Enterprise Local become generally available on Azure Local. The Sovereign Control Panel enters public preview in the Azure portal.
- Preview for approved customers: Foundry Local working with Microsoft 365 Local, so local AI can search SharePoint and Exchange servers you run yourself.
- Prices: not published.
Foundry Local runs AI models on servers in your own data centre
Azure Local is Microsoft’s software for running Azure services on servers in your own building. Foundry Local adds AI to that set-up. You run language models locally and let them answer questions about your own company data. That also works when the servers have no internet connection. Microsoft says the catalogue will include Microsoft, partner, open-weight and open-source models, but it names none of them.
Mistral and Nvidia are among the 29 companies in Microsoft’s sovereign partner ecosystem, as is the Dutch Microsoft partner Inspark. Which partner models Foundry Local will offer is not stated. GitHub Enterprise Local applies the same idea to software teams: a validated GitHub Enterprise Server that runs on Azure Local.
Does Data Guardian protect your data from US authorities?
Microsoft does not claim that, and the announcement does not mention US law. Data Guardian controls how Microsoft engineers reach production systems. It does not change the fact that Microsoft is a US company. In June 2025, Microsoft France’s legal director testified under oath in the French Senate. He could not guarantee that French public-sector data would never reach the US government without French consent.
Of the measures in this package, customer-held keys are the most concrete, because the root key sits in hardware Microsoft does not operate. For workloads that must stay fully outside Microsoft’s control, Microsoft itself points to independently operated partner clouds such as Bleu in France.
Decide which workloads must stay local before you buy Azure Local
For Dutch governments, hospitals and financial firms that already run on Microsoft 365 and Azure, this package makes a hybrid set-up more realistic. Most work can stay in the public cloud. The workloads that must stay local, such as AI on confidential case files, move to Azure Local. The price is effort: Azure Local means buying and running your own servers, and the AI parts are not generally available until Ignite.
When DataNorth helps organisations set up local and sovereign AI, the first question is not which vendor to use. It is which data and which AI tasks truly need to stay on your own servers. Answer that first. Then ask your Microsoft account team three things: which services and kinds of access Data Guardian covers, whether the EU partner can refuse access, and whether you can read your own ledger entries. Once Foundry Local is generally available, test it on one small task, such as search over a document archive. Then compare it with a European provider before you commit.
For more information, visit the official announcement of the Microsoft Sovereign Cloud update on the Microsoft blog.
