As transatlantic tensions rattle nerves, Microsoft offers a digital bunker to the sufficiently paranoid
UPDATED Azure Local can now run fully disconnected with no cloud connectivity, Microsoft confirmed at the London leg of its AI tour.
The latest change comes amid heightened trade and geopolitical tensions between the US administration and Europe, with more customers in the trading bloc seeking reassurances about digital sovereignty.
Like rival US hyperscalers, Microsoft has rolled out initiatives in Europe in a bid to address jittery locals worried about the possibility – no matter how remote – of service interruption or their data being accessed by American officials under the US CLOUD Act.
In March, Microsoft completed its EU Data Boundary service, then added more features in November. Yet for a growing number of organizations in Europe, only infrastructure under their direct control will do.
Azure Local (formerly Azure Stack HCI) is Microsoft's answer to those concerns. Using specialized hardware, Azure Local lets customers run workloads on-premises. However, it still needed to phone home occasionally – its management via Azure Arc ran in the cloud, and pulling the plug for more than 30 days resulted in reduced functionality.
By making disconnected operations available in Azure Local, organizations can "now run mission-critical infrastructure with Azure governance and policy control, with no cloud connectivity, optimizing continuity for sovereign, classified or isolated environments," Microsoft said this week.
In other words, no more calling back to the mothership.
Microsoft has also made Microsoft 365 Local available (think Exchange Server, SharePoint Server, and Skype for Business Server) and announced Foundry Local (only available to "qualified customers").
"This brings the richness of Microsoft's enterprise AI capabilities to on-premises systems, complete with local inferencing and APIs that operate completely within customer-controlled data boundaries," Microsoft said.
Microsoft's sovereignty claims may ring hollow for some after it admitted in France last year that it could not guarantee sovereignty if it were compelled to hand data to the US government. The ability to completely pull the plug is therefore intended to reassure customers, even if the software remains proprietary and supplied by a US tech giant.
Francisco Mingorance, secretary general of European cloud provider association CISPE, told The Register: "Some of these new options are products that CISPE has advocated for with Microsoft so it is good to see them becoming available to European customers and partners.
"Sovereignty is increasingly a requirement, and we welcome any new services, tools, and software that can run in European Cloud Infrastructure Services Providers' datacenters and on their own platforms. We look forward to testing these products against our forthcoming CISPE Sovereign Cloud Services Framework to see if they qualify for a Sovereign Badge or a Resilient Badge."
CISPE won a concession from Microsoft in 2024 that required the Windows behemoth to develop a version of Azure Local tailored for European hosters, in return for dropping a complaint over alleged anti-competitive behavior. Microsoft subsequently missed a delivery deadline.
Microsoft is not the only tech giant concerned about sovereignty. Amazon Web Services made its European Sovereign Cloud generally available earlier this year, and Google is selling customers a variety of solutions, including Google Cloud Airgapped, which runs on servers fully disconnected from the internet.
Whether these efforts satisfy customers will hinge on implementation and on how sovereignty is defined. Being able to disconnect completely will satisfy some, though others may still worry that the software remains under Microsoft's control.
Enterprises in Europe looking to local tech providers to run their entire stack were given an example of how to do it last week. Plug-and-play it is not, but the rewards are obvious. ®
Updated to add at 0934 UTC, March 2
Mark Boost, boss of UK cloud and AI platform Civo, sounded a cautious note, telling The Register: "Microsoft's new announcements on Azure Local and M365 Local continue the trend of framing data residency as sovereignty, but the reality remains the same: these moves don't change the underlying legal jurisdiction. Even if data is processed on-premises or in a disconnected environment, the companies themselves are still governed by US law and subject to the CLOUD Act. The 'local' branding is more about optics than actual legal control.
"Foundry Local sounds promising in theory, but unless there's a fundamental change in who owns and controls the infrastructure – and who can be compelled to hand over data – it's still just another layer on top of the existing hyperscaler model. True sovereignty isn't about where the data sits, it's about who can be forced to disclose it."