TLDR: Microsoft is rolling out in-country data processing for its AI tool, Microsoft 365 Copilot, across 15 nations by 2026. This initiative, starting with India, Australia, Japan, and the UK by the end of 2025, aims to bolster data sovereignty, regulatory compliance, and security for government and highly regulated industries. The move ensures that Copilot interactions, including prompts and responses, are handled within local data centers, building on existing data residency efforts and addressing recent compliance challenges.
Microsoft has announced a significant expansion of its data sovereignty commitments for Microsoft 365 Copilot, its AI-powered productivity tool. The company plans to introduce in-country data processing for Copilot interactions in 15 countries by 2026, a strategic move designed to strengthen data sovereignty, regulatory compliance, and overall security for its global customer base, particularly those in government and highly regulated sectors.
The initial phase of this rollout will see customers in India, Australia, Japan, and the United Kingdom gaining the option for local processing of their Copilot interactions by the end of 2025. Following this, the capability will be extended to 11 additional nations in 2026, including Canada, Germany, Italy, Malaysia, Poland, South Africa, Spain, Sweden, Switzerland, the United Arab Emirates, and the United States.
This initiative means that prompts and responses generated through Microsoft 365 Copilot, which are hosted on Azure OpenAI models, will be processed and stored within local data centers in the respective countries. This enhancement builds upon Microsoft’s existing data residency efforts, which already provide in-country data residency for Microsoft 365 and Copilot customers in 27 nations, alongside in-region data residency and processing within the EU Data Boundary.
According to Paul Lorimer, Corporate Vice President of Office 365 Enterprise and Cloud Engineering, this development is crucial for organizations, especially in countries like India, where there is a growing emphasis on data localization. By keeping data processing within national boundaries, organizations can achieve enhanced governance, security, and regulatory compliance. Furthermore, local processing is expected to improve performance by reducing latency, leading to faster response times for users.
The expanded sovereign controls are also a direct outcome of an overhaul of Microsoft’s compliance framework, which was initiated after a legal dispute with Nayara Energy earlier this year. In July, Microsoft Corp. temporarily ceased providing services to the India-based refiner due to EU sanctions related to its Russian links. Although the issues were resolved before the lawsuit proceeded, the incident prompted Microsoft to establish new and improved guidelines and safety measures, particularly for its services in India. As part of this overhaul, Microsoft also formed a Public Sector and Critical Infrastructure Customer Council, led by Microsoft India and South Asia President Puneet Chandok, to engage with critical customers.
Also Read:
- Microsoft Secures $9.7 Billion AI Cloud Capacity Deal with Australia’s IREN
- Microsoft Highlights Generative AI’s Transformative Role in Security Operations Centers
This strategic investment underscores Microsoft’s commitment to meeting evolving global data regulations and addressing the increasing demand for localized data handling in the age of AI.
