Microsoft's Azure cloud now lets customers hold their own encryption keys and see who touches their systems, which shows what to ask any cloud provider.
Microsoft has added new tools to its Azure cloud that give customers tighter control over who can reach their data and who holds the keys that lock it. The company announced them on October 20, 2026, tied to its Microsoft Ignite event. The headline change: a customer can now keep the master encryption key on hardware it owns.
Encryption scrambles data so only someone with the right key can read it. An HSM, or hardware security module, is a dedicated device that stores those keys. With the new option, the root key can sit in hardware the customer owns and runs, either on-premises or through a trusted third party. That puts physical control of the key outside Microsoft's buildings.
Microsoft says the push comes from talks with government, critical infrastructure and regulated industries. These groups want to know more than where data is stored. They want to know who can operate their systems, what happens if connections fail, and which technologies they depend on. Microsoft calls this digital sovereignty, meaning control over the technology you rely on.
Microsoft also describes a mix of options. Public cloud suits some workloads. A private cloud can run in a customer's own environment, including when it is disconnected. Partners can run independent environments. Separately, Azure Confidential Clean Rooms is in limited preview and lets groups analyze shared sensitive data while limiting exposure of the underlying information.
The material does not give pricing or full rollout dates. Data Guardian covers only qualifying Microsoft engineer remote access to in-scope production systems, and Microsoft does not list here which customers or systems qualify. Some tools are still in preview, so they are not yet final.
If your business handles sensitive data, ask your cloud provider who can access your systems, who holds your encryption keys, and how services keep running if connections fail.
AMD's data center sales rose 97% in the third quarter, a sign of heavy demand for AI computing that could affect what businesses pay for tech.
Read more: AMD's data center sales nearly doubled, lifting record quarterA SemiAnalysis site visit found a Chinese AI data center campus built at about a fifth of US cost, with no public backlash. Here is why that matters for AI prices.
Read more: China builds giant AI data centers fast and at a fifth of US costMajor environmental groups now use AI to study climate data and track fires, while warning that the data centers behind AI carry their own environmental cost.
Read more: Environmental groups use AI to fight climate change, despite its energy cost
