Data Sovereignty Controls

Data classification driving the controls (Purview labels in enforce), customer-managed keys via Key Vault Managed HSM for high-tier data, Confidential Computing for processing requiring an 'unreadable to operator' posture, Customer Lockbox for Microsoft engineer access, and regional residency enforced through policy. The technical layer that satisfies the regulators.

An organisational capability that the journey relies on.