Microsoft 365 Copilot Expands In-Country Data Processing, Expanding Data Sovereignty in 15 Nations

Microsoft has announced the phased rollout of in-country data processing for Microsoft 365 Copilot, its AI-powered productivity assistant embedded in apps like Word, Excel, PowerPoint, Outlook, and Teams. By the end of 2025, four countries—Australia, India, the United Kingdom, and Japan—will have the option for Copilot interactions to be processed within their national borders, vastly enhancing control and compliance for customers in government and highly regulated sectors. Eleven additional countries, including the United States, Germany, the UAE, and Canada, will follow in 2026, signaling a significant evolution in Microsoft’s commitment to digital sovereignty.​

A Timely Response to Global Data Sovereignty Demands

For many organizations—especially those operating in finance, healthcare, the public sector, and other regulated environments—the choice of where and how data is processed is a fundamental concern. Governments worldwide are implementing stricter data governance mandates, and enterprises increasingly demand cloud services that put them in command of their information. Microsoft’s latest announcement meets this urgent need. As Paul Lorimer, Corporate Vice President of Office 365 Enterprise and Cloud Engineering, wrote in a recent Microsoft 365 blog post, “trust is the foundation that powers AI transformation for governments and enterprises worldwide.” Microsoft 365 Copilot will now allow customers to process prompts and responses inside their home countries, providing a new layer of governance and regulatory compliance for AI-powered workflows.​

What Is In-Country Data Processing for Copilot?

With in-country data processing, interactions with Microsoft 365 Copilot—such as prompts sent to and responses from large language models—are handled in data centers physically located within the country of the enterprise user. This move ensures that sensitive operational and customer information can be safeguarded against cross-border data transfer issues. For organizations dealing with highly sensitive or nationally regulated data, this addresses long-standing concerns about latency, regulatory exposure, and the risk of data access by foreign authorities.​

Key features of Microsoft 365 Copilot’s in-country data processing:

• Local Data Control: AI data is kept within national boundaries, supporting evolving compliance frameworks and customer trust.

• Lower Latency and Better Performance: Keeping data local can improve response times for AI-powered tasks and automation in Microsoft 365 applications.

• Alignment with National and Sector Regulations: Especially vital for countries and industries with robust regulatory environments, such as financial services, government, and healthcare.​

Trusted By Governments—and the Private Sector

By launching this initiative, Microsoft is directly addressing new global realities: the accelerating adoption of AI productivity tools, and the expectation from commercial and public sector customers for strict control over their digital assets. As of now, Microsoft offers in-country data residency for Microsoft 365 and Copilot in 27 jurisdictions, and maintains region-wide data boundaries—for example, the European Union (EU) Data Boundary for customers operating under GDPR and similar laws.​

The in-country processing announcement, featured this month during the Frankfurt AI Tour and detailed on the Azure blog, sets a new standard for “your data, your control—wherever you operate.” The move supplements Microsoft’s previous investments in sovereign cloud capabilities, with infrastructure trusted by over a billion users globally.​

Which Countries Are Included and When?

Here’s a look at the phased rollout:

This means, for example, that an Indian government agency or a Japanese bank will have the power to keep all Copilot AI interactions strictly within national borders as early as the end of 2025, while organizations from Canada, the UAE, or the U.S. will be included the following year.​

Business, Legal, and Technology Impact

Microsoft’s commitment to in-country data processing goes beyond technology—it’s about upholding user trust and supporting customers in meeting both business innovation goals and legal mandates. By giving organizations the freedom to determine where their Copilot data is processed, Microsoft is enabling enterprise clients to further their digital transformation while maintaining the highest assurance of compliance. This is particularly relevant for government agencies, banks, insurers, healthcare organizations, and critical infrastructure operators.​

Enhanced Performance and Control

Clients can expect latency improvements for Copilot’s AI queries and responses, thanks to localized data flows that avoid unnecessary global transfers. End users benefit from more responsive AI assistance, especially when using collaborative tools like Teams or data-heavy apps like Excel.​

Commitment to Data Transparency

Microsoft has also publicly pledged to transparently communicate with users about any foreign government orders that may impact service availability, actively contesting legal actions that threaten data access or service continuity. The company has affirmed its intent to act as staunch advocates for customers’ data rights, minimizing business disruption in the face of regulatory turbulence.​

Microsoft’s Principle—Your Data, Your Control

As artificial intelligence becomes central to the way organizations operate, the ability to keep AI data within national borders isn’t just a technical detail—it’s an enterprise imperative. Microsoft’s expansion of in-country data processing to 15 nations is a direct response to this new normal, reinforcing its vision for responsible, secure, and sovereign AI adoption. In the words of Microsoft’s leadership, “your data, your control—wherever you operate.”​​