Microsoft has launched its Fabric data platform in Government Community Cloud High on public preview, with general availability from 1 October, pitched at agentic AI workloads. Europe has no equivalent accredited tier, because its cloud certification scheme has been stuck since 2020 and lost its sovereignty requirement in 2024.
Microsoft has launched its Fabric data platform inside the US federal cloud tier. It is on public preview in Government Community Cloud High, with general availability from 1 October, Nextgov reported.
The pitch is agent readiness. Fabric unifies analytical, operational, transactional, structured and unstructured data around the OneLake repository, with an intelligence layer that recommends actions and automations.
The tier is the interesting part. GCC High is a segregated environment built to US federal security and compliance rules, and Europe has been trying to agree its equivalent since December 2020.
The EU cloud certification scheme is still not adopted. ENISA’s May 2023 draft required EU hosting and European ownership, and the March 2024 draft took that out and left the question to national regulators.
Twelve member states led by the Netherlands opposed the sovereignty clause. France, Italy, Spain and Germany supported it.
While the scheme stalled, the question it was meant to settle got answered elsewhere. It was answered in a hearing rather than in a standard.
Anton Carniaux, Microsoft’s legal director for France, told a Senate inquiry into public procurement and digital sovereignty in July 2025 that the company cannot guarantee French data held under public contracts would stay beyond the reach of US authorities.
That is the CLOUD Act rather than a Microsoft policy. No product tier resolves it.
Europe has started buying around the problem instead. The Commission awarded a €180M sovereign cloud contract in April to four European consortia.
It did not exclude American technology. Non-European technology operated within a strict framework can meet the required sovereignty level, the Commission decided, and legal jurisdiction carried only 10% of the scoring.
June’s tech sovereignty package goes further. Public authorities would run sovereignty risk assessments across four tiers, restricting US providers for sensitive public data in health, finance and justice.
That still needs all 27 member states. France and Germany want a stricter European preference, while Ireland and the Nordics want it softer.
So the two markets are pulling apart on the same product. Washington specified the accredited tier Microsoft is now shipping into, and Brussels is still deciding whether to build one while calling the dependency a political risk.
Get the TNW newsletter
Get the most important tech news in your inbox each week.