Microsoft Pledges Full Data Control to Indian Clients
A year after a service suspension involving Nayara Energy, Microsoft commits to letting Indian clients dictate where their data resides and which laws apply.
Key points
- Microsoft promises Indian clients full control over data residency and legal jurisdiction to prevent external sanctions from disrupting service.
- The policy shift follows a 2025 suspension of services for Nayara Energy, which was triggered by EU sanctions on its Russian partner.
- Microsoft claims its sovereign cloud base now includes 22 Indian states, supporting major government health and labor platforms.
Microsoft has committed to giving its Indian clients complete authority over where their data is stored and which legal jurisdictions apply to it. This announcement comes exactly one year after the company temporarily suspended cloud services for Nayara Energy, an Indian energy joint venture, due to external regulatory pressures. Puneet Chandok, the company’s president for South Asia, stated that clients now have full control over their infrastructure, including the specific data centers used and the encryption keys held.
The move is designed to ensure that foreign regulatory directives, such as European Union sanctions, do not inadvertently interrupt service delivery for domestic clients. By offering in-country data residency and confidential computing, Microsoft aims to reassure businesses that their proprietary information remains secure and accessible even when processed on shared global infrastructure. This shift addresses a critical vulnerability exposed during the Nayara incident, where compliance with international laws resulted in an abrupt service halt for an Indian entity.
The Nayara Incident Sparked Change
In July 2025, Microsoft halted Azure services for Nayara Energy because the firm held a 49% stake from Rosneft, a Russian state-owned entity subject to EU sanctions. Although services were restored within a week, the episode highlighted a significant risk for companies relying on foreign tech giants for mission-critical operations. Nayara was not the only victim; other international players also faced disruptions during that period, underscoring the fragility of cloud dependencies for businesses with cross-border ownership structures.
The suspension forced a re-evaluation of how cloud providers handle compliance conflicts. For Indian businesses, the inability to access their own data due to a third-party’s legal obligations was a severe operational setback. Microsoft’s new framework explicitly separates client data control from the provider’s global compliance obligations, aiming to create a legal firewall that protects domestic clients from external regulatory spillover. This distinction is crucial for maintaining business continuity in a complex geopolitical landscape.
Government Adoption Drives Demand
Microsoft reports that its sovereign cloud base in India now includes 22 states, with significant usage from central and state government bodies. Platforms like e-Sanjeevani, which has handled over 400 million healthcare consultations, and e-Shram, used by 310 million unorganized workers, rely on this infrastructure. Chandok noted that government entities represent a substantial portion of the company’s Azure client base in the region, though he declined to provide a precise percentage breakdown.
The push for sovereign cloud services is not unique to Microsoft. Competitors like Amazon and Google are also expanding their offerings in India, alongside homegrown operators such as Yotta. Market researcher IDC projects that India’s public-sector cloud market will grow to over $30 billion in the next three years, with annual growth rates of 23%. However, the pace of adoption remains a point of contention among industry analysts, with some suggesting the market is still in its early stages despite the high-profile government contracts.
Revenue Growth May Be Slow
Sashi Sreedharan, Google Cloud’s India managing director, recently described sovereign cloud spending in the country as being at an early stage, challenging the bullish projections of others. Sanchit Vir Gogia, a tech analyst, suggests the reality lies in between, acknowledging that while sovereign services are inevitable, the financial translation may take time. He notes that while Microsoft has strong government relations, converting these commitments into substantial revenue streams will likely be a slow-burn process.
The trade-off for these enhanced controls is often higher complexity and cost for clients seeking true sovereignty. While Microsoft emphasizes that data centers in India are owned by its local subsidiary, the underlying technology and global support structures remain interconnected. Clients must weigh the benefits of legal protection and data residency against the potential limitations of isolated infrastructure. As the market evolves, the balance between global scale and local control will determine which providers capture the most value in India’s expanding cloud sector.
