
- Microsoft is legally obliged to comply with the US Cloud Act
- It means the US government can ask to see any data, including sovereign clouds
- Only companies outside of US jurisdiction, or private encryption keys, are exempt
Microsoft has admitted it cannot guarantee data sovereignty for customers in France or other European Union countries under the US Cloud Act, which allows the US government to access data from US-based tech firms, even if that data is stored overseas.