Azure Enclave

Managed deployment of isolated Azure environments for sensitive government and regulated workloads: a hub-and-spoke network with built-in security controls and compliance support, operated as one enclave rather than assembled by hand

This service is in public preview

FluffyStack tools

Add to Service Builder Add to Compare Compare with equivalents Explore Azure in Treemap Explore security in Honeycomb See Azure regions on the World Map See security as a network Score jurisdiction exposure

Documentation Pricing Azure website

Jurisdictional exposure

Provider HQ

USRedmond, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations

APACCNEEAEUUKUSOther73 regions across 7 jurisdictions

Sovereign option

Yes — 13 sovereign-flagged regions available

Full scorecard for this service →US lens detail →Sovereign cloud coverage map →

Sub-services (2)

Hub-and-Spoke Network

Isolated network topology with managed security controls

Compliance Support

Controls aligned to government and regulated-industry requirements

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

GDPR SOC 2 ISO 27001 HIPAA PCI DSS FedRAMP G-Cloud C5 TISAX IRAP ENS High CCCS Medium ISMAP MTCS L3 K-ISMS

Where this runs

73 regions

36 countries

13sovereign

Sovereign regions (13)

Australia Central · CanberraAzure Australia Government
Australia Central 2 · CanberraAzure Australia Government
US Gov Virginia · VirginiaAzure Government (US)
US Gov Arizona · ArizonaAzure Government (US)
US Gov Texas · TexasAzure Government (US)
US DoD East · VirginiaAzure Government Secret (US)
US DoD Central · IowaAzure Government Secret (US)
China North (Beijing) · BeijingMicrosoft Azure China (21Vianet)
China East (Shanghai) · ShanghaiMicrosoft Azure China (21Vianet)
China North 2 · BeijingMicrosoft Azure China (21Vianet)
China East 2 · ShanghaiMicrosoft Azure China (21Vianet)
China North 3 · HebeiMicrosoft Azure China (21Vianet)
China East 3 · ShanghaiMicrosoft Azure China (21Vianet)

Commercial regions (60)

Europe (21)

Austria East
Belgium Central
Denmark East
Finland Central
France South
France Central
Germany North
Germany West Central
Greece Central
North Europe
Italy North
West Europe
Norway East
Norway West
Poland Central
Spain Central
Sweden Central
Switzerland West
Switzerland North
UK West
UK South

North America (13)

Canada East
Canada Central
Mexico Central
West US
East US 3
North Central US
Central US
West US 3
South Central US
East US
East US 2
West US 2
West Central US

South America (3)

Brazil Southeast
Brazil South
Chile Central

Asia (13)

East Asia
South India
Jio India West
West India
Jio India Central
Central India
Indonesia Central
Japan West
Japan East
Malaysia West
Southeast Asia
Korea South
Korea Central

Oceania (3)

Australia East
Australia Southeast
New Zealand North

Middle East (5)

Israel Central
Qatar Central
Saudi Arabia Central
UAE Central
UAE North

Africa (2)

South Africa West
South Africa North

Equivalent services on other platforms

AWS Control TowerAWS

Multi-account landing-zone service that automates the creation of a secure, well-architected AWS environment with account factory, proactive and detective guardrails, Account Factory for Terraform (AFT), and a centralised home region with pre-configured logging and audit accounts

Google Cloud Assured WorkloadsGCP

Compliance-overlay controls that lock down existing GCP projects to a regulatory boundary — FedRAMP High / Moderate / Low, DoD IL2 / IL4 / IL5, HIPAA, CJIS, ITAR — by restricting region set, personnel access, and encryption controls automatically

Pricing

Pricing model:hourly