One step ahead in Azure sovereignty.
Helping European organizations run regulated and critical workloads on Microsoft Azure — from sovereign landing zones in the public cloud to fully disconnected Azure Local environments.
Regulation meets architecture
My path to Azure sovereignty runs through three continents. In South America, I spent several years on the technology team of one of the region’s largest telecommunications operators, running infrastructure for a base of more than 55 million active customers — a scale that teaches you early what “regulated, critical, always-on” actually means in practice. From there I moved to North America, working in Canada, before relocating to Europe.
I've spent more than fifteen years in IT, the last stretch as a Senior Azure Cloud Architect designing enterprise platforms for organizations in Europe — currently from the Netherlands, at the center of the European digital sovereignty conversation.
My work focuses on Microsoft Sovereign Cloud, the EU Data Boundary, and Azure Local with disconnected operations — the scenarios where data, operations, and control must stay inside your own boundaries.
What I work on
Microsoft Sovereign Cloud
Sovereign Public Cloud, EU Data Boundary, customer-controlled encryption, and the decision framework between public, private, and partner-operated models.
Explore this focus area →Azure Local & disconnected operations
Running Azure with a fully on-premises control plane — architecture, identity, PKI, and lifecycle for classified, regulated, and isolated environments.
Explore this focus area →Enterprise landing zones
Sovereign landing zones, policy-as-code governance, and the platform engineering that keeps regulated Azure estates compliant and operable.
Explore this focus area →Sovereign migrations
Moving regulated workloads into the EU Data Boundary and migrating VMware estates to Azure Local — assessment, wave planning, and landing zone readiness.
Explore this focus area →Tested, not paraphrased
Azure Just Set a Retirement Date for Arc's Key Vault Secrets Provider — Its Replacement Doesn't Support a Single Sovereign Cloud
Microsoft retires the Azure Key Vault Secrets Provider extension for Arc-enabled Kubernetes on October 9, 2027. Its recommended replacement, built for disconnected clusters, documents zero sovereign cloud support.
Read article →Azure's Copilot Migration Agent Has Two Data-Residency Guarantees, and Only One Is EU-Only by Default
Azure Migrate project data stays region-locked everywhere. The new Copilot migration agent's own conversational data gets that same guarantee automatically only if you're in the EU.
Read article →Regulated Environment Management Is Now Sovereign Control Panel — the Cloud Adoption Framework Still Calls It by the Old Name
The product page carries the rename notice as of August. Two Cloud Adoption Framework governance pages linking to the same URL are still introducing it by the retired name.
Read article →