One step ahead in Azure sovereignty.
Helping European organizations run regulated and critical workloads on Microsoft Azure — from sovereign landing zones in the public cloud to fully disconnected Azure Local environments.
Regulation meets architecture
I've spent more than fifteen years in IT, the last stretch as a Senior Azure Cloud Architect designing enterprise platforms for organizations in Europe — currently from the Netherlands, at the center of the European digital sovereignty conversation.
My work focuses on Microsoft Sovereign Cloud, the EU Data Boundary, and Azure Local with disconnected operations — the scenarios where data, operations, and control must stay inside your own boundaries.
What I work on
Microsoft Sovereign Cloud
Sovereign Public Cloud, EU Data Boundary, customer-controlled encryption, and the decision framework between public, private, and partner-operated models.
Azure Local & disconnected operations
Running Azure with a fully on-premises control plane — architecture, identity, PKI, and lifecycle for classified, regulated, and isolated environments.
Enterprise landing zones
Sovereign landing zones, policy-as-code governance, and the platform engineering that keeps regulated Azure estates compliant and operable.
Sovereign migrations
Moving regulated workloads into the EU Data Boundary and migrating VMware estates to Azure Local — assessment, wave planning, and landing zone readiness.
Tested, not paraphrased
Rack-Aware Clustering: Azure Local's Answer to "We Can't Replicate Outside This Building"
Azure Local 2608 quietly shipped a second local availability zone architecture — two racks, one storage pool, no second site required. Here's what it actually requires, and the tradeoff nobody's flagging.
Read article →Azure Local 2608: The Portal Finally Manages the Fleet — But Not the Disconnected Half
August's release brings Arc Site Manager, portal-driven node scale-out, and GPU management from Azure. All three assume a live connection to Azure — which is exactly the half of this platform's sovereignty story they don't touch.
Read article →AVS License-Included Is Retiring: The VMware Decision Every Sovereign Cloud Customer Now Has a Deadline For
Microsoft just put a hard date on the last way to run VMware on Azure without buying Broadcom's full VCF bundle. Here's what that retirement actually forces, and why it puts Azure Local back on the table.
Read article →