Azure Global Infrastructure and Data Sovereignty
Azure operates in multiple geographies across the globe. An Azure geography is an area that contains at least one Azure region. Each region comprises one or more data centers and is strategically paired with another region in the same geography, a configuration known as a regional pair. Note that the only exception is Brazil South, which is paired with a region outside its geography. Within these regional pairs, Azure optimizes platform updates and planned maintenance by updating only one region at a time. This design ensures that, during an outage affecting multiple regions, one region from each pair is prioritized for recovery. The strategic benefits of such pairing include:- Azure aims to maintain at least 300 miles of separation between data centers …
Azure aims to maintain at least 300 miles of separation between data centers within a regional pair where possible. This physical distance helps mitigate simultaneous impacts from natural disasters, civil unrest, power outages, or network failures. However, geographical constraints can sometimes limit this separation.
-
Platform-Provided Replication
Services such as geo-redundant storage automatically replicate data to the paired region, providing robust redundancy. For applications requiring high availability, deploying across regional pairs is highly recommended. -
Region Recovery Order
In the event of a widespread outage, one region in each pair is prioritized for recovery. Deploying applications across paired regions ensures that at least one region recovers first, whereas applications distributed over unpaired regions might experience delays. -
Sequential Updates
Azure applies system updates—ranging from maintenance to patching—in a sequential order across paired regions rather than simultaneously. This approach minimizes downtime and localizes any potential issues, making rollbacks easier if problems arise. -
Data Residency Compliance
To adhere to tax laws and law enforcement jurisdiction requirements, paired regions are typically located within the same geography, with the noted exception of Brazil South. This rule is crucial for resources such as geo-redundant storage accounts (GRS), which must ensure that data remains in the appropriate geographic location.
For organizations with strict compliance policies—especially within the military, government, or public sectors—retaining data within a designated region is critical. Political conflicts or local data sovereignty laws might restrict data from residing in foreign territories.