Copilot adds FedRAMP data residency
GitHub announced Copilot now supports data residency in US and EU regions and includes FedRAMP Moderate–tailored processing for US government customers, keeping code and prompts inside chosen jurisdictions. That change lets federal teams limit where AI processing occurs and aligns Copilot usage with a FedRAMP control posture. The feature was posted by GitHub’s changelog as an availability update for region-restricted deployments. (x.com/GHchangelog)
GitHub has started letting Copilot customers keep code prompts and model processing inside the United States or European Union. (github.blog) GitHub posted the change on April 13, 2026, saying Copilot now supports data residency in U.S. and European Union regions and keeps “all inference processing and associated data” in the chosen geography. (github.blog) For U.S. government customers, GitHub said the model hosts and infrastructure used for that setup meet Federal Risk and Authorization Management Program Moderate authorization standards. GitHub’s documentation says enterprises with U.S. data residency can also enforce a policy that limits Copilot users to models with Federal Risk and Authorization Management Program Moderate certification. (github.blog) (docs.github.com) Data residency is a location rule for computing: GitHub routes Copilot requests to model endpoints in the enterprise’s assigned region, and its documentation says code, prompts, and Copilot responses do not leave that region during inference processing. GitHub says the restriction is enforced through region-specific endpoints and authentication tokens. (docs.github.com) The update extends GitHub’s broader data residency push for Enterprise Cloud, which already lets companies choose where code and user data are hosted on a dedicated GHE.com domain. GitHub lists the available residency regions for Enterprise Cloud as the European Union, Australia, the United States, and Japan. (docs.github.com) GitHub had already been moving Copilot features into those region-restricted environments. In August 2025, it said Copilot coding agent became available in GitHub Enterprise Cloud with data residency, and in January 2026 it added Copilot metrics there in public preview. (github.blog 1) (github.blog 2) The fine print is narrower than “all GitHub data stays local.” GitHub says some types of data may still be stored or transferred outside a customer’s chosen region, even when code and user data are stored in-region. (docs.github.com) That leaves federal teams with a more specific option than before: use Copilot in a U.S.-resident configuration, route requests only to approved regional endpoints, and lock users to Federal Risk and Authorization Management Program Moderate models when policy requires it. (docs.github.com 1) (docs.github.com 2)
