UK Designates Microsoft, Google, Amazon, and Oracle as ‘Critical’ to Its Financial System
The UK has recently declared Microsoft, Google, Amazon, and Oracle as "critical" third parties to its financial system, effective July 13th. This decision comes after the Treasury discovered that two-thirds of British firms rely on these four cloud providers.
Background
As of July 10, 2026, Britain’s banks heavily depend on American clouds, with the Treasury estimating a 65% reliance on just four providers: Microsoft, Google, Amazon, and Oracle. This concentration prompted regulators to take action due to the potential for widespread disruptions in case of an outage at any of these companies.
The Label Explained
The "critical" designation is not a criticism but rather a supervisory status, established by the Financial Services and Markets Act 2023. It allows regulators to monitor suppliers that multiple sectors rely on together. This oversight is shared by the Bank of England, the Prudential Regulation Authority, and the Financial Conduct Authority.
What Does It Mean?
While none of these companies are banks, they provide critical cloud services to banks and other financial institutions. The fear lies in a single point of failure; an outage could impact numerous firms simultaneously, causing potential billions in damage. This risk has been highlighted by previous cloud outages that disrupted banking apps, card payments, and trading tools.
Provider Response
Interestingly, the providers are not resisting this change. Google Cloud expressed support, stating that the framework "can enhance the long-term resilience of the UK’s financial ecosystem." For these companies, achieving critical infrastructure status could open doors to deeper penetration into regulated finance.
International Precedent
This move follows a similar step taken by the EU in November 2025, when supervisors designated 19 technology firms, including Amazon Web Services, Google Cloud, and Microsoft, as critical providers to European finance under the Digital Operational Resilience Act.