An Unprecedented Qualitative Designation
On June 25, 2026, the European Commission informed Amazon and Microsoft of its preliminary position: their cloud services — AWS and Azure — should be formally designated as gatekeepers under the Digital Markets Act. The determination is notable not just for what it targets, but for how it was reached. Neither company met the DMA's quantitative thresholds for automatic designation: neither crossed the €7.5 billion annual EU turnover trigger, nor the 45 million monthly active end-user mark the law uses as a presumption of gatekeeper status. The Commission instead invoked Article 3(8) — its qualitative override authority — citing entrenched market position, vast and durable user bases, and a factor that earlier DMA designations never had to weigh: the decisive role that AI tool ecosystems now play in cloud procurement across the EU single market. As EC Executive Vice-President Henna Virkkunen framed it: "Cloud services have become a cornerstone of Europe's economy — and a prerequisite for AI."
Why Cloud Was Skipped in the First Wave
The DMA has listed cloud computing as a core platform service since it entered force in May 2023. Yet the first wave of designations covered search, social networks, app stores, and messaging — not infrastructure. The omission was partly structural: IaaS and PaaS revenue flows through business-to-business contracts, not consumer-facing interfaces, making the "monthly active end user" threshold poorly suited to infrastructure markets. The Commission opened formal market investigations into cloud services on November 18, 2025, and the June 25 preliminary finding is the direct product of that inquiry. By acting under the qualitative pathway, the Commission is effectively arguing that standard metrics undercount cloud's gateway function in the EU digital economy.
The Strongest Case for Gatekeeper Status
Before assessing the risks of this approach, the Commission's position deserves a fair hearing. AWS and Azure together hold over 65% of EU cloud infrastructure revenue, according to Synergy Research Group data. European-headquartered cloud providers — despite years of GAIA-X ambition and policy investment — still hold roughly 15% of their home market, a share essentially unchanged since 2022. The structural reasons are genuine: high egress fees trap data inside incumbent platforms; proprietary APIs raise migration costs as workload complexity compounds; and AI services bundled onto each provider's platform now function as a separate procurement anchor. When an enterprise's AI stack runs on Azure OpenAI Service or AWS Bedrock, migrating the underlying compute means rebuilding the entire AI integration layer from scratch. This is a recognisable market-failure argument, not regulatory pretext.
Estonia as Microcosm
Estonia offers an instructive lens. The country runs 100% of public services online, pioneered the legal concept of the "data embassy" — it has operated a sovereign backup of critical government databases in Luxembourg under diplomatic-status protections since 2017, secured with KSI Blockchain technology — and is routinely cited as the EU's benchmark digital state. Yet that sophistication has not insulated it from hyperscaler dependency. As of early 2026, roughly 8,500 of Estonia's 25,000 government workstations had migrated to a Microsoft-managed cloud environment, with Microsoft license fees accounting for approximately €400 of the €2,000 annual per-device cost. State IT director Ergo Tars acknowledged the underlying tension plainly: once lock-in is embedded in procurement infrastructure, it matters little "whether it is Microsoft, Amazon, or Google."
Estonia's hedging posture — keeping defense, interior, and foreign ministry infrastructure on separate systems, pursuing European software alternatives through its C3 (Clear Cloud Club) initiative launched in February 2025 — illustrates the asymmetry. Even a government that treats digital sovereignty as a core competency cannot quickly or cheaply unwind vendor dependency accumulated through years of digital-first investment. That structural stickiness is exactly what the Commission is now attempting to address.
What the Designation Would Actually Require
If confirmed, gatekeeper status would impose interoperability, data portability, and contractual fairness obligations on AWS and Azure under DMA Articles 5 and 6, alongside relevant provisions of the EU Data Act. Non-compliance triggers fines of up to 10% of worldwide annual turnover. Both companies have until September 2026 to submit written counterarguments; a final Commission decision is expected by late October, with a six-month compliance window following any confirmed designation. Analysts have noted that cloud faces a narrower obligation set under the DMA than search or social platforms — suggesting the Commission has attempted to calibrate scope to the specific market failure rather than applying a maximalist template. That restraint is the right instinct.
Where the Proportionality Risk Lies
Cloud infrastructure differs from consumer platforms in one critical way: it is a business input procured through multi-year negotiated contracts. Switching costs are real, but they partly reflect genuine architectural complexity — not purely anti-competitive behaviour. Interoperability mandates that ignore this distinction risk two failure modes: conditions so abstract that they leave switching costs unchanged, or conditions so prescriptive that they require architectural redesigns that chill investment from hyperscalers and the ecosystem of smaller integrators who build on top of them.
AWS recently committed €7.8 billion to its European Sovereign Cloud in Germany; Azure carries the broadest European regional footprint of any hyperscaler. These are precisely the infrastructure investments a competitive EU cloud market needs. If this designation is executed well — targeting egress fees, requiring documented migration tooling, and preventing AI-bundle tying that forecloses switching — it could meaningfully improve contestability for governments like Estonia and businesses across the single market. If it drifts toward structural mandates untethered from identified harms, it risks adding regulatory friction to the investment the EU most needs.
The Commission has established that AI lock-in is the new switching-cost frontier. Whether the remedy matches the precision of the diagnosis is the question the next four months will answer.