Published by Global Banking & Finance Review®
Posted on November 18, 2025
2 min readLast updated: January 20, 2026
Add as preferred source on GoogleThe EU has named Amazon, Google, and others as critical tech providers to enhance the financial sector's resilience under DORA.
By Elizabeth Howcroft
PARIS (Reuters) -European Union regulators on Tuesday designated 19 technology companies, including Amazon Web Services, Google Cloud and Microsoft, as critical third-party computing providers for the bloc's finance industry.
Under the EU's Digital Operational Resilience Act (DORA), which started being applied in January 2025, three EU-level financial regulators can together name certain technology providers as critical and supervise them directly.
The new rules are part of an attempt to protect the EU's financial sector from the risks around its reliance on external technology providers, for example its use of cloud computing to run key banking services. Regulators are worried about the impact on the financial sector if a tech provider used by many banks had an outage.
The companies named by the European Banking Authority, European Insurance and Occupational Pensions Authority, and European Securities and Markets Authority (ESMA), include the European arms of Amazon Web Services, Bloomberg, Google Cloud, IBM, London Stock Exchange Group , Microsoft, Orange and Tata Consultancy Services .
The regulators will examine whether these companies have the right risk management and governance frameworks in place to ensure the services they provide will remain resilient, they said in a press release on ESMA's website.
A spokesperson for LSEG said they welcomed the designation, and Google Cloud said the same on its website.
A Microsoft spokesperson said the company was committed to complying with Europe's cybersecurity and resilience laws. A spokesperson for Amazon Web Services said it had been preparing for the designation and would continue engaging with the relevant authorities.
Bloomberg, IBM, Orange and Tata did not immediately respond to a request for comment.
European officials' concerns about their finance industry's resilience have risen this year. The European Central Bank on Tuesday cited geopolitical tensions and technological disruptions as among the risks facing Europe's banking sector.
The UK has rolled out a similar regime, though no firms have yet been named. Regulators have advised Britain's finance ministry on candidates, and a government minister told lawmakers earlier this month she expected designations by this time next year.
(Reporting by Elizabeth Howcroft; Additional reporting by Phoebe Seers; Editing by Tommy Reggiori Wilkes and Richard Chang)
Cloud computing is the delivery of computing services over the internet, allowing organizations to access and manage data and applications remotely.
Cybersecurity refers to the practices and technologies designed to protect computers, networks, and data from unauthorized access, attacks, or damage.
Explore more articles in the Finance category
