Amazon, Google Named by EU Among ‘Critical’ Tech Providers for Finance Industry

2025-11-19 · Source: Insurance Journal

Summary in 3 Points • EU designates 19 tech firms as critical providers • AWS, Google Cloud, Microsoft included • DORA impacts finance industry operations --- European Union regulators have identified 19 technology companies, including **Amazon Web Services** (AWS), **Google Cloud**, and **Microsoft**, as critical third-party computing providers for the finance industry within the bloc. This designation falls under the EU’s **Digital Operational Resilience Act** (DORA), which aims to bolster the financial sector's resilience against digital disruptions. The act, which began to be enforced recently, mandates these companies to adhere to stringent operational standards to ensure the stability and security of financial services across Europe. For the London Insurance Market, this development highlights the growing reliance on **cloud services** and the importance of **digital resilience** in financial operations. Insurers, underwriters, and brokers must now consider the implications of DORA on their **risk management** strategies, particularly in terms of compliance and operational continuity. The inclusion of major providers like AWS, Google Cloud, and Microsoft underscores the critical role these companies play in supporting the digital infrastructure of financial services, necessitating a reevaluation of existing **cybersecurity** measures and **vendor management** practices.

London market impact

For the London Insurance Market, this development highlights the growing reliance on cloud services and the importance of digital resilience in financial operations. Insurers, underwriters, and brokers must now consider the implications of DORA on their risk management strategies, particularly in terms of compliance and operational continuity. The inclusion of major providers like AWS, Google Cloud, and Microsoft underscores the critical role these companies play in supporting the digital infrastructure of financial services, necessitating a reevaluation of existing cybersecurity measures and vendor management practices.