UK CMA Provisionally Finds Microsoft Meets SMS Test in Business Software, Opening Copilot, Bundling and Cloud-Licensing Scrutiny

A. Key facts

On October 16, 2026, the CMA provisionally concluded that Microsoft's Business Software Ecosystem meets the statutory SMS conditions. The proposed scope groups five activities: PC operating systems, productivity software suites, security software, server operating systems and relational database management systems.

Consultation closes on November 13, 2026, and the statutory deadline for a final decision is February 13, 2027. The current step is provisional and is not a finding of wrongdoing, a fine or a specific remedy.

In a separate cloud update, the CMA confirmed that AWS and Microsoft have connected data centres with rivals, removed data-transfer fees for customers fully switching and reduced multi-cloud transfer fees. It still wants further improvements and is keeping a formal cloud SMS investigation under review.

B. Business significance · InveDeck interpretation

If designation becomes final, the CMA could consider conduct requirements and pro-competition interventions addressing fair dealing, open choices and transparency. The focus includes Microsoft 365, Teams, Copilot and security bundling and defaults; rival access to Microsoft Graph, M365 data and integration points; and server and database licensing on rival clouds.

The primary risk is therefore not an immediate UK price cut but possible erosion of the distribution advantage, customer switching costs and cross-sell economics created by bundling and defaults. That could affect the marginal economics and retention benefits of combining Copilot, Microsoft 365, security and Azure.

C. Quantifiable impact

The official exposure perimeter includes more than one million UK businesses and public-sector organisations and roughly 20 million monthly users. The CMA did not disclose Microsoft's UK revenue, affected contract value, expected price reductions, fines or any RPO or FCF impact.

Microsoft 365 Copilot exceeded 30 million paid seats globally at June 2026, but the UK share is undisclosed and cannot be translated into regulatory exposure. Revenue and margin effects cannot yet be quantified; a credible estimate requires specific proposed conduct requirements.

D. Link to earnings and expectations

Microsoft reported FY2026 fourth-quarter revenue of $90.0 billion, Microsoft Cloud revenue of $59.3 billion and commercial RPO of $678 billion. Azure quarterly revenue was subsequently disclosed at $29.4 billion under the reporting change, while M365 Copilot had more than 30 million paid seats.

The proposed decision does not change prior results or FY2027 guidance. It nevertheless reaches directly into the growth engine highlighted in the last print: Copilot discoverability, access to M365 data and cross-selling across security, cloud and agent products could become regulated.

E. Industry and supply chain · InveDeck interpretation

Rival AI, productivity, collaboration and cybersecurity vendors could benefit from improved API and data access, more neutral defaults and better distribution. AWS and Google Cloud could gain from workload migration and multi-cloud adoption if Microsoft server and database licensing barriers on rival clouds are reduced.

There is no basis from this event alone to infer lower aggregate demand for AI servers, GPUs, memory or power. The more immediate transmission channel is a supplier-mix shift from Microsoft's integrated stack toward rival AI tools or AWS and Google Cloud.

F. What to watch next

• Whether the CMA finalises SMS designation and the exact scope by February 13, 2027
• Copilot defaults, bundling, rival AI discoverability and access to Microsoft Graph and M365 data
• UK requirements for Teams and other communications-app unbundling and interoperability
• Security-product bundling and equivalent integration rights for third-party security vendors
• Windows Server and SQL Server licensing on rival clouds and resulting customer movement among AWS, Azure and Google Cloud