Governments and the Regulated WorldWide moat

A substantial share of Microsoft's most durable revenue comes from organisations that cannot easily change anything: national and local governments, defence ministries, hospitals, banks and utilities. Microsoft built dedicated sovereign and government cloud regions precisely to serve them, with the certifications, data-residency guarantees and clearance requirements¹ that keep most competitors out of the procurement entirely.

These are the best customers a software company can have. Procurement cycles are long, switching costs are compounded by compliance obligations, and the institutional memory that would be needed to migrate off a platform after twenty years usually no longer exists. Public-sector revenue is also counter-cyclical in a useful way — government IT spending does not fall in a recession the way corporate spending does.

The corresponding risk is that these customers write the rules. The same governments buying Microsoft's software regulate its bundling, review its acquisitions and, after security incidents affecting government systems, have criticised it publicly and at senior levels. Dependence runs both ways, and a supplier this embedded in state infrastructure attracts scrutiny that a purely commercial vendor avoids. Watch sovereign-cloud commitments in Europe, where data-residency politics and Microsoft's market position are on a collision course.