On October 16, the UK's Competition and Markets Authority proposed designating Microsoft with strategic market status in its business software ecosystem: Word, Excel, Outlook, PowerPoint and Teams, with Copilot increasingly part of the mix, plus Microsoft's security, server and operating system products, used by more than a million UK businesses and public bodies, with around 20 million monthly users. It is the fourth investigation under the UK's digital markets regime, after Google search and Apple's and Google's mobile platforms. Comments close on November 13, and a final decision is due by February 13, 2027. A regulator now proposes to treat the bundle as the product, AI assistant included.
Five markets, one ecosystem
The CMA examined five digital activities, found Microsoft strong in each of them, and proposes to treat them as one. Its May invitation to comment lists them: the productivity suite (Outlook, Word, Excel, PowerPoint, OneDrive, SharePoint and Teams, with Copilot features and the Microsoft 365 Copilot app), Windows 11 as the PC operating system, Windows Server, SQL Server, and security software (Entra ID, Active Directory, Intune and Defender). Consumer products are out.
The provisional finding is the statutory pair, substantial and entrenched market power and a position of strategic significance, argued in a 179-page proposed decision with a 155-page appendix on market power, three shorter appendices and a 27-page roadmap. Designation, the CMA stresses, implies no finding of wrongdoing; it unlocks conduct requirements and pro-competition interventions for a five-year term.
Where the remedies could land
The roadmap names four areas for the first half of any designation period, unranked and undated, and reaches no view yet on what to propose.
Cloud licensing heads the list. The CMA's cloud market investigation, concluded in July 2025, found Microsoft charging AWS and Google Cloud wholesale prices for key business software much higher than its own Azure customers pay, and in March the CMA's board saw no "material progress" there. The roadmap's options for Windows Server, SQL Server, Microsoft 365 and Windows: fair, reasonable and non-discriminatory pricing whatever the host cloud; limits on licensing that gives Azure unequal access to products or features; and contract changes letting customers move licenses they already own to the cloud they choose. Among its concerns: licenses bought after October 2019 cannot move to Listed Providers such as AWS and Google.
Informal pressure has already moved the easier lever. Microsoft lengthened the window in which departing UK customers can take their data out free from 60 to 180 days, and AWS from 90 to 180, both now implemented without any designation. Licensing did not move, which is why it now rides on this case.
Copilot gets the most concrete options. If rival AI tools are found at risk, the CMA could require integration parity, meaning access to ecosystem functionality and data on terms equivalent to Microsoft's own AI; real prominence for rival assistants, with users free to select and change defaults; minimum notice for API changes and durable interoperability processes; and clearer AI licensing terms, possibly unbundling Copilot from existing suites. For Teams, it would weigh the EU's commitments, which do not formally apply in the UK. For Defender, Entra ID and Intune it sketches similar bundling and parity remedies, but has not decided whether security will be an intervention area.
Microsoft's answer, and the regulator's record
A Microsoft spokesperson told Reuters the company does not share the CMA's view and that all its products, Copilot included, are "open and interoperable." The spokesperson also welcomed the regulator's acknowledgment that Microsoft's cloud position does not justify designation. Sarah Cardell, the CMA's chief executive, framed the case as choice: "Organisations should be able to choose the products that work best for them."
Designation, the record suggests, starts the work. Google, designated in search on October 10, 2025, with more than 90% of UK searches, received its first conduct requirements in June 2026; in September the CMA proposed admitting AI assistants to Google's search choice screens, which Google calls unlawful, per a Telegraph report relayed by Resultsense. Brussels took a different road: in September 2025 the European Commission accepted Microsoft's commitments to sell suites without Teams at an appreciably lower price, widen some price gaps by 50% and open interoperability and data portability, binding for seven to ten years. Microsoft has aligned its worldwide suite offers and pricing with them.
What would change on your side of the contract
Nothing binds yet, and each intervention would be consulted on separately after designation.
For teams running Windows Server or SQL Server on AWS or Google Cloud, the licensing remedies carry a price tag: host-neutral pricing would narrow the gap with Azure, and portable licenses would turn a migration into a contract question rather than a repurchase. For anyone building assistants or agents on Microsoft 365, API notice periods and equivalent data access would make the integration less of a bet on one vendor's roadmap. For IT buyers, a selectable default assistant, and perhaps Copilot priced apart from the suite, would make AI a procurement decision instead of something that arrives with the renewal.
One practical detail: Microsoft has confirmed it will not invoke confidentiality provisions to stop anyone responding, so an NDA is no bar to filing by November 13.
The 30,000-foot read
The bundle is the product. Windows, Office, Teams, Entra and now Copilot arrive together and are wired together; Microsoft says the pieces are open to rivals, the CMA sees strong positions reinforced by switching barriers. A proposed decision settles neither view. What it does reveal is the regulator's framing: the AI assistant is one more strand of the bundle, not a new frontier exempt from old questions about tying and defaults.
What you can control is narrower and more useful. Know which licenses were bought after October 2019, where your workloads could legally and economically run, and how much of your tooling assumes Copilot is the only assistant in the room. Then watch the published responses in November, the decision by February 13, and Google's fight over AI on choice screens, which will show how far an assistant can be pulled into a remedy.
Sources: CMA press release, Oct 16, 2026 (proposal, products named, more than a million UK organizations, around 20 million monthly users, strength in all five areas, Cardell quote); CMA consultation page (Nov 13 close, Feb 13, 2027 decision, page counts of the proposed decision, appendices and roadmap, Microsoft's confidentiality undertaking); CMA case page (timetable, May 14 launch, statutory deadline; image); CMA invitation to comment, May 14, 2026 (the five activities and named products, consumer exclusion); CMA roadmap of possible interventions (four areas, timing, licensing, AI, Teams and security options, October 2019 concern, no finding of wrongdoing); LexisNexis (fourth SMS investigation, wording of the provisional findings); CMA guidance on the regime (five-year term, available tools); CMA, Actions on cloud and business software, March 31, 2026 (cloud investigation's licensing finding, no material progress, egress windows; quote; chart data); CMA, Update on cloud actions, Oct 16, 2026 (egress windows implemented, licensing routed through this case; chart data); Coalition for Fair Software Licensing submission (definition of Listed Providers only); Reuters via WMBD (Microsoft's response; quote); CMA, Google search designation (Oct 10, 2025, share of UK searches); CMA Google search case page (June 2026 conduct requirements); CMA, search choice proposals (AI assistants on choice screens, Sept 23, 2026); Resultsense (Google's objection, via the Telegraph); European Commission (Teams commitments of Sept 12, 2025, durations, worldwide alignment). CAVEATS: The 179-page proposed decision and its appendices could not be opened from this session; scope, figures and findings come from the CMA's release, invitation to comment, consultation and case pages, roadmap and cloud documents, plus LexisNexis's summary of the findings. The roughly 20 million monthly users figure covers the ecosystem as a whole, not one product; the release puts it in a sentence about UK use without stating that it counts UK users only, though Reuters and the invitation to comment both frame it as UK users. The million-plus figure counts organizations, not people. TNW's report on the May launch cited more than 15 million UK commercial users; we use the CMA's October figure. Microsoft's response is a spokesperson's statement to Reuters; no first-party Microsoft post was found. Google's objection is reported by the Telegraph via Resultsense; Google's own filing was not seen. The Listed Providers definition comes from a stakeholder submission, not the CMA. The roadmap is indicative: no intervention is proposed, ranked or scheduled. Reuters notes Microsoft would be the third company designated, since Google holds two designations. Corrections to the leads: the security activity also covers Active Directory and Intune, and the productivity suite includes OneDrive and SharePoint; the CMA has not decided whether security will be an intervention area; choice of AI assistant appears as prominence and default-selection remedies alongside integration parity, API notice and licensing transparency, possibly including unbundling Copilot.