How UK CIOs Should Approach the Cloud Repatriation Wave in 2026

UK CIOs should repatriate only the workloads where cost, control or regulatory exposure outweigh cloud’s flexibility — not chase repatriation as a blanket strategy. The calculus has shifted because the Bank of England, the Prudential Regulation Authority (PRA) and the Financial Conduct Authority (FCA) began directly overseeing four hyperscale cloud providers as designated Critical Third Parties (CTPs) from 13 July 2026, following designation by HM Treasury.

Amazon Web Services EMEA, Google Cloud EMEA, Microsoft Ireland Operations and Oracle Corporation UK are now the first firms supervised under the CTP regime, created under the Financial Services and Markets Act 2023. For any CIO whose organisation depends on these providers — directly or through a regulated customer’s supply chain — cloud infrastructure decisions are no longer purely an IT budget line. They are a governance matter with named regulators attached.

Why Is Cloud Repatriation Back on the CIO Agenda in 2026?

According to a 2026 Barclays CIO study reported by CIO.com, 83% of enterprise IT leaders now plan to shift at least some workloads off public cloud onto private or on-premises infrastructure. Separately, Flexera’s 2025 State of the Cloud research found that roughly one-fifth of workloads originally migrated to public cloud have already been pulled back into private or on-premises environments, even as net new cloud adoption continues elsewhere in the estate. The driver is rarely ideology — it is arithmetic. Unpredictable egress charges, licensing terms tied to specific cloud platforms, and the operational cost of running steady-state, predictable workloads on consumption-based pricing have eroded the case for keeping everything in the public cloud by default.

Executive Action:

• Ask finance to run a 12–36 month total cost of ownership comparison for the three highest-spend workloads currently on public cloud.
• Identify workloads with stable, predictable demand — these typically show the strongest repatriation economics.
• Flag any workload where egress fees, not compute, are the largest line item on the cloud bill.

How Does the UK’s Critical Third Parties Regime Change the Calculus?

The CTP regime does not ban concentration in a handful of cloud providers, but it does make that concentration visible and supervised. As INFORMD has previously reported, Microsoft and AWS each hold around 40% of the UK cloud infrastructure market, with Google Cloud a distant third — a structural fact the regulators now treat as a systemic exposure rather than a private commercial matter. Under the regime, the Bank, PRA and FCA can set resilience standards and testing requirements directly on designated CTPs, and can require them to demonstrate substitutability and exit planning. For CIOs at regulated financial services firms, this adds a compliance dimension to any repatriation decision: moving a workload off a CTP-designated provider can itself be a resilience event that needs to be planned, tested and reported, not just executed.

Executive Action:

• Confirm whether your organisation, or a key supplier, relies on one of the four designated Critical Third Parties for a material service.
• Brief the risk or audit committee on how CTP oversight milestones affect the timing of any planned migration.
• Treat exit and portability testing as a resilience exercise, with evidence retained for regulatory review.

Which Workloads Should UK CIOs Actually Bring Back On-Premises?

Wholesale repatriation is expensive and, for most organisations, the wrong answer — full multi-cloud or on-premises parity simply moves the cost problem rather than solving it. The workloads that show the clearest repatriation case share three traits: stable, predictable demand rather than spiky or seasonal load; heavy data egress or storage-retrieval activity, where cloud egress fees of roughly $0.09–$0.12 per gigabyte quickly outweigh on-premises storage costs; and long operational horizons of three years or more, over which private infrastructure typically amortises to a lower cost per transaction. Customer-facing, highly variable, or experimental workloads generally remain better suited to public cloud, where elasticity and speed of provisioning still outweigh the cost premium.

Executive Action:

• Classify workloads into “stable and predictable” versus “variable and elastic” before evaluating any repatriation business case.
• Pilot repatriation on one lower-risk, high-egress workload before committing to a multi-workload migration programme.
• Use INFORMD’s technology risk assessment tools to benchmark workload criticality and portability against peers.

What Should CIOs Tell the Board About Repatriation Costs and Risks?

Boards do not need an infrastructure lecture; they need a cost, control and resilience case presented in the same terms as any other capital decision. Frame repatriation as a targeted portfolio rebalancing exercise, not a reversal of cloud strategy — the goal is putting the right workload on the right infrastructure, not retreating from the cloud wholesale. Tie any migration timeline to existing contract renewal dates so repatriation doesn’t trigger early-termination penalties, and link the briefing to CTP oversight developments so the board sees this as a tracked, evidence-based decision rather than a reactive one. For deeper background on hyperscaler dependency, this builds on INFORMD’s earlier briefing on cloud concentration risk, which covers the CMA’s parallel investigation into cloud licensing practices.

Executive Action:

• Present repatriation using a standard capital-allocation format: cost, payback period, and resilience benefit.
• Align migration timing with contract renewal windows to avoid early-exit penalties.
• Set a board review checkpoint tied to the next phase of CTP regulatory milestones.

INFORMD provides intelligence briefings, tools and frameworks for senior business leaders across technology, finance, strategy and compliance. Based in Milton Keynes, UK, we help executives stay informed and act with confidence. Explore our full briefing library or access our free assessment tools.

Stay ahead. Subscribe to INFORMD’s weekly executive briefing at informd.co.uk.