The UK Competition and Markets Authority (CMA) launched a formal investigation into Microsoft’s business software ecosystem on May 14, 2026, marking the first use of its strategic market status (SMS) powers against a major cloud and productivity suite. The probe will examine whether Microsoft’s grip on workplace software—spanning Windows, Microsoft 365, Teams, and Azure—is being levered to dominate the emerging market for enterprise artificial intelligence tools.

The investigation, announced at 7am London time, comes after a year-long exploratory study by the CMA’s Digital Markets Unit. The regulator designated Microsoft’s enterprise IT ecosystem as a “digital activity” under the Digital Markets, Competition and Consumers Act 2024, a designation that allows it to impose binding conduct requirements if the company is found to hold SMS.

What is strategic market status?

Strategic market status is the core concept in the UK’s post-Brexit competition framework for Big Tech. It applies to firms that have substantial and entrenched market power in a particular digital activity, akin to the EU’s Digital Markets Act gatekeeper designations but with broader scope. The CMA can designate an activity rather than a whole company, and it has the power to craft custom remedies rather than applying a fixed list of obligations.

For Microsoft, the designated activity is “enterprise software ecosystems.” The CMA’s scoping document, published alongside the opening statement, defines this as the integrated suite of operating system, productivity, collaboration, identity, and cloud services that businesses rely on to operate digital workplaces. Microsoft 365 is the centrepiece, but the ecosystem extends to Azure Active Directory, Power Platform, and the growing list of AI tools—Copilot, Azure OpenAI Service, and specialised industry models.

The “control layer” problem

The CMA’s central theory of harm is that Microsoft’s dominance in foundational workplace software gives it the power to act as a “control layer” for the adoption of enterprise AI. By bundling AI assistants like Copilot for Microsoft 365 into its existing licences, and by integrating its large language models with data stored in SharePoint, Outlook, and Teams, Microsoft can steer corporate customers away from rival AI platforms.

Two data points the CMA highlighted in its preliminary analysis: more than 85% of the FTSE 350 use Microsoft 365 as their primary productivity suite, and Microsoft holds over 70% share of the desktop operating system market in UK businesses. That ubiquity means most corporate data—emails, documents, meeting transcripts—resides inside Microsoft’s walled garden. When an AI assistant needs to search, summarise, or reason over that data, it is far easier to use Microsoft’s own models than to integrate a third-party alternative.

“We are concerned that Microsoft is using its existing power in productivity software to foreclose competition in the fast-growing market for AI-powered workplace tools,” said Sarah Cardell, CMA chief executive, in a statement. “Without intervention, businesses could face higher costs, less choice, and slower innovation in products that are rapidly becoming essential for the modern workplace.”

What the investigation covers

The SMS investigation is structured around three main pillars:

  • Bundling and tying – Whether Microsoft uses its licensing terms to push customers towards its own AI tools. For example, Copilot for Microsoft 365 is sold as an add-on to E3 and E5 licences but is not offered as a standalone service. The CMA will examine whether this bundling makes it uneconomic for rivals to compete.
  • Interoperability and data portability – The ease with which third-party AI providers can access data stored across Microsoft services. The CMA will probe whether Microsoft grants its own AI products preferential access to APIs, data schemas, or authentication layers.
  • Self-preferencing and default settings – Whether Microsoft leverages its control over the desktop and browser experience to promote its AI assistant over others. Early evidence suggests that Copilot is deeply integrated into Windows 12, the Edge browser, and the Microsoft 365 app, often with opt-out rather than opt-in defaults.

The investigation will run for up to nine months, with the CMA aiming to publish its provisional findings by February 2027. If it designates Microsoft’s enterprise software ecosystem as having SMS, it can then impose a range of remedies.

Possible remedies

Under the digital markets regime, the CMA can impose conduct requirements tailored to the specific harm. In the case of a “control layer” designation, potential remedies could include:

  • Unbundling requirements – Microsoft could be forced to sell Copilot separate from Microsoft 365, allowing businesses to choose a different AI assistant without losing their productivity suite.
  • Data portability mandates – The company might need to create standardised APIs that let rival AI services access data stored in SharePoint, OneDrive, and Exchange as easily as Microsoft’s own tools can.
  • Ban on self-preferencing – Microsoft could be prohibited from setting its AI assistant as the default on Windows or from using its dominant position in search (Bing) and browser (Edge) to funnel users towards Copilot.
  • Transparency obligations – The CMA might require Microsoft to publish how its AI models rank content, make suggestions, or decide which information to surface, ensuring that businesses can audit the tools for bias or errors.

The watchdog also retains the power to impose structural remedies, such as forcing the divestment of certain business lines, though such measures are considered a last resort.

Industry reaction

Enterprise IT buyers have given a muted welcome to the CMA’s move. Several large UK-based corporates, speaking on condition of anonymity, said they have felt locked into Microsoft’s roadmap as they roll out AI tools. “We have 20 years of documents in SharePoint,” said a CIO at a FTSE 100 insurer. “How do we train an AI model on that data without going through Microsoft? The switching costs are enormous.”

Competitors in the enterprise AI space were more forthright. Salesforce, which offers its own Einstein AI platform, said the CMA was right to investigate. “Microsoft has a history of using its dominance to crush rivals,” said a Salesforce spokesperson. “We hope this investigation will level the playing field so that businesses can choose the best AI, not just the one that comes bundled with their email.”

Google, whose Workspace suite competes with Microsoft 365 but has a much smaller share, declined to comment publicly but is known to have contributed evidence to the CMA’s preliminary study. Amazon Web Services, which does not compete directly in productivity but faces Microsoft in cloud AI services, may also be watching closely.

Microsoft’s response

Microsoft issued a statement shortly after the CMA’s announcement, saying it would cooperate fully with the investigation. “We believe our approach to AI in the enterprise is pro-competitive and gives customers the flexibility they need,” the statement read. “Copilot is an optional add-on, not a requirement, and we already support a wide range of third-party AI models through Azure.”

The company pointed to its recent moves to open up data access, including the Microsoft Graph API and the Common Data Model, and stressed that it does not use customer data to train its foundational AI models. It also noted that it faces intense competition from Google, Salesforce, and a host of AI-native startups.

Yet those arguments may not fully satisfy the CMA. The regulator’s exploratory study found that even where APIs exist, the implementation can be uneven, and the quality of integration for third-party tools rarely matches the deep integration that Microsoft’s own AI enjoys. Moreover, the cost and complexity of using external AI services on top of a Microsoft-centric IT estate remain prohibitive for many mid-sized firms.

The broader regulatory landscape

The UK investigation is part of a global wave of antitrust scrutiny on AI partnerships and bundling. The US Federal Trade Commission has been examining Microsoft’s investment in OpenAI under existing merger review rules, while the European Commission has also sent requests for information to Microsoft under the Digital Markets Act. Germany’s Bundeskartellamt and Japan’s Fair Trade Commission are running parallel inquiries.

For Britain, the Microsoft case is a test of its post-Brexit regulatory ambition. The CMA has long wanted to prove it can stand shoulder-to-shoulder with Brussels and Washington. Its chair, Marcus Bokkerink, has described the digital markets regime as “a step change in how we regulate the most powerful digital firms.” Success in the Microsoft investigation could embolden other agencies to act, while failure could undermine the UK’s credibility as an independent enforcer.

What happens next?

The CMA will now gather evidence through formal information requests, public consultation, and hearings with interested parties. Businesses and industry bodies have until August 2026 to submit their views. Microsoft will have the opportunity to respond to a statement of objections before any final decision.

In the meantime, corporate IT buyers are left in a holding pattern. Many were planning Copilot rollouts in the second half of 2026. The investigation may not stop those deployments, but it could inject uncertainty into licensing negotiations and long-term AI strategy. At least one major UK bank has reportedly paused its Copilot procurement until the CMA’s direction is clearer.

For the wider Windows and Microsoft 365 community—the IT admins, power users, and developers who inhabit forums and drive digital transformation—the investigation marks a pivotal moment. Will the ecosystem that has dominated enterprise computing for three decades finally be forced to open up? Or will Microsoft’s argument that its AI integration is simply better engineering carry the day?

The answer will shape not just Microsoft’s future but the very architecture of workplace AI for millions of employees around the world. On May 14, the CMA drew a line in the sand. Now the real work begins.