The Coming Era of Systemically Important Technology Corporations

This week it was the turn of Cloudflare to have an outage enforcing a self-imposed denial of service on its customers that included OpenAI and Twitter. This follows AWS and Microsoft in recent weeks, events raising an increasingly urgent question – Do we now need a framework for Globally Systemically Important Technology Corporations, a G-SiTec designation? This is not a new idea and was discussed in the paper ‘Systemically Important Technology’ back in 2022.

After the global financial crisis of 2008, world leaders created the category of Globally Systemically Important Financial Institutions, the now well-known G-SiFis. The logic was straightforward, some institutions had become so interconnected, so foundational and so deeply woven into the global financial system that if they failed, the world would fail with them. They could no longer be treated as ordinary commercial actors; they were structural pillars of modern civilisation.

The discussion is maturing fast in BioTech see Bigtechs and the ‘Emergence of New Systemically Important Financial Institutions: Lessons from the Chinese Experience.‘

Today, a new class of actors occupies that same gravitational position, not in finance, but in technology. Cloud hyperscalers, semiconductor manufacturers, AI companies and digital identity providers have become the invisible infrastructure of governance, commerce, security and society. Their decisions, algorithms and continuity matter not just to markets but to nations.

There has been a silent shift from market participants to global infrastructure. What once looked like commercial platforms have evolved into critical dependencies. If AWS, Microsoft Azure, Google Cloud or Alibaba Cloud go offline, the result is not be an inconvenience, it resembles a systemic shock:

• Hospitals lose access to patient systems
• Defence platforms and intelligence systems degrade
• Airlines and logistics networks halt
• National identity, payments and authentication break
• Governments and Fortune 500 companies lose operational capacity

These services now behave like utilities but without the regulatory framework typically associated with electricity grids, water infrastructure or telecommunications.

We have quietly crossed into a new reality, society runs on private digital infrastructure that equates to concentration risk at civilisational scale.

Systemically important tech companies are not just large, they are irreplaceable in capability and scope.

• Four providers (AWS, Microsoft and Google and Alibaba) control the majority of global cloud compute.
• One firm (TSMC) manufactures the world’s most advanced chips.
• A handful of AI labs define the trajectory of machine intelligence.
• Two mobile ecosystems govern digital identity and access (Apple and Google).
• One GPU ecosystem (NVIDIA-led) fuels the AI revolution.

This is the equivalent of having just three banks handle global deposits or one refinery produce the majority of the world’s fuel.

When supply concentrates, risk compounds.

What makes the case for G-SiTec distinct from G-SiFi is the breadth of systemic impact. Technology firms do not simply power markets, they influence:

• Public opinion and democratic discourse
• Military capability and national security posture
• AI ethics, information integrity and societal trust
• Economic competitiveness and innovation trajectories

In some domains, they now exert more influence than governments. Negotiating directly with heads of state, shape regulatory frameworks and through data, compute and AI, hold leverage once reserved for nation-states. They have become sovereign-scale actors.

I suggest that we have moved Beyond Economics, Sovereignty, Security and Social Stability in the current model. It is time we considered a G-SiTec Framework, not control centric, but Resilience.

I suggest a regulatory architecture for G-SiTecs would not seek to nationalise or restrict innovation. Rather, it would create assurance, transparency and continuity, similar to Basel III in finance. Such a framework could include:

• Operational resilience obligations
• AI safety and alignment requirements
• Sovereign continuity and data independence
• Stress-testing for cloud, AI and semiconductor disruption
• Cross-border governance for identity and digital rights

We already expect this level of planning from central banks. The same mindset should be required for AI, chips and cloud infrastructure.

The global financial crisis forced the world to recognise systemic scale too late. With technology, the warning signs are visible now, we are at an inflection point. The question is not whether a G-SiTec framework will emerge, it is whether we build it deliberately or retroactively after the first systemic technology failure.

History rewards those who recognise structural change early, and in the age of AI, sovereign cloud, digital identity and compute dependence, the world may now be ready to formalise what has already become true, technology companies are no longer just part of the system … they are the system.