{"slug":"g-cloud-15-data-location-census-2026","study":"Where UK government cloud data is declared to go: a census of G-Cloud 15","question":"Of the cloud services UK public bodies can buy off the shelf on G-Cloud 15, how many give the buyer no say in where their data is stored or processed, how many declare that it can be held outside the UK, and how much of the in-scope catalogue is resold? The form names no country, so neither does this study.","publisher":"Servnet","built":"2026-09-20T06:59:40Z","builder":"scripts/research/g-cloud-15-data-location-census-2026/analyse.py","snapshot_as_at":"2026-09-20","as_at_line":"Census of 14,468 G-Cloud 15 services, taken from the Digital Marketplace on 20 September 2026. Self-declared supplier answers.","dataset":{"csv":"/research/g-cloud-15-data-location-census-2026.csv","readme":"/research/g-cloud-15-data-location-census-2026-README.txt","rows":14468,"unit":"one row per listed service","licence":"Open Government Licence v3.0","attribution":"Contains public sector information licensed under the Open Government Licence v3.0.","derived_licence":"Creative Commons Attribution 4.0 International (CC BY 4.0)","derived_licence_url":"https://creativecommons.org/licenses/by/4.0/","derived_attribution":"Servnet G-Cloud 15 Data Location Census 2026, https://www.servnetuk.com/research/g-cloud-15-data-location-census-2026","excludes":"security-posture fields and all supplier contact details","csv_sha256":"2ae5de922e10ed02997a3ecfd035221c97d5f16bc1f3f845c8fef71b9cc41755","readme_sha256":"f1d8ada24ccb56115a03a65e42b94560aa0ce4baac993c51ef54a21984183ee1"},"population":{"n":14468,"definition":"Every service listed on the Digital Marketplace under G-Cloud 15 in lots 1a, 2a and 2b on the snapshot date. A population, not a sample.","by_lot":{"iaas-and-paas":1788,"isaas":2778,"saas":9902},"whole_publicly_listed_catalogue":39730,"excluded":["Lot 3 Cloud support services (25,262 services): never asked the data-location questions.","Lot 1b IaaS and PaaS above OFFICIAL: asked the questions, but withheld from the public catalogue as classified information under Framework Schedule 1."]},"preRegisteredMetrics":[{"id":"no_user_control","statement":"Services whose supplier says the buyer cannot specify where data is stored and processed.","question_as_asked":"Can users specify where data is stored and processed? (answer: No)","value_pct":27.62,"n":3996,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","alternative_denominator":{"label":"the 14,428 services whose supplier answered 'Yes' to 'Do you know where your data is stored and processed?' and were therefore asked the location and user-control questions","pct":27.7,"n":3996},"how_to_recompute":"CSV: count rows where user_control_over_location == 'No', divide by 14468.","brief_expected_pct":30.6,"tolerance_pp":1},{"id":"any_non_uk_location","statement":"Services that can store or process the buyer's data somewhere other than the United Kingdom, on the supplier's own declaration.","question_as_asked":"Where is data stored and processed? (European Economic Area (EEA) and/or Other locations ticked)","value_pct":61.39,"n":8882,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","alternative_denominator":{"label":"the 14,428 services whose supplier answered 'Yes' to 'Do you know where your data is stored and processed?' and were therefore asked the location and user-control questions","pct":61.56,"n":8882},"how_to_recompute":"CSV: count rows where location_eea == '1' or location_other == '1', divide by 14468.","floor_check":"Must be at least the EEA tick alone (8,604 = 59.47% of 14,468); a result below that floor is a parsing error.","brief_expected_pct":59.2,"tolerance_pp":1},{"id":"beyond_uk_and_eea","statement":"Services that tick 'Other locations', the only option in the schema beyond the United Kingdom and the EEA.","question_as_asked":"Where is data stored and processed? (Other locations ticked)","value_pct":38.03,"n":5502,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","alternative_denominator":{"label":"the 14,428 services whose supplier answered 'Yes' to 'Do you know where your data is stored and processed?' and were therefore asked the location and user-control questions","pct":38.13,"n":5502},"how_to_recompute":"CSV: count rows where location_other == '1', divide by 14468.","brief_expected_pct":36,"tolerance_pp":1,"no_search_side_check":"'Other locations' has no search filter, so this figure exists only on the detail pages."},{"id":"resold","statement":"Services whose supplier says it is reselling another organisation's services.","question_as_asked":"Are you reselling another organisation's services? (any of the three reseller answers)","value_pct":49.17,"n":7114,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","how_to_recompute":"CSV: count rows where is_reseller == '1', divide by 14468.","brief_expected_pct":62.3,"tolerance_pp":1,"brief_expectation_rejected":true,"rejection_reason":"The brief pre-registered 62.3%. The census finds a materially lower figure, and it is confirmed independently by the search index's own supplier-type facets, which sum to the population exactly. The pre-registered figure is reported as a disagreement and not used."},{"id":"microsoft_share_of_catalogue","statement":"Services resold from Microsoft, on the widest defensible reading of the free-text field.","question_as_asked":"Which organisation's services do you resell? (free text)","value_pct":16.12,"n":2332,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","how_to_recompute":"CSV: count rows where resold_organisation_mentions contains 'Microsoft', divide by 14468.","brief_expected":"roughly one service in five","brief_expectation_rejected":true,"rejection_reason":"The brief drafted 'roughly one service in five' (about 2,894 services). No counting rule over the free-text field reaches that, including the widest one. The claim is dropped."},{"id":"supplier_does_not_know","statement":"Services whose supplier says it does not know where the data is stored and processed. A footnote, not a headline.","question_as_asked":"Do you know where your data is stored and processed? (answer: No)","value_pct":0.28,"n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","how_to_recompute":"CSV: count rows where knows_data_locations == 'No', divide by 14468.","brief_expected_pct":0.3,"tolerance_pp":0.2}],"page":{"title":"Where UK government cloud data is declared to go: a census of G-Cloud 15","standfirst":"Every one of the 14,468 cloud services UK public bodies can buy off the shelf on G-Cloud 15's hosting, infrastructure-software and software lots, counted by what its supplier declared about where the data goes and who it is bought from. Declarations, not locations.","headline":"27.6% of the 14,468 G-Cloud 15 services in scope give the buyer no say in where its data is stored or processed; 61.4% can hold or process it outside the United Kingdom and 38.0% beyond the UK and the EEA; and 49.2% of the in-scope catalogue is resold.","as_at_line":"Digital Marketplace, 20 September 2026. n = 14,468 services (a population, not a sample).","wording_rules":["Every sentence about location says these are declarations. Never say where data is.","Name no country and no jurisdiction. The schema has three options and supports nothing finer.","Say 'three of the four publicly listed lots', never 'the catalogue', when describing coverage.","Call Lot 2a infrastructure software, never cloud support. Cloud support is Lot 3 and is excluded.","Label the Critical Third Parties material as financial services every time it appears.","Never write 'first ever'. Write 'we found no prior published count'."],"headlines":[{"id":"no_user_control","label":"give the buyer no say in where data is stored or processed","value":"27.6%","n":3996,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","long":"27.6% (3,996 of 14,468) of in-scope G-Cloud 15 services say a buyer cannot specify where its data is stored and processed. Of the 14,428 services actually asked the question, 27.7% (3,996 of 14,428)."},{"id":"any_non_uk_location","label":"can hold or process the data outside the United Kingdom","value":"61.4%","n":8882,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","long":"61.4% (8,882 of 14,468) tick the EEA, 'Other locations', or both."},{"id":"beyond_uk_and_eea","label":"can hold or process the data beyond the UK and the EEA","value":"38.0%","n":5502,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","long":"38.0% (5,502 of 14,468) tick 'Other locations', the only option in the schema beyond the UK and the EEA. It names no country."},{"id":"resold","label":"are resold from another organisation","value":"49.2%","n":7114,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","long":"49.2% (7,114 of 14,468) are declared as reselling another organisation's services."},{"id":"uk_only","label":"are declared United Kingdom only","value":"38.3%","n":5546,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","long":"38.3% (5,546 of 14,468) tick the United Kingdom and nothing else."}],"sections":[{"id":"buyer-control","heading":"Whether the buyer gets a say","lead":"On the supplier's own declaration, 27.6% (3,996 of 14,468) of in-scope G-Cloud 15 services do not let a buyer specify where its data is stored and processed. Measured only against the services that were asked the question, it is 27.7% (3,996 of 14,428).","findings":{"no_user_control_all_services":{"n":3996,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":27.62,"small_n":false},"no_user_control_of_those_asked":{"n":3996,"denominator":14428,"denominator_label":"the 14,428 services whose supplier answered 'Yes' to 'Do you know where your data is stored and processed?' and were therefore asked the location and user-control questions","pct":27.7,"small_n":false},"user_control_yes":{"n":10432,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":72.1,"small_n":false},"question_not_asked":{"n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false,"note":"the supplier answered 'No' to whether it knows the locations, which suppresses this question"},"widest_reading_no_say":{"n":4036,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":27.9,"small_n":false,"note":"adds the services whose supplier says it does not know the locations, and which are therefore never asked the user-control question"},"by_lot":{"iaas-and-paas":{"lot":"Lot 1a IaaS and PaaS","no_user_control":{"n":286,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":16,"small_n":false}},"isaas":{"lot":"Lot 2a Infrastructure software (iSaaS)","no_user_control":{"n":340,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":12.24,"small_n":false}},"saas":{"lot":"Lot 2b SaaS","no_user_control":{"n":3370,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":34.03,"small_n":false}}},"by_reseller_status":{"resold":{"n":1192,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":16.76,"small_n":false},"not_resold":{"n":2804,"denominator":7354,"denominator_label":"the 7,354 services declared as not resold","pct":38.13,"small_n":false}}},"notes":["A single headline conceals a wide spread between lots; the per-lot figures are given above and each carries its own denominator.","Three definitions of 'no say' are given and they differ: the answer 'No' to the user-control question, the same measured only against the services asked it, and the widest reading that also counts the services whose supplier says it does not know the locations."]},{"id":"location-census","heading":"Where these services say the data can go","lead":"61.4% (8,882 of 14,468) can store or process data outside the United Kingdom on their own declaration, and 38.0% (5,502 of 14,468) beyond the United Kingdom and the EEA. 38.3% (5,546 of 14,468) are declared United Kingdom only.","findings":{"ticks_united_kingdom":{"n":13427,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":92.8,"small_n":false},"ticks_eea":{"n":8604,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":59.47,"small_n":false},"ticks_other_locations":{"n":5502,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":38.03,"small_n":false},"any_non_uk":{"n":8882,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":61.39,"small_n":false},"uk_only":{"n":5546,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":38.33,"small_n":false},"not_asked":{"n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false},"combinations":[{"combination":"United Kingdom","n":5546,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":38.33,"small_n":false},{"combination":"United Kingdom + European Economic Area (EEA) + Other locations","n":4906,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":33.91,"small_n":false},{"combination":"United Kingdom + European Economic Area (EEA)","n":2902,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":20.06,"small_n":false},{"combination":"European Economic Area (EEA)","n":478,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":3.3,"small_n":false},{"combination":"European Economic Area (EEA) + Other locations","n":318,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":2.2,"small_n":false},{"combination":"Other locations","n":205,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.42,"small_n":false},{"combination":"United Kingdom + Other locations","n":73,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.5,"small_n":false},{"combination":"Not asked (supplier does not know)","n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false}],"by_lot":{"iaas-and-paas":{"lot":"Lot 1a IaaS and PaaS","any_non_uk":{"n":1600,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":89.49,"small_n":false},"beyond_uk_and_eea":{"n":1541,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":86.19,"small_n":false},"uk_only":{"n":188,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":10.51,"small_n":false}},"isaas":{"lot":"Lot 2a Infrastructure software (iSaaS)","any_non_uk":{"n":2123,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":76.42,"small_n":false},"beyond_uk_and_eea":{"n":1617,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":58.21,"small_n":false},"uk_only":{"n":646,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":23.25,"small_n":false}},"saas":{"lot":"Lot 2b SaaS","any_non_uk":{"n":5159,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":52.1,"small_n":false},"beyond_uk_and_eea":{"n":2344,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":23.67,"small_n":false},"uk_only":{"n":4712,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":47.59,"small_n":false}}}},"notes":["The three options are the whole schema. Beyond those three the question names no place, and neither does this study: 'Other locations' is never read here as any particular country or jurisdiction.","The ticks are not exclusive: a service may tick all three. Percentages therefore do not sum to 100 and are each stated against the same population.","The policy position, in government's own words: 'There is no government policy which directly prevents departments or services from storing or processing cloud-based data in any specific country, however you need to consider the implications of where you host your data' (Cloud guide for the public sector). What the framework requires is a declaration, not a location."]},{"id":"reseller-concentration","heading":"How much of the in-scope catalogue is resold, and from whom","lead":"49.2% (7,114 of 14,468) of in-scope services are declared as reselling another organisation's services. Among those, the most frequently named organisation is Microsoft, on between 22.1% and 32.8% (1,570 to 2,332 of 7,114) of resold services and between 10.8% and 16.1% of the in-scope catalogue, depending on which of the four published counting rules is used.","findings":{"resold":{"n":7114,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":49.17,"small_n":false},"not_resold":{"n":7354,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":50.83,"small_n":false},"supplier_type_counts":[{"supplier_type":"Not a reseller","n":7354,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":50.83,"small_n":false},{"supplier_type":"Reseller providing extra features and support","n":2820,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":19.49,"small_n":false},{"supplier_type":"Reseller providing extra support","n":3032,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":20.96,"small_n":false},{"supplier_type":"Reseller (no extras)","n":1262,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":8.72,"small_n":false}],"by_lot":{"iaas-and-paas":{"lot":"Lot 1a IaaS and PaaS","resold":{"n":1279,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":71.53,"small_n":false}},"isaas":{"lot":"Lot 2a Infrastructure software (iSaaS)","resold":{"n":2129,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":76.64,"small_n":false}},"saas":{"lot":"Lot 2b SaaS","resold":{"n":3706,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":37.43,"small_n":false}}},"concentration":{"denominator_note":"Two denominators are used throughout this section and both are printed on every figure: the 7,114 services declared as resold, and all 14,468 services in the census.","distinct_raw_strings":1043,"distinct_raw_strings_note":"1,043 distinct answers exactly as typed. The published normalisation table has 1,015 rows, because it keys on the trimmed, punctuation-stripped, case-folded form: answers differing only in case or trailing punctuation collapse together.","top_raw_strings":[{"raw":"Microsoft","of_resold":{"n":1570,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":22.07,"small_n":false},"of_all_services":{"n":1570,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":10.85,"small_n":false}},{"raw":"Salesforce","of_resold":{"n":456,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":6.41,"small_n":false},"of_all_services":{"n":456,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":3.15,"small_n":false}},{"raw":"AWS","of_resold":{"n":348,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":4.89,"small_n":false},"of_all_services":{"n":348,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":2.41,"small_n":false}},{"raw":"SAP","of_resold":{"n":264,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":3.71,"small_n":false},"of_all_services":{"n":264,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.82,"small_n":false}},{"raw":"Azure and other third party services through Azure Portal Marketplace","of_resold":{"n":234,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":3.29,"small_n":false},"of_all_services":{"n":234,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.62,"small_n":false}},{"raw":"Oracle","of_resold":{"n":155,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.18,"small_n":false},"of_all_services":{"n":155,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.07,"small_n":false}},{"raw":"ICS.AI","of_resold":{"n":146,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.05,"small_n":false},"of_all_services":{"n":146,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.01,"small_n":false}},{"raw":"ServiceNow","of_resold":{"n":139,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.95,"small_n":false},"of_all_services":{"n":139,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.96,"small_n":false}},{"raw":"Google","of_resold":{"n":96,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.35,"small_n":false},"of_all_services":{"n":96,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.66,"small_n":false}},{"raw":"Amazon Web Services (AWS)","of_resold":{"n":88,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.24,"small_n":false},"of_all_services":{"n":88,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.61,"small_n":false}},{"raw":"Proofpoint","of_resold":{"n":80,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.12,"small_n":false},"of_all_services":{"n":80,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.55,"small_n":false}},{"raw":"CyberArk","of_resold":{"n":78,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.1,"small_n":false},"of_all_services":{"n":78,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.54,"small_n":false}},{"raw":"Palo Alto","of_resold":{"n":74,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.04,"small_n":false},"of_all_services":{"n":74,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.51,"small_n":false}},{"raw":"8x8","of_resold":{"n":73,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.03,"small_n":false},"of_all_services":{"n":73,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.5,"small_n":false}},{"raw":"KnowBe4","of_resold":{"n":72,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.01,"small_n":false},"of_all_services":{"n":72,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.5,"small_n":false}},{"raw":"Mimecast","of_resold":{"n":64,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.9,"small_n":false},"of_all_services":{"n":64,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.44,"small_n":false}},{"raw":"AvePoint","of_resold":{"n":63,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.89,"small_n":false},"of_all_services":{"n":63,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.44,"small_n":false}},{"raw":"Cloudflare","of_resold":{"n":51,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.72,"small_n":false},"of_all_services":{"n":51,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.35,"small_n":false}},{"raw":"Microsoft Azure/AWS/Google Cloud","of_resold":{"n":50,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.7,"small_n":false},"of_all_services":{"n":50,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.35,"small_n":false}},{"raw":"Sitecore, Umbraco, Contentful, Prismic, Microsoft Azure, AWS, Google Cloud","of_resold":{"n":48,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.67,"small_n":false},"of_all_services":{"n":48,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.33,"small_n":false}},{"raw":"Netskope","of_resold":{"n":45,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.63,"small_n":false},"of_all_services":{"n":45,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.31,"small_n":false}},{"raw":"Sophos","of_resold":{"n":44,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.62,"small_n":false},"of_all_services":{"n":44,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.3,"small_n":false}},{"raw":"VMware","of_resold":{"n":39,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.55,"small_n":false},"of_all_services":{"n":39,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.27,"small_n":false}},{"raw":"AWS, Azure and Google","of_resold":{"n":35,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.49,"small_n":false},"of_all_services":{"n":35,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.24,"small_n":false}},{"raw":"IBM","of_resold":{"n":35,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.49,"small_n":false},"of_all_services":{"n":35,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.24,"small_n":false}},{"raw":"Arctic Wolf","of_resold":{"n":33,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.46,"small_n":false},"of_all_services":{"n":33,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.23,"small_n":false}},{"raw":"AWs, Microsoft, Various","of_resold":{"n":32,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.45,"small_n":false},"of_all_services":{"n":32,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.22,"small_n":false}},{"raw":"Fortinet","of_resold":{"n":32,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.45,"small_n":false},"of_all_services":{"n":32,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.22,"small_n":false}},{"raw":"Crowdstrike","of_resold":{"n":31,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.44,"small_n":false},"of_all_services":{"n":31,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.21,"small_n":false}},{"raw":"AWS, Microsoft (Azure), Elastic","of_resold":{"n":30,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.42,"small_n":false},"of_all_services":{"n":30,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.21,"small_n":false}}],"normalised_groups":[{"group":"Other (not a tracked organisation)","of_resold":{"n":2063,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":29,"small_n":false},"of_all_services":{"n":2063,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":14.26,"small_n":false}},{"group":"Microsoft","of_resold":{"n":1938,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":27.24,"small_n":false},"of_all_services":{"n":1938,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":13.4,"small_n":false}},{"group":"Amazon Web Services","of_resold":{"n":481,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":6.76,"small_n":false},"of_all_services":{"n":481,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":3.32,"small_n":false}},{"group":"Salesforce","of_resold":{"n":478,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":6.72,"small_n":false},"of_all_services":{"n":478,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":3.3,"small_n":false}},{"group":"Multiple organisations named","of_resold":{"n":426,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":5.99,"small_n":false},"of_all_services":{"n":426,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":2.94,"small_n":false}},{"group":"SAP","of_resold":{"n":286,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":4.02,"small_n":false},"of_all_services":{"n":286,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.98,"small_n":false}},{"group":"Oracle","of_resold":{"n":167,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.35,"small_n":false},"of_all_services":{"n":167,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.15,"small_n":false}},{"group":"ServiceNow","of_resold":{"n":152,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.14,"small_n":false},"of_all_services":{"n":152,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.05,"small_n":false}},{"group":"Google","of_resold":{"n":124,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.74,"small_n":false},"of_all_services":{"n":124,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.86,"small_n":false}},{"group":"Palo Alto Networks","of_resold":{"n":103,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.45,"small_n":false},"of_all_services":{"n":103,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.71,"small_n":false}},{"group":"Proofpoint","of_resold":{"n":98,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.38,"small_n":false},"of_all_services":{"n":98,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.68,"small_n":false}},{"group":"8x8","of_resold":{"n":85,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.19,"small_n":false},"of_all_services":{"n":85,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.59,"small_n":false}},{"group":"CrowdStrike","of_resold":{"n":80,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.12,"small_n":false},"of_all_services":{"n":80,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.55,"small_n":false}},{"group":"CyberArk","of_resold":{"n":79,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.11,"small_n":false},"of_all_services":{"n":79,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.55,"small_n":false}},{"group":"KnowBe4","of_resold":{"n":76,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.07,"small_n":false},"of_all_services":{"n":76,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.53,"small_n":false}},{"group":"AvePoint","of_resold":{"n":73,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.03,"small_n":false},"of_all_services":{"n":73,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.5,"small_n":false}},{"group":"Mimecast","of_resold":{"n":65,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.91,"small_n":false},"of_all_services":{"n":65,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.45,"small_n":false}},{"group":"Cloudflare","of_resold":{"n":53,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.75,"small_n":false},"of_all_services":{"n":53,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.37,"small_n":false}},{"group":"Netskope","of_resold":{"n":47,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.66,"small_n":false},"of_all_services":{"n":47,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.32,"small_n":false}},{"group":"Cisco","of_resold":{"n":46,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.65,"small_n":false},"of_all_services":{"n":46,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.32,"small_n":false}},{"group":"Sophos","of_resold":{"n":44,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.62,"small_n":false},"of_all_services":{"n":44,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.3,"small_n":false}},{"group":"Fortinet","of_resold":{"n":41,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.58,"small_n":false},"of_all_services":{"n":41,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false}},{"group":"Broadcom (VMware)","of_resold":{"n":41,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.58,"small_n":false},"of_all_services":{"n":41,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false}},{"group":"IBM","of_resold":{"n":40,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.56,"small_n":false},"of_all_services":{"n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false}},{"group":"Atlassian","of_resold":{"n":11,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.15,"small_n":false},"of_all_services":{"n":11,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.08,"small_n":false}},{"group":"Blank or unusable answer","of_resold":{"n":9,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 9 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":9,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 9 is below the study's floor of 10; the count is given instead of a percentage"}},{"group":"Red Hat","of_resold":{"n":4,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 4 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":4,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 4 is below the study's floor of 10; the count is given instead of a percentage"}},{"group":"Adobe","of_resold":{"n":3,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 3 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":3,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 3 is below the study's floor of 10; the count is given instead of a percentage"}},{"group":"Citrix","of_resold":{"n":1,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 1 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":1,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 1 is below the study's floor of 10; the count is given instead of a percentage"}}],"largest_untracked_answers":{"note":"The named-organisation table ranks only the 26 organisations in the published pattern list. Any other organisation, however often it is named, falls into 'Other (not a tracked organisation)'. These are the largest such answers, as typed, so that the residual can be read rather than assumed. They are counted by exact answer after case and punctuation folding, not by pattern, so variant spellings of the same organisation are not combined.","residual_total":{"n":2063,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":29,"small_n":false},"distinct_untracked_answers":771,"largest":[{"answer_as_typed":"ICS.AI","of_resold":{"n":146,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.05,"small_n":false},"of_all_services":{"n":146,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.01,"small_n":false}},{"answer_as_typed":"Arctic Wolf","of_resold":{"n":33,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.46,"small_n":false},"of_all_services":{"n":33,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.23,"small_n":false}},{"answer_as_typed":"ITouchVision Ltd","of_resold":{"n":30,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.42,"small_n":false},"of_all_services":{"n":30,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.21,"small_n":false}},{"answer_as_typed":"Nutanix","of_resold":{"n":28,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.39,"small_n":false},"of_all_services":{"n":28,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.19,"small_n":false}},{"answer_as_typed":"Check Point Software Technologies","of_resold":{"n":27,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.38,"small_n":false},"of_all_services":{"n":27,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.19,"small_n":false}},{"answer_as_typed":"Workday","of_resold":{"n":27,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.38,"small_n":false},"of_all_services":{"n":27,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.19,"small_n":false}},{"answer_as_typed":"Rapid7","of_resold":{"n":25,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.35,"small_n":false},"of_all_services":{"n":25,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.17,"small_n":false}},{"answer_as_typed":"Appian","of_resold":{"n":23,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.32,"small_n":false},"of_all_services":{"n":23,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.16,"small_n":false}},{"answer_as_typed":"Barracuda Networks","of_resold":{"n":23,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.32,"small_n":false},"of_all_services":{"n":23,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.16,"small_n":false}},{"answer_as_typed":"NetApp","of_resold":{"n":22,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.31,"small_n":false},"of_all_services":{"n":22,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.15,"small_n":false}}]},"any_mention_of_organisation":[{"organisation":"Microsoft","of_resold":{"n":2332,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":32.78,"small_n":false},"of_all_services":{"n":2332,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":16.12,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Amazon Web Services","of_resold":{"n":840,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":11.81,"small_n":false},"of_all_services":{"n":840,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":5.81,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Salesforce","of_resold":{"n":485,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":6.82,"small_n":false},"of_all_services":{"n":485,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":3.35,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Google","of_resold":{"n":399,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":5.61,"small_n":false},"of_all_services":{"n":399,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":2.76,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"SAP","of_resold":{"n":325,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":4.57,"small_n":false},"of_all_services":{"n":325,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":2.25,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Oracle","of_resold":{"n":193,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.71,"small_n":false},"of_all_services":{"n":193,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.33,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"ServiceNow","of_resold":{"n":168,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.36,"small_n":false},"of_all_services":{"n":168,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.16,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Palo Alto Networks","of_resold":{"n":117,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.64,"small_n":false},"of_all_services":{"n":117,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.81,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"IBM","of_resold":{"n":107,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.5,"small_n":false},"of_all_services":{"n":107,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.74,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Proofpoint","of_resold":{"n":98,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.38,"small_n":false},"of_all_services":{"n":98,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.68,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"CyberArk","of_resold":{"n":90,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.27,"small_n":false},"of_all_services":{"n":90,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.62,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"8x8","of_resold":{"n":85,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.19,"small_n":false},"of_all_services":{"n":85,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.59,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"CrowdStrike","of_resold":{"n":83,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.17,"small_n":false},"of_all_services":{"n":83,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.57,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"KnowBe4","of_resold":{"n":76,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.07,"small_n":false},"of_all_services":{"n":76,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.53,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"AvePoint","of_resold":{"n":73,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.03,"small_n":false},"of_all_services":{"n":73,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.5,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Mimecast","of_resold":{"n":65,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.91,"small_n":false},"of_all_services":{"n":65,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.45,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Fortinet","of_resold":{"n":65,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.91,"small_n":false},"of_all_services":{"n":65,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.45,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Cisco","of_resold":{"n":61,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.86,"small_n":false},"of_all_services":{"n":61,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.42,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Broadcom (VMware)","of_resold":{"n":61,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.86,"small_n":false},"of_all_services":{"n":61,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.42,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Cloudflare","of_resold":{"n":60,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.84,"small_n":false},"of_all_services":{"n":60,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.41,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Netskope","of_resold":{"n":51,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.72,"small_n":false},"of_all_services":{"n":51,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.35,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Sophos","of_resold":{"n":44,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.62,"small_n":false},"of_all_services":{"n":44,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.3,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Atlassian","of_resold":{"n":12,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.17,"small_n":false},"of_all_services":{"n":12,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.08,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Adobe","of_resold":{"n":9,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 9 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":9,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 9 is below the study's floor of 10; the count is given instead of a percentage"},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Red Hat","of_resold":{"n":7,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 7 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":7,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 7 is below the study's floor of 10; the count is given instead of a percentage"},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Citrix","of_resold":{"n":3,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 3 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":3,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 3 is below the study's floor of 10; the count is given instead of a percentage"},"counting_rule":"counts every answer that names this organisation, including answers that name several"}],"microsoft_four_ways":{"note":"The field is free text, so the Microsoft share depends entirely on how the strings are counted. All four countings are given. Against the whole in-scope catalogue they run from 10.8% to 16.1% of 14,468 services; against resold services alone, from 22.1% to 32.8% of 7,114. No rule reaches one service in five of the whole in-scope catalogue; every one of them exceeds one in five of resold services.","spread":{"of_all_services":{"lowest_pct":10.85,"highest_pct":16.12,"spread_pp":5.27,"denominator":14468},"of_resold":{"lowest_pct":22.07,"highest_pct":32.78,"spread_pp":10.71,"denominator":7114}},"exact_raw_string_microsoft":{"definition":"the answer is exactly the word 'Microsoft'","of_resold":{"n":1570,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":22.07,"small_n":false},"of_all_services":{"n":1570,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":10.85,"small_n":false}},"names_the_organisation":{"definition":"the answer contains 'Microsoft' or 'MSFT' anywhere","of_resold":{"n":1950,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":27.41,"small_n":false},"of_all_services":{"n":1950,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":13.48,"small_n":false}},"sole_organisation_after_normalisation":{"definition":"Microsoft is the only tracked organisation the answer names, by organisation name or by a Microsoft product brand","of_resold":{"n":1938,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":27.24,"small_n":false},"of_all_services":{"n":1938,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":13.4,"small_n":false}},"any_mention_after_normalisation":{"definition":"the answer names Microsoft, by organisation name or product brand, alone or alongside others; the widest defensible reading","of_resold":{"n":2332,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":32.78,"small_n":false},"of_all_services":{"n":2332,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":16.12,"small_n":false}}},"normalisation_rules":{"method":"Trim and collapse whitespace, strip surrounding punctuation and quotes, lower-case for matching only. An answer that is empty after that, or that is one of the null placeholders 'n/a', 'na', 'none', 'not applicable', '-' or 'not a reseller' (case-folded, exact match), is grouped as 'Blank or unusable answer' and is tested against no pattern. Every other string is tested against a published list of word-boundary patterns for each tracked organisation, in two tiers: patterns that name the organisation itself, and patterns that name one of its product or platform brands. A string matching exactly one tracked organisation is grouped under it; a string matching more than one is grouped as 'Multiple organisations named' and counted under each organisation it mentions in the 'any mention' counts; a string matching none is grouped as 'Other (not a tracked organisation)'. Nothing is inferred beyond these patterns.","eligibility":"Only the 26 organisations listed in 'patterns' can appear as a named group or in the 'any mention' counts. The list was fixed before the answers were counted and is published in full. An organisation that is not on it falls into 'Other (not a tracked organisation)' however many services name it, so that residual is not a long tail by definition: the largest untracked answers are published in 'largest_untracked_answers' and the whole mapping is in the normalisation CSV. The table of named organisations is therefore a ranking within a published list, not a ranking of everything suppliers typed.","patterns":{"Microsoft":{"organisation":["microsoft","\\bmsft\\b"],"product":["\\bazure\\b","office\\s*365","\\bo365\\b","\\bm365\\b","microsoft\\s*365","dynamics\\s*365","\\bsharepoint\\b","power\\s*bi","power\\s*apps","power\\s*automate","power\\s*platform","\\bintune\\b","\\bentra\\b","windows\\s*365","exchange\\s*online","\\bonedrive\\b"]},"Amazon Web Services":{"organisation":["amazon\\s*web\\s*services","\\baws\\b","\\bamazon\\b"],"product":[]},"Google":{"organisation":["\\bgoogle\\b","\\bgcp\\b"],"product":["google\\s*cloud","google\\s*workspace"]},"Oracle":{"organisation":["\\boracle\\b"],"product":[]},"Salesforce":{"organisation":["salesforce"],"product":[]},"SAP":{"organisation":["\\bsap\\b"],"product":[]},"IBM":{"organisation":["\\bibm\\b"],"product":[]},"Red Hat":{"organisation":["red\\s*hat"],"product":[]},"Broadcom (VMware)":{"organisation":["broadcom","\\bvmware\\b"],"product":[]},"ServiceNow":{"organisation":["service\\s*now"],"product":[]},"Adobe":{"organisation":["\\badobe\\b"],"product":[]},"Cisco":{"organisation":["\\bcisco\\b"],"product":[]},"Citrix":{"organisation":["\\bcitrix\\b"],"product":[]},"Atlassian":{"organisation":["atlassian"],"product":[]},"Proofpoint":{"organisation":["proofpoint"],"product":[]},"Mimecast":{"organisation":["mimecast"],"product":[]},"CrowdStrike":{"organisation":["crowd\\s*strike"],"product":[]},"Palo Alto Networks":{"organisation":["palo\\s*alto"],"product":[]},"Sophos":{"organisation":["\\bsophos\\b"],"product":[]},"Fortinet":{"organisation":["fortinet"],"product":[]},"CyberArk":{"organisation":["cyber\\s*ark"],"product":[]},"Netskope":{"organisation":["netskope"],"product":[]},"KnowBe4":{"organisation":["know\\s*be\\s*4"],"product":[]},"AvePoint":{"organisation":["ave\\s*point"],"product":[]},"Cloudflare":{"organisation":["cloud\\s*flare"],"product":[]},"8x8":{"organisation":["\\b8x8\\b"],"product":[]}},"full_table":"data/research/g-cloud-15-data-location-census-2026/resold-organisation-normalisation.csv","limitation":"Normalisation cannot tell a reseller of a hyperscaler's own platform from a reseller of third-party software that merely runs on it. Both are counted the same way, because the field does not distinguish them."}}},"notes":["The brief for this study pre-registered a resold share of 62.3%. The census does not support it and neither does the catalogue's own supplier-type filter. The disagreement is reported in full below rather than resolved by preference.","The brief also drafted 'Microsoft behind roughly one service in five'. No counting rule over the free-text field reaches that. The claim is dropped and the four countings are published instead.","A reseller declaration says who the supplier buys from. It says nothing about where that organisation puts the data.","The named-organisation table is a ranking inside a published list of 26 organisations, fixed before counting. Anything else typed into the box falls into 'Other (not a tracked organisation)', so that group is a residual of the rules, not a long tail of small organisations. The largest untracked answers are printed beside the table."]},{"id":"resold-and-location","heading":"Resold services and data location together","lead":"Resold services are more likely to be declared as capable of holding data outside the United Kingdom: 78.7% (5,595 of 7,114) of resold services, against 44.7% (3,287 of 7,354) of services that are not resold.","findings":{"by_reseller_status":{"resold":{"n":7114,"any_non_uk_location":{"n":5595,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":78.65,"small_n":false},"beyond_uk_and_eea":{"n":4024,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":56.56,"small_n":false},"uk_only":{"n":1486,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":20.89,"small_n":false},"no_user_control":{"n":1192,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":16.76,"small_n":false},"no_user_control_of_those_asked":{"n":1192,"denominator":7081,"denominator_label":"the 7,081 of these services that were asked the question","pct":16.83,"small_n":false},"supplier_does_not_know_locations":{"n":33,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.46,"small_n":false}},"not_resold":{"n":7354,"any_non_uk_location":{"n":3287,"denominator":7354,"denominator_label":"the 7,354 services declared as not resold","pct":44.7,"small_n":false},"beyond_uk_and_eea":{"n":1478,"denominator":7354,"denominator_label":"the 7,354 services declared as not resold","pct":20.1,"small_n":false},"uk_only":{"n":4060,"denominator":7354,"denominator_label":"the 7,354 services declared as not resold","pct":55.21,"small_n":false},"no_user_control":{"n":2804,"denominator":7354,"denominator_label":"the 7,354 services declared as not resold","pct":38.13,"small_n":false},"no_user_control_of_those_asked":{"n":2804,"denominator":7347,"denominator_label":"the 7,347 of these services that were asked the question","pct":38.17,"small_n":false},"supplier_does_not_know_locations":{"n":7,"denominator":7354,"denominator_label":"the 7,354 services declared as not resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 7 is below the study's floor of 10; the count is given instead of a percentage"}},"by_supplier_type":{"Not a reseller":{"n":7354,"any_non_uk_location":{"n":3287,"denominator":7354,"denominator_label":"the 7,354 services declared 'Not a reseller'","pct":44.7,"small_n":false},"beyond_uk_and_eea":{"n":1478,"denominator":7354,"denominator_label":"the 7,354 services declared 'Not a reseller'","pct":20.1,"small_n":false},"uk_only":{"n":4060,"denominator":7354,"denominator_label":"the 7,354 services declared 'Not a reseller'","pct":55.21,"small_n":false},"no_user_control":{"n":2804,"denominator":7354,"denominator_label":"the 7,354 services declared 'Not a reseller'","pct":38.13,"small_n":false},"no_user_control_of_those_asked":{"n":2804,"denominator":7347,"denominator_label":"the 7,347 of these services that were asked the question","pct":38.17,"small_n":false},"supplier_does_not_know_locations":{"n":7,"denominator":7354,"denominator_label":"the 7,354 services declared 'Not a reseller'","pct":null,"small_n":true,"pct_withheld_reason":"n = 7 is below the study's floor of 10; the count is given instead of a percentage"}},"Reseller providing extra features and support":{"n":2820,"any_non_uk_location":{"n":1852,"denominator":2820,"denominator_label":"the 2,820 services declared 'Reseller providing extra features and support'","pct":65.67,"small_n":false},"beyond_uk_and_eea":{"n":957,"denominator":2820,"denominator_label":"the 2,820 services declared 'Reseller providing extra features and support'","pct":33.94,"small_n":false},"uk_only":{"n":940,"denominator":2820,"denominator_label":"the 2,820 services declared 'Reseller providing extra features and support'","pct":33.33,"small_n":false},"no_user_control":{"n":589,"denominator":2820,"denominator_label":"the 2,820 services declared 'Reseller providing extra features and support'","pct":20.89,"small_n":false},"no_user_control_of_those_asked":{"n":589,"denominator":2792,"denominator_label":"the 2,792 of these services that were asked the question","pct":21.1,"small_n":false},"supplier_does_not_know_locations":{"n":28,"denominator":2820,"denominator_label":"the 2,820 services declared 'Reseller providing extra features and support'","pct":0.99,"small_n":false}},"Reseller providing extra support":{"n":3032,"any_non_uk_location":{"n":2586,"denominator":3032,"denominator_label":"the 3,032 services declared 'Reseller providing extra support'","pct":85.29,"small_n":false},"beyond_uk_and_eea":{"n":2222,"denominator":3032,"denominator_label":"the 3,032 services declared 'Reseller providing extra support'","pct":73.28,"small_n":false},"uk_only":{"n":443,"denominator":3032,"denominator_label":"the 3,032 services declared 'Reseller providing extra support'","pct":14.61,"small_n":false},"no_user_control":{"n":474,"denominator":3032,"denominator_label":"the 3,032 services declared 'Reseller providing extra support'","pct":15.63,"small_n":false},"no_user_control_of_those_asked":{"n":474,"denominator":3029,"denominator_label":"the 3,029 of these services that were asked the question","pct":15.65,"small_n":false},"supplier_does_not_know_locations":{"n":3,"denominator":3032,"denominator_label":"the 3,032 services declared 'Reseller providing extra support'","pct":null,"small_n":true,"pct_withheld_reason":"n = 3 is below the study's floor of 10; the count is given instead of a percentage"}},"Reseller (no extras)":{"n":1262,"any_non_uk_location":{"n":1157,"denominator":1262,"denominator_label":"the 1,262 services declared 'Reseller (no extras)'","pct":91.68,"small_n":false},"beyond_uk_and_eea":{"n":845,"denominator":1262,"denominator_label":"the 1,262 services declared 'Reseller (no extras)'","pct":66.96,"small_n":false},"uk_only":{"n":103,"denominator":1262,"denominator_label":"the 1,262 services declared 'Reseller (no extras)'","pct":8.16,"small_n":false},"no_user_control":{"n":129,"denominator":1262,"denominator_label":"the 1,262 services declared 'Reseller (no extras)'","pct":10.22,"small_n":false},"no_user_control_of_those_asked":{"n":129,"denominator":1260,"denominator_label":"the 1,260 of these services that were asked the question","pct":10.24,"small_n":false},"supplier_does_not_know_locations":{"n":2,"denominator":1262,"denominator_label":"the 1,262 services declared 'Reseller (no extras)'","pct":null,"small_n":true,"pct_withheld_reason":"n = 2 is below the study's floor of 10; the count is given instead of a percentage"}}}}},"notes":["This is an association between two self-declared fields on the same form. It is not evidence of cause, and it is not evidence of where anything is.","Part of this gap is lot composition rather than reselling. Reselling is much commoner in the infrastructure lots, which also have the highest non-UK rates, so the two fields move together by lot. This study does not publish a within-lot cross-tabulation of location against supplier type, which is what would be needed to separate them."]},{"id":"context-critical-third-parties","heading":"Context: a concentration rule that does not apply here","lead":"In July 2026 HM Treasury designated four technology providers as Critical Third Parties: Microsoft Ireland Operations Limited, Google Cloud EMEA Limited, Amazon Web Services EMEA SARL and Oracle Corporation UK Limited. That is a financial-services regime and it places no duty on a public body buying from G-Cloud.","findings":{"designated_entities":["Microsoft Ireland Operations Limited","Google Cloud EMEA Limited","Amazon Web Services EMEA SARL","Oracle Corporation UK Limited"],"designations_effective":"2026-07-13","announced":"2026-07-10","regulator_quotes":["Oversight is limited to the resilience of the services they provide to UK financial firms.","Designation under this regime is not the same as authorisation by the regulators.","This regime complements, but does not replace, existing outsourcing and operational resilience rules for regulated firms who remain responsible for managing their own third-party arrangements including due diligence, risk management and contingency planning."],"why_it_is_included":"Only to show that UK authorities have already treated concentration in a handful of cloud providers as systemic in one sector. It is financial services, not public procurement."},"notes":["Labelled as financial services every time it appears. It is not a public sector rule and must not be read as one.","The designated entities are legal entity names. None of them is the trading name a G-Cloud reseller types into the free-text reselling field, so they cannot be matched to the catalogue."]},{"id":"footnote-do-not-know","heading":"Footnote: suppliers who say they do not know","lead":"40 services (0.3% of 14,468) answer 'No' to 'Do you know where your data is stored and processed?'. Those services are then asked neither the location question nor the user-control question.","findings":{"supplier_does_not_know":{"n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false},"by_lot":{"iaas-and-paas":{"lot":"Lot 1a IaaS and PaaS","does_not_know":{"n":0,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":null,"small_n":true,"pct_withheld_reason":"n = 0 is below the study's floor of 10; the count is given instead of a percentage"}},"isaas":{"lot":"Lot 2a Infrastructure software (iSaaS)","does_not_know":{"n":9,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":null,"small_n":true,"pct_withheld_reason":"n = 9 is below the study's floor of 10; the count is given instead of a percentage"}},"saas":{"lot":"Lot 2b SaaS","does_not_know":{"n":31,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":0.31,"small_n":false}}}},"notes":["This is a footnote, not a finding. It is a fraction of one per cent of the in-scope catalogue and is reported here only because the branching it triggers changes the denominators above."]}],"caveats":["Every figure in this study is a count of what a supplier ticked on a form. Nothing here is evidence of where any data physically sits, and no part of this study inspected, tested or measured any service.","Government's own guidance makes the same point from the other direction: 'while the vendor may offer a technical deployment in a region of your choice, there are often components of the service which are not in the same geography' (Multi-region cloud and software-as-a-service, Government Digital Service, 5 February 2025). A 'United Kingdom' tick does not mean the whole service is in the United Kingdom.","The census is a dated snapshot. The search index was walked between 2026-09-20T04:21:32Z and 2026-09-20T04:26:13Z and the 14,468 detail pages were fetched between 2026-09-20T04:33:39Z and 2026-09-20T05:57:46Z. G-Cloud 15 is an open framework under the Procurement Act 2023 that reopens for new suppliers, so the catalogue will grow and these counts will move.","The population is three of the four publicly listed lots: Lot 1a IaaS and PaaS (1,788), Lot 2a Infrastructure Software iSaaS (2,778) and Lot 2b SaaS (9,902). The whole publicly listed catalogue is 39,730 services. Lot 3 Cloud support services (25,262) is excluded because it is never asked the data-location questions: this is documented in Framework Schedule 1, in the RM1557.15 question export, and in the live search facets, which leave Lot 3 untouched when a location filter is applied.","Lot 1b (IaaS and PaaS above OFFICIAL) is asked the same location questions but is not published in the public catalogue. Framework Schedule 1 requires its service information to be treated as classified information, available to customers with a legitimate right to use it. The census therefore covers the publicly listed catalogue, not the whole framework: the lot that handles data above OFFICIAL cannot be counted from public sources, though a customer with a legitimate right to the information can see it.","The location question offers exactly three options: United Kingdom, European Economic Area (EEA) and Other locations. It names no place beyond those three, and neither does this study. 'Other locations' is the only option beyond the UK and the EEA, and nothing in the data supports reading it as any particular country or jurisdiction. An option in G-Cloud 13 that named a specific transfer arrangement is not one in G-Cloud 15; 'Rest of world' has never been one.","The questions branch. Answering 'No' to 'Do you know where your data is stored and processed?' suppresses both the location checkboxes and the user-control question, so those services are recorded as not asked, never as blank or zero. Both denominators are printed for every affected figure: all services, and only those asked.","'Organisation whose services are being resold' is free text. Answers vary in case, punctuation, legal suffix and scope, some name a product rather than an organisation, and some name several. The normalisation is mechanical, published in full and can be rerun or disputed; the concentration figures should be read as a range across counting rules, not as one number.","The table of named organisations ranks only the 26 organisations on the published pattern list, which was fixed before the answers were counted. An organisation not on that list falls into 'Other (not a tracked organisation)' however many services name it: the largest untracked answer, 'ICS.AI', is given by 146 services, more than 20 of the 26 tracked organisations. The largest untracked answers are published beside the table for exactly that reason.","The field cannot tell a reseller of a hyperscaler's own platform from a reseller of third-party software that merely runs on it. Both are counted the same way, because the question does not distinguish them.","No comparison with G-Cloud 14 is possible from this source. The search index's frameworks parameter is silently ignored: filtering to G-Cloud 14 or G-Cloud 12 returns the identical 39,730 results with identical facets. Framework membership was instead confirmed per service from the listing tag on every record.","Only two of the three location options can be filtered in the search, and the user-control and knowledge questions cannot be filtered at all. Among this study's headline measures, therefore, only the resold share has a whole-population cross-check outside the detail pages, which is why a second, independently written parser re-checked a random subset field by field.","Security-posture fields on the same pages (datacentre security standards, penetration testing frequency and approach, protecting data at rest, data sanitisation, staff and government security clearance) were read past and are deliberately excluded from the published dataset. Nothing in this study identifies a named organisation as insecure.","The supplier contact panel - contact name, telephone number and email address - was removed from every page before anything was written to disk, and a second scrub was run over every free-text field kept for the dataset. Numbers a supplier typed into a free-text answer of its own are not contact fields and were not removed from the snapshot; the scrub is what keeps them out of the published files, which contain no email address and no telephone number. The Open Government Licence does not cover personal data.","Counts of listings are not counts of money, customers or usage. A service with no buyers counts the same as one used across government.","Suppliers answer these questions themselves and are not audited on them by this study. Some answers are plainly approximate: an answer that names several organisations, or a product line rather than an organisation, is still recorded exactly as given.","No third party was contacted for this study. Everything here comes from already-published pages and documents."],"method":{"what_was_measured":"The self-declared data-location and reselling fields of every service published on the G-Cloud 15 framework in the three lots that are asked those questions and appear in the public catalogue.","when":"Snapshot taken 2026-09-20. Search index walked 2026-09-20T04:21:32Z to 2026-09-20T04:26:13Z; detail pages fetched 2026-09-20T04:33:39Z to 2026-09-20T05:57:46Z.","population":{"n":14468,"definition":"Every service listed on the Digital Marketplace under G-Cloud 15 in lots 1a, 2a and 2b on the snapshot date. A population, not a sample.","by_lot":{"iaas-and-paas":1788,"isaas":2778,"saas":9902},"whole_publicly_listed_catalogue":39730,"excluded":["Lot 3 Cloud support services (25,262 services): never asked the data-location questions.","Lot 1b IaaS and PaaS above OFFICIAL: asked the questions, but withheld from the public catalogue as classified information under Framework Schedule 1."]},"how":["The search index was walked lot by lot, 30 results a page, 484 pages, collecting 14,468 service identifiers. Per-lot counts were asserted against the catalogue's own facets before anything else ran.","Every one of the 14,468 service detail pages was fetched once and stored gzipped in a dated snapshot directory, so nothing is fetched twice and the parse can be rerun offline.","Only the main content region of each page was kept. Supplier contact panels were removed before anything was written to disk.","Each page was parsed by locating the 'Asset protection' and 'Resellers' sections and reading their summary-list rows, so a label appearing elsewhere on the page cannot be mistaken for a field.","Branching was handled explicitly: where the supplier answers 'No' to knowing the locations, the location and user-control questions are absent and are recorded as not asked, never as blank or zero.","A second parser, written from the raw HTML and using a different method, re-parsed a seeded random subset field by field as an independent check.","Whole-population counts for the fields the search can filter were reconciled against the catalogue's own facets, measure by measure."],"exact_question_wording":{"knowledge":"Do you know where your data is stored and processed? (Yes / No)","locations":"Where is data stored and processed? (checkboxes: United Kingdom | European Economic Area (EEA) | Other locations)","user_control":"Can users specify where data is stored and processed? (Yes / No)","supplier_type":"Are you reselling another organisation's services? (I'm not a reseller | I'm a reseller providing extra features and support not available from the original supplier | I'm a reseller providing extra support | I'm a reseller not providing extra features or support)","resold_organisation":"Which organisation's services do you resell? (free text)","source":"RM1557.15 G-Cloud question export, the official workbook linked from the agreement's tender documents. Wording is identical in lots 1a, 1b, 2a and 2b."},"branching_rule":"'Do you know where your data is stored and processed?' gates two follow-ups: the location checkboxes and the user-control question. Answering 'No' suppresses both. 'Organisation whose services are being resold' appears only when the supplier type is one of the three reseller answers.","crawl_policy":{"rate":"about 3 requests a second, at most 2 in flight","user_agent":"ServnetResearchBot/1.0 (+https://www.servnetuk.com/research)","backoff":"back off on 429 or any 5xx; stop entirely if the site signals it does not want the traffic","robots_txt":"The host serves no robots.txt (HTTP 404), so no crawl directives are published. The politeness limits were self-imposed, not permitted by a robots file.","site_terms":"The Digital Marketplace terms and conditions were read in full: they contain no anti-automation, anti-crawling or reuse clause, and no occurrence of crawl, scrape, robot, spider, automated, harvest, bulk or rate limit. They open: 'The Civil Service website is maintained for your personal use and viewing. Access and use by you of this site constitutes your acceptance of these terms and conditions.' That is a statement about who the site is maintained for, not a restriction on reuse: the same page carries the Open Government Licence v3.0 in its footer, which expressly permits copying, publishing, adapting and commercially exploiting the information.","outcome":"14,468 pages, 14,468 HTTP 200, no 429 responses, no refusals."},"personal_data":"The supplier contact panel on each page - contact name, telephone number and email address - was removed before anything was written to disk, and a second scrub for email addresses, telephone numbers and mailto links was applied to every free-text field kept for the published dataset. The stored snapshot is the page with its contact panel removed, not a page with every number in it removed: a supplier that types a corporate switchboard number into a free-text answer leaves it in the snapshot, and the scrub is what keeps it out of the published files. The published CSV contains no email address, no telephone number and no contact field. The Open Government Licence does not cover personal data.","excluded_from_the_published_dataset":["Datacentre security standards","Penetration testing frequency and approach","Protecting data at rest","Data sanitisation process and type","Equipment disposal approach","Staff security clearance and government security clearance","Supplier contact details of any kind"],"reproducibility":"This analysis makes no network request. Rerunning scripts/research/g-cloud-15-data-location-census-2026/analyse.py against the stored snapshot must reproduce the CSV and the README byte for byte, and this JSON byte for byte apart from its 'built' timestamp, which records when the file was last generated. The CSV and README checksums are printed in the dataset block for exactly that check."},"sources":[{"name":"Digital Marketplace, G-Cloud 15 search index","publisher":"Government Commercial Agency (formerly Crown Commercial Service); platform built by the Government Digital Service","url":"https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/search","what_was_taken":"Service identifiers, names, supplier names and lot for all 14,468 in-scope services, plus the whole-population facet counts used as verification anchors.","retrieved":"2026-09-20T04:21:32Z to 2026-09-20T04:26:13Z","licence":"Open Government Licence v3.0","licence_evidence":"Footer of every search and service page: 'All content is available under the Open Government Licence v3.0, except where otherwise stated', with Crown copyright.","attribution":"Contains public sector information licensed under the Open Government Licence v3.0."},{"name":"Digital Marketplace, G-Cloud 15 service detail pages","publisher":"Government Commercial Agency; platform built by the Government Digital Service","url":"https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/<service_id>","what_was_taken":"Knowledge of data storage and processing locations; data storage and processing locations; user control over those locations; supplier type; organisation whose services are being resold; service categories.","retrieved":"2026-09-20T04:33:39Z to 2026-09-20T05:57:46Z","licence":"Open Government Licence v3.0","attribution":"Contains public sector information licensed under the Open Government Licence v3.0."},{"name":"RM1557.15 G-Cloud question export","publisher":"Government Commercial Agency","url":"https://assets.crowncommercial.gov.uk/wp-content/uploads/RM1557.15-G-Cloud-question-export.xlsx","what_was_taken":"The exact supplier-facing wording, option lists and branching rules for the five questions used here, across all five lots.","retrieved":"2026-09-20","licence":"Open Government Licence v3.0","licence_evidence":"The RM1557.15 pages themselves carry '© Crown copyright' with no licence notice. The licence statement covering them is on the agency's terms page (https://www.gca.gov.uk/terms-and-conditions, retrieved 2026-09-20): 'Most content on our website is subject to Crown copyright protection and is published under the Open Government Licence (OGL). Some content is exempt from the OGL - check the list of exemptions.'","attribution":"Contains public sector information licensed under the Open Government Licence v3.0.","note":"The published workbook stores curly quotes as cp1252 inside UTF-8; the text was repaired on read and the raw file kept byte-identical and checksummed."},{"name":"RM1557.15 Framework Schedule 1 (Specification) v2.1 and the RM1557.15 agreement page","publisher":"Government Commercial Agency","url":"https://www.gca.gov.uk/rm1557-15-g-cloud-15-tender-documents","what_was_taken":"Lot structure, framework start date of 6 August 2026, which lots are asked the data-location questions, and the requirement that Lot 1b service information be treated as classified.","retrieved":"2026-09-20","licence":"Open Government Licence v3.0","licence_evidence":"The RM1557.15 pages themselves carry '© Crown copyright' with no licence notice. The licence statement covering them is on the agency's terms page (https://www.gca.gov.uk/terms-and-conditions, retrieved 2026-09-20): 'Most content on our website is subject to Crown copyright protection and is published under the Open Government Licence (OGL). Some content is exempt from the OGL - check the list of exemptions.'","attribution":"Contains public sector information licensed under the Open Government Licence v3.0."},{"name":"Government Commercial Agency terms and conditions","publisher":"Government Commercial Agency","url":"https://www.gca.gov.uk/terms-and-conditions","what_was_taken":"The licence statement that covers the two RM1557.15 sources above, which do not carry a licence notice on their own pages.","retrieved":"2026-09-20","licence":"Open Government Licence v3.0","licence_evidence":"The RM1557.15 pages themselves carry '© Crown copyright' with no licence notice. The licence statement covering them is on the agency's terms page (https://www.gca.gov.uk/terms-and-conditions, retrieved 2026-09-20): 'Most content on our website is subject to Crown copyright protection and is published under the Open Government Licence (OGL). Some content is exempt from the OGL - check the list of exemptions.'","attribution":"Contains public sector information licensed under the Open Government Licence v3.0.","note":"The same page links a list of OGL exemptions and exempts departmental logos and crests except where they form an integral part of a document or dataset. Nothing taken from those two sources is a logo, a crest or an exempt item; the text and figures used are ordinary Crown-copyright content."},{"name":"Digital Marketplace terms and conditions","publisher":"Government Digital Service","url":"https://www.applytosupply.digitalmarketplace.service.gov.uk/terms-and-conditions","what_was_taken":"Checked in full for any anti-automation, crawling or reuse clause. There is none.","retrieved":"2026-09-20","licence":"Open Government Licence v3.0","attribution":"Contains public sector information licensed under the Open Government Licence v3.0."},{"name":"Open Government Licence v3.0","publisher":"The National Archives","url":"https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/","what_was_taken":"The licence terms under which this dataset is derived and republished. The licence covers copyright and database right and excludes personal data.","retrieved":"2026-09-20","licence":"Open Government Licence v3.0","attribution":"Contains public sector information licensed under the Open Government Licence v3.0."},{"name":"Multi-region cloud and software-as-a-service","publisher":"Government Digital Service","url":"https://www.gov.uk/government/publications/multi-region-cloud-and-software-as-a-service/multi-region-cloud-and-software-as-a-service-html","what_was_taken":"The policy position that there is no universal requirement for OFFICIAL data to be physically located in the UK, and the caveat that parts of a service may sit outside the chosen region.","published":"2025-02-05","licence":"Open Government Licence v3.0","attribution":"Contains public sector information licensed under the Open Government Licence v3.0."},{"name":"Cloud guide for the public sector","publisher":"Central Digital and Data Office / Government Digital Service","url":"https://www.gov.uk/government/publications/cloud-guide-for-the-public-sector/cloud-guide-for-the-public-sector","what_was_taken":"The statement that no government policy directly prevents storing or processing cloud data in any specific country.","last_updated":"2023-11-29","licence":"Open Government Licence v3.0","attribution":"Contains public sector information licensed under the Open Government Licence v3.0."},{"name":"UK financial system strengthened with new safeguards for major technology providers","publisher":"HM Treasury","url":"https://www.gov.uk/government/news/uk-financial-system-strengthened-with-new-safeguards-for-major-technology-providers","what_was_taken":"The four Critical Third Parties designated, effective 13 July 2026.","published":"2026-07-10","licence":"Open Government Licence v3.0","attribution":"Contains public sector information licensed under the Open Government Licence v3.0.","scope_warning":"A financial-services regime. It places no duty on a public body buying from G-Cloud and is used here as labelled context only."},{"name":"UK financial regulators to begin overseeing Critical Third Parties announced by HM Treasury","publisher":"Bank of England","url":"https://www.bankofengland.co.uk/news/2026/july/uk-financial-regulators-to-begin-overseeing-critical-third-parties-announced-by-hmt","what_was_taken":"Three short quotations bounding the scope of the regime.","published":"2026-07-10","licence":"Bank of England website terms; quoted as fair reporting of a public announcement, not reused as data","scope_warning":"Financial services only."}],"disagreements":[{"id":"resold_share","question":"What share of the in-scope catalogue is resold?","positions":[{"source":"This study's brief, pre-registered before the crawl","value":"62.3%","basis":"a pilot expectation set for a 600-service verification subset"},{"source":"Detail-page census (this study)","value":"49.2% (7,114 of 14,468)","basis":"every service's own 'Supplier type' answer"},{"source":"Digital Marketplace search facets, same day","value":"7,114 of 14,468","basis":"the catalogue's own supplier-type filters, which sum to the population exactly"}],"how_reported":"The two independent measurements of the live catalogue agree with each other and disagree with the pre-registered figure by about thirteen points. The census figure is published, the pre-registered figure is reported here, and the reseller-concentration section of the page is written from the census."},{"id":"lot_labels","question":"What are the three lots in the population called?","positions":[{"source":"This study's brief","value":"'cloud hosting' 1,788; 'cloud software' 9,902; and, wrongly, 'cloud support' 2,778"},{"source":"RM1557.15 question export and the live catalogue","value":"Lot 1a IaaS and PaaS 1,788; Lot 2b SaaS 9,902; Lot 2a Infrastructure Software (iSaaS) 2,778"}],"how_reported":"The counts are identical; the third label in the brief is wrong. Cloud support is Lot 3, has 25,262 services, is never asked the data-location questions and is excluded from the census. The correct lot names are used throughout and the exclusion is stated."},{"id":"critical_third_parties_count","question":"How many providers has HM Treasury designated as Critical Third Parties?","positions":[{"source":"This study's brief","value":"three (AWS EMEA, Google Cloud EMEA, Microsoft)"},{"source":"HM Treasury and Bank of England, 10 July 2026","value":"four: Microsoft Ireland Operations Limited, Google Cloud EMEA Limited, Amazon Web Services EMEA SARL, Oracle Corporation UK Limited"}],"how_reported":"The published figure of four is used, with the legal entity names as designated."},{"id":"framework_start_date","question":"When did G-Cloud 15 start?","positions":[{"source":"RM1557.15 agreement page (primary)","value":"6 August 2026"},{"source":"Pre-award commentary found in web search","value":"17 September 2026"}],"how_reported":"The agreement page is the primary source and is used; the disagreement is recorded here rather than resolved silently."},{"id":"search_vs_detail","question":"Do the search index facets and the detail pages agree?","positions":[{"source":"Search index facets, 20 September 2026","value":"all seven measures, as listed in the table above"},{"source":"Detail-page census, 20 September 2026","value":"the same seven figures, identical on each"}],"how_reported":"Both are printed measure by measure in the verification block. They agree exactly on every measure that the search can answer."}],"prior_art":[{"work":"Cloud services market investigation","publisher":"Competition and Markets Authority","date":"opened 2023-10-05, final decision 2025-07-31","url":"https://www.gov.uk/cma-cases/cloud-services-market-investigation","what_it_measured":"Competition in UK public cloud infrastructure services, including market structure and concentration measured by UK share of supply by revenue (Appendix D). Found an adverse effect on competition and recommended prioritising strategic market status investigations into Microsoft and Amazon Web Services.","how_ours_differs":"The CMA measured revenue shares across the whole UK cloud infrastructure market. We count catalogue entries on one public procurement framework and their self-declared data-location and reseller fields. Different unit (a listed service, not a pound of revenue) and different population (services a public body can buy off the shelf).","licence":"Open Government Licence v3.0"},{"work":"From 14 to 15: The G-Cloud Supplier playbook","publisher":"Stotles","date":"2025-11-04","url":"https://www.stotles.com/resource/report/from-14-to-15-the-g-cloud-supplier-playbook","what_it_measured":"G-Cloud spend and supplier-share analysis for suppliers bidding into G-Cloud 15, drawing on award and spend data. Gated report.","how_ours_differs":"Stotles analyses money awarded through the framework. We analyse the catalogue itself - what is listed and what suppliers declared about it - which is a different question and available before any spend occurs.","licence":"All rights reserved; cited as prior work, no data reused"},{"work":"G-Cloud framework supplier and spend datasets","publisher":"Tussell","date":"ongoing","url":"https://www.tussell.com/gov","what_it_measured":"Commercial procurement-intelligence platform consolidating UK public sector spend, contract and framework data, including per-framework supplier listings.","how_ours_differs":"Tussell tracks suppliers and spend. No published Tussell output counts the data-location declarations on service listings.","licence":"All rights reserved; cited as prior work, no data reused"},{"work":"DSIT issues guidance to support public sector hosting of cloud workloads in overseas datacentres; and UK government under fire over public sector guidance on using overseas clouds","publisher":"Computer Weekly","date":"February 2025","url":"https://www.computerweekly.com/news/366618667/DSIT-issues-guidance-to-support-public-sector-hosting-of-cloud-workloads-in-overseas-datacentres","what_it_measured":"Reporting and reaction to the February 2025 multi-region guidance. Qualitative; no counts of services or of data-location declarations.","how_ours_differs":"We put a number on the catalogue that the policy debate has so far argued about without one.","licence":"All rights reserved; cited as prior work, no data reused"},{"work":"Digital Marketplace frameworks (YAML question definitions), frameworks up to G-Cloud 13","publisher":"Crown Commercial Service / Government Digital Service (GitHub: Crown-Commercial-Service/digitalmarketplace-frameworks, formerly alphagov)","date":"last framework definition committed January 2023","url":"https://github.com/Crown-Commercial-Service/digitalmarketplace-frameworks","what_it_measured":"Open-source definitions of the service questions, including dataStorageAndProcessing, dataStorageAndProcessingLocations, dataStorageAndProcessingUserControl, resellingType and resellingOrganisations, with their lot dependencies and follow-up logic.","how_ours_differs":"This is the schema, not a count. It stops at G-Cloud 13; the G-Cloud 13 option list still included an option naming a specific transfer arrangement, which G-Cloud 15 no longer offers. For G-Cloud 15 we used the published RM1557.15 question export instead.","licence":"MIT (repository licence); used only to establish that the question structure is long-standing"}],"novelty":{"claim":"We found no prior published count of the G-Cloud data-location declarations.","basis":"The catalogue publishes no bulk export of these fields: they exist only on the individual service pages, which is why this was done by reading all 14,468 of them. Three plausible machine-readable paths on the catalogue host were probed on 2026-09-20 and all three returned HTTP 404 (https://www.applytosupply.digitalmarketplace.service.gov.uk/api/g-cloud/services, https://www.applytosupply.digitalmarketplace.service.gov.uk/api/services and https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/search.json); the historic api.digitalmarketplace.service.gov.uk host did not respond at all. Those probes are recorded, with their statuses, in data/research/g-cloud-15-data-location-census-2026/framework_and_policy_context.json.","search_result":"Searches for prior counts of the G-Cloud data-location fields, for supplier concentration measured by listing, or for reseller share of the in-scope catalogue returned commentary and spend analysis only. No prior work counting these fields was found.","not_claimed":"Not described as a first. The absence of prior work is a negative search result, not proof that none exists."},"dataset":{"csv":"/research/g-cloud-15-data-location-census-2026.csv","readme":"/research/g-cloud-15-data-location-census-2026-README.txt","rows":14468,"licence":"Open Government Licence v3.0","attribution":"Contains public sector information licensed under the Open Government Licence v3.0."}},"data":{"marginals":{"population":14468,"knowledge_of_locations":{"Yes":{"n":14428,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":99.72,"small_n":false},"No":{"n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false}},"user_control":{"Yes":{"n":10432,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":72.1,"small_n":false},"No":{"n":3996,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":27.62,"small_n":false},"Not asked":{"n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false},"Yes_of_those_asked":{"n":10432,"denominator":14428,"denominator_label":"the 14,428 services whose supplier answered 'Yes' to 'Do you know where your data is stored and processed?' and were therefore asked the location and user-control questions","pct":72.3,"small_n":false},"No_of_those_asked":{"n":3996,"denominator":14428,"denominator_label":"the 14,428 services whose supplier answered 'Yes' to 'Do you know where your data is stored and processed?' and were therefore asked the location and user-control questions","pct":27.7,"small_n":false}},"location_ticks":{"United Kingdom":{"n":13427,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":92.8,"small_n":false},"European Economic Area (EEA)":{"n":8604,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":59.47,"small_n":false},"Other locations":{"n":5502,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":38.03,"small_n":false},"any_non_uk":{"n":8882,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":61.39,"small_n":false},"uk_only":{"n":5546,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":38.33,"small_n":false},"not_asked":{"n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false},"note":"The ticks are not exclusive; percentages do not sum to 100."},"location_combinations":[{"combination":"United Kingdom","n":5546,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":38.33,"small_n":false},{"combination":"United Kingdom + European Economic Area (EEA) + Other locations","n":4906,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":33.91,"small_n":false},{"combination":"United Kingdom + European Economic Area (EEA)","n":2902,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":20.06,"small_n":false},{"combination":"European Economic Area (EEA)","n":478,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":3.3,"small_n":false},{"combination":"European Economic Area (EEA) + Other locations","n":318,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":2.2,"small_n":false},{"combination":"Other locations","n":205,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.42,"small_n":false},{"combination":"United Kingdom + Other locations","n":73,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.5,"small_n":false},{"combination":"Not asked (supplier does not know)","n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false}],"supplier_type":[{"supplier_type":"Not a reseller","n":7354,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":50.83,"small_n":false},{"supplier_type":"Reseller providing extra features and support","n":2820,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":19.49,"small_n":false},{"supplier_type":"Reseller providing extra support","n":3032,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":20.96,"small_n":false},{"supplier_type":"Reseller (no extras)","n":1262,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":8.72,"small_n":false}],"resold":{"n":7114,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":49.17,"small_n":false},"not_resold":{"n":7354,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":50.83,"small_n":false}},"by_lot":{"iaas-and-paas":{"lot_code":"1a","lot_name":"Infrastructure as a Service (IaaS) and Platform as a Service (PaaS)","n":1788,"expected_from_search_index":1788,"matches_search_index":true,"no_user_control":{"n":286,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":16,"small_n":false},"no_user_control_of_those_asked":{"n":286,"denominator":1788,"denominator_label":"the 1,788 services in this lot that were asked the question","pct":16,"small_n":false},"user_control_yes":{"n":1502,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":84,"small_n":false},"supplier_does_not_know_locations":{"n":0,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":null,"small_n":true,"pct_withheld_reason":"n = 0 is below the study's floor of 10; the count is given instead of a percentage"},"any_non_uk_location":{"n":1600,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":89.49,"small_n":false},"beyond_uk_and_eea":{"n":1541,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":86.19,"small_n":false},"uk_only":{"n":188,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":10.51,"small_n":false},"ticks_uk":{"n":1773,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":99.16,"small_n":false},"ticks_eea":{"n":1598,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":89.37,"small_n":false},"resold":{"n":1279,"denominator":1788,"denominator_label":"the 1,788 services in Lot 1a IaaS and PaaS","pct":71.53,"small_n":false},"supplier_type_counts":{"Not a reseller":509,"Reseller providing extra support":699,"Reseller providing extra features and support":394,"Reseller (no extras)":186}},"isaas":{"lot_code":"2a","lot_name":"Infrastructure Software as a Service (iSaaS)","n":2778,"expected_from_search_index":2778,"matches_search_index":true,"no_user_control":{"n":340,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":12.24,"small_n":false},"no_user_control_of_those_asked":{"n":340,"denominator":2769,"denominator_label":"the 2,769 services in this lot that were asked the question","pct":12.28,"small_n":false},"user_control_yes":{"n":2429,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":87.44,"small_n":false},"supplier_does_not_know_locations":{"n":9,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":null,"small_n":true,"pct_withheld_reason":"n = 9 is below the study's floor of 10; the count is given instead of a percentage"},"any_non_uk_location":{"n":2123,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":76.42,"small_n":false},"beyond_uk_and_eea":{"n":1617,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":58.21,"small_n":false},"uk_only":{"n":646,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":23.25,"small_n":false},"ticks_uk":{"n":2486,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":89.49,"small_n":false},"ticks_eea":{"n":2064,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":74.3,"small_n":false},"resold":{"n":2129,"denominator":2778,"denominator_label":"the 2,778 services in Lot 2a Infrastructure software (iSaaS)","pct":76.64,"small_n":false},"supplier_type_counts":{"Reseller providing extra features and support":619,"Not a reseller":649,"Reseller providing extra support":1047,"Reseller (no extras)":463}},"saas":{"lot_code":"2b","lot_name":"Software as a Service (SaaS)","n":9902,"expected_from_search_index":9902,"matches_search_index":true,"no_user_control":{"n":3370,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":34.03,"small_n":false},"no_user_control_of_those_asked":{"n":3370,"denominator":9871,"denominator_label":"the 9,871 services in this lot that were asked the question","pct":34.14,"small_n":false},"user_control_yes":{"n":6501,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":65.65,"small_n":false},"supplier_does_not_know_locations":{"n":31,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":0.31,"small_n":false},"any_non_uk_location":{"n":5159,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":52.1,"small_n":false},"beyond_uk_and_eea":{"n":2344,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":23.67,"small_n":false},"uk_only":{"n":4712,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":47.59,"small_n":false},"ticks_uk":{"n":9168,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":92.59,"small_n":false},"ticks_eea":{"n":4942,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":49.91,"small_n":false},"resold":{"n":3706,"denominator":9902,"denominator_label":"the 9,902 services in Lot 2b SaaS","pct":37.43,"small_n":false},"supplier_type_counts":{"Reseller (no extras)":613,"Reseller providing extra support":1286,"Not a reseller":6196,"Reseller providing extra features and support":1807}}},"by_reseller_status":{"resold":{"n":7114,"any_non_uk_location":{"n":5595,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":78.65,"small_n":false},"beyond_uk_and_eea":{"n":4024,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":56.56,"small_n":false},"uk_only":{"n":1486,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":20.89,"small_n":false},"no_user_control":{"n":1192,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":16.76,"small_n":false},"no_user_control_of_those_asked":{"n":1192,"denominator":7081,"denominator_label":"the 7,081 of these services that were asked the question","pct":16.83,"small_n":false},"supplier_does_not_know_locations":{"n":33,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.46,"small_n":false}},"not_resold":{"n":7354,"any_non_uk_location":{"n":3287,"denominator":7354,"denominator_label":"the 7,354 services declared as not resold","pct":44.7,"small_n":false},"beyond_uk_and_eea":{"n":1478,"denominator":7354,"denominator_label":"the 7,354 services declared as not resold","pct":20.1,"small_n":false},"uk_only":{"n":4060,"denominator":7354,"denominator_label":"the 7,354 services declared as not resold","pct":55.21,"small_n":false},"no_user_control":{"n":2804,"denominator":7354,"denominator_label":"the 7,354 services declared as not resold","pct":38.13,"small_n":false},"no_user_control_of_those_asked":{"n":2804,"denominator":7347,"denominator_label":"the 7,347 of these services that were asked the question","pct":38.17,"small_n":false},"supplier_does_not_know_locations":{"n":7,"denominator":7354,"denominator_label":"the 7,354 services declared as not resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 7 is below the study's floor of 10; the count is given instead of a percentage"}},"by_supplier_type":{"Not a reseller":{"n":7354,"any_non_uk_location":{"n":3287,"denominator":7354,"denominator_label":"the 7,354 services declared 'Not a reseller'","pct":44.7,"small_n":false},"beyond_uk_and_eea":{"n":1478,"denominator":7354,"denominator_label":"the 7,354 services declared 'Not a reseller'","pct":20.1,"small_n":false},"uk_only":{"n":4060,"denominator":7354,"denominator_label":"the 7,354 services declared 'Not a reseller'","pct":55.21,"small_n":false},"no_user_control":{"n":2804,"denominator":7354,"denominator_label":"the 7,354 services declared 'Not a reseller'","pct":38.13,"small_n":false},"no_user_control_of_those_asked":{"n":2804,"denominator":7347,"denominator_label":"the 7,347 of these services that were asked the question","pct":38.17,"small_n":false},"supplier_does_not_know_locations":{"n":7,"denominator":7354,"denominator_label":"the 7,354 services declared 'Not a reseller'","pct":null,"small_n":true,"pct_withheld_reason":"n = 7 is below the study's floor of 10; the count is given instead of a percentage"}},"Reseller providing extra features and support":{"n":2820,"any_non_uk_location":{"n":1852,"denominator":2820,"denominator_label":"the 2,820 services declared 'Reseller providing extra features and support'","pct":65.67,"small_n":false},"beyond_uk_and_eea":{"n":957,"denominator":2820,"denominator_label":"the 2,820 services declared 'Reseller providing extra features and support'","pct":33.94,"small_n":false},"uk_only":{"n":940,"denominator":2820,"denominator_label":"the 2,820 services declared 'Reseller providing extra features and support'","pct":33.33,"small_n":false},"no_user_control":{"n":589,"denominator":2820,"denominator_label":"the 2,820 services declared 'Reseller providing extra features and support'","pct":20.89,"small_n":false},"no_user_control_of_those_asked":{"n":589,"denominator":2792,"denominator_label":"the 2,792 of these services that were asked the question","pct":21.1,"small_n":false},"supplier_does_not_know_locations":{"n":28,"denominator":2820,"denominator_label":"the 2,820 services declared 'Reseller providing extra features and support'","pct":0.99,"small_n":false}},"Reseller providing extra support":{"n":3032,"any_non_uk_location":{"n":2586,"denominator":3032,"denominator_label":"the 3,032 services declared 'Reseller providing extra support'","pct":85.29,"small_n":false},"beyond_uk_and_eea":{"n":2222,"denominator":3032,"denominator_label":"the 3,032 services declared 'Reseller providing extra support'","pct":73.28,"small_n":false},"uk_only":{"n":443,"denominator":3032,"denominator_label":"the 3,032 services declared 'Reseller providing extra support'","pct":14.61,"small_n":false},"no_user_control":{"n":474,"denominator":3032,"denominator_label":"the 3,032 services declared 'Reseller providing extra support'","pct":15.63,"small_n":false},"no_user_control_of_those_asked":{"n":474,"denominator":3029,"denominator_label":"the 3,029 of these services that were asked the question","pct":15.65,"small_n":false},"supplier_does_not_know_locations":{"n":3,"denominator":3032,"denominator_label":"the 3,032 services declared 'Reseller providing extra support'","pct":null,"small_n":true,"pct_withheld_reason":"n = 3 is below the study's floor of 10; the count is given instead of a percentage"}},"Reseller (no extras)":{"n":1262,"any_non_uk_location":{"n":1157,"denominator":1262,"denominator_label":"the 1,262 services declared 'Reseller (no extras)'","pct":91.68,"small_n":false},"beyond_uk_and_eea":{"n":845,"denominator":1262,"denominator_label":"the 1,262 services declared 'Reseller (no extras)'","pct":66.96,"small_n":false},"uk_only":{"n":103,"denominator":1262,"denominator_label":"the 1,262 services declared 'Reseller (no extras)'","pct":8.16,"small_n":false},"no_user_control":{"n":129,"denominator":1262,"denominator_label":"the 1,262 services declared 'Reseller (no extras)'","pct":10.22,"small_n":false},"no_user_control_of_those_asked":{"n":129,"denominator":1260,"denominator_label":"the 1,260 of these services that were asked the question","pct":10.24,"small_n":false},"supplier_does_not_know_locations":{"n":2,"denominator":1262,"denominator_label":"the 1,262 services declared 'Reseller (no extras)'","pct":null,"small_n":true,"pct_withheld_reason":"n = 2 is below the study's floor of 10; the count is given instead of a percentage"}}}},"concentration":{"denominator_note":"Two denominators are used throughout this section and both are printed on every figure: the 7,114 services declared as resold, and all 14,468 services in the census.","distinct_raw_strings":1043,"distinct_raw_strings_note":"1,043 distinct answers exactly as typed. The published normalisation table has 1,015 rows, because it keys on the trimmed, punctuation-stripped, case-folded form: answers differing only in case or trailing punctuation collapse together.","top_raw_strings":[{"raw":"Microsoft","of_resold":{"n":1570,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":22.07,"small_n":false},"of_all_services":{"n":1570,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":10.85,"small_n":false}},{"raw":"Salesforce","of_resold":{"n":456,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":6.41,"small_n":false},"of_all_services":{"n":456,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":3.15,"small_n":false}},{"raw":"AWS","of_resold":{"n":348,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":4.89,"small_n":false},"of_all_services":{"n":348,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":2.41,"small_n":false}},{"raw":"SAP","of_resold":{"n":264,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":3.71,"small_n":false},"of_all_services":{"n":264,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.82,"small_n":false}},{"raw":"Azure and other third party services through Azure Portal Marketplace","of_resold":{"n":234,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":3.29,"small_n":false},"of_all_services":{"n":234,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.62,"small_n":false}},{"raw":"Oracle","of_resold":{"n":155,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.18,"small_n":false},"of_all_services":{"n":155,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.07,"small_n":false}},{"raw":"ICS.AI","of_resold":{"n":146,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.05,"small_n":false},"of_all_services":{"n":146,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.01,"small_n":false}},{"raw":"ServiceNow","of_resold":{"n":139,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.95,"small_n":false},"of_all_services":{"n":139,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.96,"small_n":false}},{"raw":"Google","of_resold":{"n":96,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.35,"small_n":false},"of_all_services":{"n":96,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.66,"small_n":false}},{"raw":"Amazon Web Services (AWS)","of_resold":{"n":88,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.24,"small_n":false},"of_all_services":{"n":88,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.61,"small_n":false}},{"raw":"Proofpoint","of_resold":{"n":80,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.12,"small_n":false},"of_all_services":{"n":80,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.55,"small_n":false}},{"raw":"CyberArk","of_resold":{"n":78,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.1,"small_n":false},"of_all_services":{"n":78,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.54,"small_n":false}},{"raw":"Palo Alto","of_resold":{"n":74,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.04,"small_n":false},"of_all_services":{"n":74,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.51,"small_n":false}},{"raw":"8x8","of_resold":{"n":73,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.03,"small_n":false},"of_all_services":{"n":73,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.5,"small_n":false}},{"raw":"KnowBe4","of_resold":{"n":72,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.01,"small_n":false},"of_all_services":{"n":72,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.5,"small_n":false}},{"raw":"Mimecast","of_resold":{"n":64,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.9,"small_n":false},"of_all_services":{"n":64,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.44,"small_n":false}},{"raw":"AvePoint","of_resold":{"n":63,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.89,"small_n":false},"of_all_services":{"n":63,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.44,"small_n":false}},{"raw":"Cloudflare","of_resold":{"n":51,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.72,"small_n":false},"of_all_services":{"n":51,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.35,"small_n":false}},{"raw":"Microsoft Azure/AWS/Google Cloud","of_resold":{"n":50,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.7,"small_n":false},"of_all_services":{"n":50,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.35,"small_n":false}},{"raw":"Sitecore, Umbraco, Contentful, Prismic, Microsoft Azure, AWS, Google Cloud","of_resold":{"n":48,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.67,"small_n":false},"of_all_services":{"n":48,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.33,"small_n":false}},{"raw":"Netskope","of_resold":{"n":45,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.63,"small_n":false},"of_all_services":{"n":45,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.31,"small_n":false}},{"raw":"Sophos","of_resold":{"n":44,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.62,"small_n":false},"of_all_services":{"n":44,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.3,"small_n":false}},{"raw":"VMware","of_resold":{"n":39,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.55,"small_n":false},"of_all_services":{"n":39,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.27,"small_n":false}},{"raw":"AWS, Azure and Google","of_resold":{"n":35,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.49,"small_n":false},"of_all_services":{"n":35,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.24,"small_n":false}},{"raw":"IBM","of_resold":{"n":35,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.49,"small_n":false},"of_all_services":{"n":35,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.24,"small_n":false}},{"raw":"Arctic Wolf","of_resold":{"n":33,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.46,"small_n":false},"of_all_services":{"n":33,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.23,"small_n":false}},{"raw":"AWs, Microsoft, Various","of_resold":{"n":32,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.45,"small_n":false},"of_all_services":{"n":32,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.22,"small_n":false}},{"raw":"Fortinet","of_resold":{"n":32,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.45,"small_n":false},"of_all_services":{"n":32,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.22,"small_n":false}},{"raw":"Crowdstrike","of_resold":{"n":31,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.44,"small_n":false},"of_all_services":{"n":31,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.21,"small_n":false}},{"raw":"AWS, Microsoft (Azure), Elastic","of_resold":{"n":30,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.42,"small_n":false},"of_all_services":{"n":30,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.21,"small_n":false}}],"normalised_groups":[{"group":"Other (not a tracked organisation)","of_resold":{"n":2063,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":29,"small_n":false},"of_all_services":{"n":2063,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":14.26,"small_n":false}},{"group":"Microsoft","of_resold":{"n":1938,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":27.24,"small_n":false},"of_all_services":{"n":1938,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":13.4,"small_n":false}},{"group":"Amazon Web Services","of_resold":{"n":481,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":6.76,"small_n":false},"of_all_services":{"n":481,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":3.32,"small_n":false}},{"group":"Salesforce","of_resold":{"n":478,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":6.72,"small_n":false},"of_all_services":{"n":478,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":3.3,"small_n":false}},{"group":"Multiple organisations named","of_resold":{"n":426,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":5.99,"small_n":false},"of_all_services":{"n":426,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":2.94,"small_n":false}},{"group":"SAP","of_resold":{"n":286,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":4.02,"small_n":false},"of_all_services":{"n":286,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.98,"small_n":false}},{"group":"Oracle","of_resold":{"n":167,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.35,"small_n":false},"of_all_services":{"n":167,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.15,"small_n":false}},{"group":"ServiceNow","of_resold":{"n":152,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.14,"small_n":false},"of_all_services":{"n":152,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.05,"small_n":false}},{"group":"Google","of_resold":{"n":124,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.74,"small_n":false},"of_all_services":{"n":124,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.86,"small_n":false}},{"group":"Palo Alto Networks","of_resold":{"n":103,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.45,"small_n":false},"of_all_services":{"n":103,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.71,"small_n":false}},{"group":"Proofpoint","of_resold":{"n":98,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.38,"small_n":false},"of_all_services":{"n":98,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.68,"small_n":false}},{"group":"8x8","of_resold":{"n":85,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.19,"small_n":false},"of_all_services":{"n":85,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.59,"small_n":false}},{"group":"CrowdStrike","of_resold":{"n":80,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.12,"small_n":false},"of_all_services":{"n":80,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.55,"small_n":false}},{"group":"CyberArk","of_resold":{"n":79,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.11,"small_n":false},"of_all_services":{"n":79,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.55,"small_n":false}},{"group":"KnowBe4","of_resold":{"n":76,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.07,"small_n":false},"of_all_services":{"n":76,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.53,"small_n":false}},{"group":"AvePoint","of_resold":{"n":73,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.03,"small_n":false},"of_all_services":{"n":73,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.5,"small_n":false}},{"group":"Mimecast","of_resold":{"n":65,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.91,"small_n":false},"of_all_services":{"n":65,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.45,"small_n":false}},{"group":"Cloudflare","of_resold":{"n":53,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.75,"small_n":false},"of_all_services":{"n":53,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.37,"small_n":false}},{"group":"Netskope","of_resold":{"n":47,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.66,"small_n":false},"of_all_services":{"n":47,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.32,"small_n":false}},{"group":"Cisco","of_resold":{"n":46,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.65,"small_n":false},"of_all_services":{"n":46,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.32,"small_n":false}},{"group":"Sophos","of_resold":{"n":44,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.62,"small_n":false},"of_all_services":{"n":44,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.3,"small_n":false}},{"group":"Fortinet","of_resold":{"n":41,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.58,"small_n":false},"of_all_services":{"n":41,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false}},{"group":"Broadcom (VMware)","of_resold":{"n":41,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.58,"small_n":false},"of_all_services":{"n":41,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false}},{"group":"IBM","of_resold":{"n":40,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.56,"small_n":false},"of_all_services":{"n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.28,"small_n":false}},{"group":"Atlassian","of_resold":{"n":11,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.15,"small_n":false},"of_all_services":{"n":11,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.08,"small_n":false}},{"group":"Blank or unusable answer","of_resold":{"n":9,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 9 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":9,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 9 is below the study's floor of 10; the count is given instead of a percentage"}},{"group":"Red Hat","of_resold":{"n":4,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 4 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":4,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 4 is below the study's floor of 10; the count is given instead of a percentage"}},{"group":"Adobe","of_resold":{"n":3,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 3 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":3,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 3 is below the study's floor of 10; the count is given instead of a percentage"}},{"group":"Citrix","of_resold":{"n":1,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 1 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":1,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 1 is below the study's floor of 10; the count is given instead of a percentage"}}],"largest_untracked_answers":{"note":"The named-organisation table ranks only the 26 organisations in the published pattern list. Any other organisation, however often it is named, falls into 'Other (not a tracked organisation)'. These are the largest such answers, as typed, so that the residual can be read rather than assumed. They are counted by exact answer after case and punctuation folding, not by pattern, so variant spellings of the same organisation are not combined.","residual_total":{"n":2063,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":29,"small_n":false},"distinct_untracked_answers":771,"largest":[{"answer_as_typed":"ICS.AI","of_resold":{"n":146,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.05,"small_n":false},"of_all_services":{"n":146,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.01,"small_n":false}},{"answer_as_typed":"Arctic Wolf","of_resold":{"n":33,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.46,"small_n":false},"of_all_services":{"n":33,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.23,"small_n":false}},{"answer_as_typed":"ITouchVision Ltd","of_resold":{"n":30,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.42,"small_n":false},"of_all_services":{"n":30,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.21,"small_n":false}},{"answer_as_typed":"Nutanix","of_resold":{"n":28,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.39,"small_n":false},"of_all_services":{"n":28,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.19,"small_n":false}},{"answer_as_typed":"Check Point Software Technologies","of_resold":{"n":27,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.38,"small_n":false},"of_all_services":{"n":27,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.19,"small_n":false}},{"answer_as_typed":"Workday","of_resold":{"n":27,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.38,"small_n":false},"of_all_services":{"n":27,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.19,"small_n":false}},{"answer_as_typed":"Rapid7","of_resold":{"n":25,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.35,"small_n":false},"of_all_services":{"n":25,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.17,"small_n":false}},{"answer_as_typed":"Appian","of_resold":{"n":23,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.32,"small_n":false},"of_all_services":{"n":23,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.16,"small_n":false}},{"answer_as_typed":"Barracuda Networks","of_resold":{"n":23,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.32,"small_n":false},"of_all_services":{"n":23,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.16,"small_n":false}},{"answer_as_typed":"NetApp","of_resold":{"n":22,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.31,"small_n":false},"of_all_services":{"n":22,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.15,"small_n":false}}]},"any_mention_of_organisation":[{"organisation":"Microsoft","of_resold":{"n":2332,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":32.78,"small_n":false},"of_all_services":{"n":2332,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":16.12,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Amazon Web Services","of_resold":{"n":840,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":11.81,"small_n":false},"of_all_services":{"n":840,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":5.81,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Salesforce","of_resold":{"n":485,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":6.82,"small_n":false},"of_all_services":{"n":485,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":3.35,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Google","of_resold":{"n":399,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":5.61,"small_n":false},"of_all_services":{"n":399,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":2.76,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"SAP","of_resold":{"n":325,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":4.57,"small_n":false},"of_all_services":{"n":325,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":2.25,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Oracle","of_resold":{"n":193,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.71,"small_n":false},"of_all_services":{"n":193,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.33,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"ServiceNow","of_resold":{"n":168,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":2.36,"small_n":false},"of_all_services":{"n":168,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":1.16,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Palo Alto Networks","of_resold":{"n":117,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.64,"small_n":false},"of_all_services":{"n":117,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.81,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"IBM","of_resold":{"n":107,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.5,"small_n":false},"of_all_services":{"n":107,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.74,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Proofpoint","of_resold":{"n":98,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.38,"small_n":false},"of_all_services":{"n":98,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.68,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"CyberArk","of_resold":{"n":90,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.27,"small_n":false},"of_all_services":{"n":90,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.62,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"8x8","of_resold":{"n":85,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.19,"small_n":false},"of_all_services":{"n":85,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.59,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"CrowdStrike","of_resold":{"n":83,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.17,"small_n":false},"of_all_services":{"n":83,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.57,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"KnowBe4","of_resold":{"n":76,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.07,"small_n":false},"of_all_services":{"n":76,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.53,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"AvePoint","of_resold":{"n":73,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":1.03,"small_n":false},"of_all_services":{"n":73,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.5,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Mimecast","of_resold":{"n":65,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.91,"small_n":false},"of_all_services":{"n":65,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.45,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Fortinet","of_resold":{"n":65,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.91,"small_n":false},"of_all_services":{"n":65,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.45,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Cisco","of_resold":{"n":61,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.86,"small_n":false},"of_all_services":{"n":61,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.42,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Broadcom (VMware)","of_resold":{"n":61,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.86,"small_n":false},"of_all_services":{"n":61,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.42,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Cloudflare","of_resold":{"n":60,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.84,"small_n":false},"of_all_services":{"n":60,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.41,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Netskope","of_resold":{"n":51,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.72,"small_n":false},"of_all_services":{"n":51,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.35,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Sophos","of_resold":{"n":44,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.62,"small_n":false},"of_all_services":{"n":44,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.3,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Atlassian","of_resold":{"n":12,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":0.17,"small_n":false},"of_all_services":{"n":12,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":0.08,"small_n":false},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Adobe","of_resold":{"n":9,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 9 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":9,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 9 is below the study's floor of 10; the count is given instead of a percentage"},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Red Hat","of_resold":{"n":7,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 7 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":7,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 7 is below the study's floor of 10; the count is given instead of a percentage"},"counting_rule":"counts every answer that names this organisation, including answers that name several"},{"organisation":"Citrix","of_resold":{"n":3,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":null,"small_n":true,"pct_withheld_reason":"n = 3 is below the study's floor of 10; the count is given instead of a percentage"},"of_all_services":{"n":3,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":null,"small_n":true,"pct_withheld_reason":"n = 3 is below the study's floor of 10; the count is given instead of a percentage"},"counting_rule":"counts every answer that names this organisation, including answers that name several"}],"microsoft_four_ways":{"note":"The field is free text, so the Microsoft share depends entirely on how the strings are counted. All four countings are given. Against the whole in-scope catalogue they run from 10.8% to 16.1% of 14,468 services; against resold services alone, from 22.1% to 32.8% of 7,114. No rule reaches one service in five of the whole in-scope catalogue; every one of them exceeds one in five of resold services.","spread":{"of_all_services":{"lowest_pct":10.85,"highest_pct":16.12,"spread_pp":5.27,"denominator":14468},"of_resold":{"lowest_pct":22.07,"highest_pct":32.78,"spread_pp":10.71,"denominator":7114}},"exact_raw_string_microsoft":{"definition":"the answer is exactly the word 'Microsoft'","of_resold":{"n":1570,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":22.07,"small_n":false},"of_all_services":{"n":1570,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":10.85,"small_n":false}},"names_the_organisation":{"definition":"the answer contains 'Microsoft' or 'MSFT' anywhere","of_resold":{"n":1950,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":27.41,"small_n":false},"of_all_services":{"n":1950,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":13.48,"small_n":false}},"sole_organisation_after_normalisation":{"definition":"Microsoft is the only tracked organisation the answer names, by organisation name or by a Microsoft product brand","of_resold":{"n":1938,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":27.24,"small_n":false},"of_all_services":{"n":1938,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":13.4,"small_n":false}},"any_mention_after_normalisation":{"definition":"the answer names Microsoft, by organisation name or product brand, alone or alongside others; the widest defensible reading","of_resold":{"n":2332,"denominator":7114,"denominator_label":"the 7,114 services declared as resold","pct":32.78,"small_n":false},"of_all_services":{"n":2332,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","pct":16.12,"small_n":false}}},"normalisation_rules":{"method":"Trim and collapse whitespace, strip surrounding punctuation and quotes, lower-case for matching only. An answer that is empty after that, or that is one of the null placeholders 'n/a', 'na', 'none', 'not applicable', '-' or 'not a reseller' (case-folded, exact match), is grouped as 'Blank or unusable answer' and is tested against no pattern. Every other string is tested against a published list of word-boundary patterns for each tracked organisation, in two tiers: patterns that name the organisation itself, and patterns that name one of its product or platform brands. A string matching exactly one tracked organisation is grouped under it; a string matching more than one is grouped as 'Multiple organisations named' and counted under each organisation it mentions in the 'any mention' counts; a string matching none is grouped as 'Other (not a tracked organisation)'. Nothing is inferred beyond these patterns.","eligibility":"Only the 26 organisations listed in 'patterns' can appear as a named group or in the 'any mention' counts. The list was fixed before the answers were counted and is published in full. An organisation that is not on it falls into 'Other (not a tracked organisation)' however many services name it, so that residual is not a long tail by definition: the largest untracked answers are published in 'largest_untracked_answers' and the whole mapping is in the normalisation CSV. The table of named organisations is therefore a ranking within a published list, not a ranking of everything suppliers typed.","patterns":{"Microsoft":{"organisation":["microsoft","\\bmsft\\b"],"product":["\\bazure\\b","office\\s*365","\\bo365\\b","\\bm365\\b","microsoft\\s*365","dynamics\\s*365","\\bsharepoint\\b","power\\s*bi","power\\s*apps","power\\s*automate","power\\s*platform","\\bintune\\b","\\bentra\\b","windows\\s*365","exchange\\s*online","\\bonedrive\\b"]},"Amazon Web Services":{"organisation":["amazon\\s*web\\s*services","\\baws\\b","\\bamazon\\b"],"product":[]},"Google":{"organisation":["\\bgoogle\\b","\\bgcp\\b"],"product":["google\\s*cloud","google\\s*workspace"]},"Oracle":{"organisation":["\\boracle\\b"],"product":[]},"Salesforce":{"organisation":["salesforce"],"product":[]},"SAP":{"organisation":["\\bsap\\b"],"product":[]},"IBM":{"organisation":["\\bibm\\b"],"product":[]},"Red Hat":{"organisation":["red\\s*hat"],"product":[]},"Broadcom (VMware)":{"organisation":["broadcom","\\bvmware\\b"],"product":[]},"ServiceNow":{"organisation":["service\\s*now"],"product":[]},"Adobe":{"organisation":["\\badobe\\b"],"product":[]},"Cisco":{"organisation":["\\bcisco\\b"],"product":[]},"Citrix":{"organisation":["\\bcitrix\\b"],"product":[]},"Atlassian":{"organisation":["atlassian"],"product":[]},"Proofpoint":{"organisation":["proofpoint"],"product":[]},"Mimecast":{"organisation":["mimecast"],"product":[]},"CrowdStrike":{"organisation":["crowd\\s*strike"],"product":[]},"Palo Alto Networks":{"organisation":["palo\\s*alto"],"product":[]},"Sophos":{"organisation":["\\bsophos\\b"],"product":[]},"Fortinet":{"organisation":["fortinet"],"product":[]},"CyberArk":{"organisation":["cyber\\s*ark"],"product":[]},"Netskope":{"organisation":["netskope"],"product":[]},"KnowBe4":{"organisation":["know\\s*be\\s*4"],"product":[]},"AvePoint":{"organisation":["ave\\s*point"],"product":[]},"Cloudflare":{"organisation":["cloud\\s*flare"],"product":[]},"8x8":{"organisation":["\\b8x8\\b"],"product":[]}},"full_table":"data/research/g-cloud-15-data-location-census-2026/resold-organisation-normalisation.csv","limitation":"Normalisation cannot tell a reseller of a hyperscaler's own platform from a reseller of third-party software that merely runs on it. Both are counted the same way, because the field does not distinguish them."}}},"verification":{"rule":"Any pre-registered headline that does not reproduce within its stated tolerance is cut, not caveated.","default_tolerance_pp":1,"how_to_check":["Rerun scripts/research/g-cloud-15-data-location-census-2026/analyse.py against the stored snapshot in data/research/g-cloud-15-data-location-census-2026/. It makes no network request. The CSV and README must come back byte-identical and match the csv_sha256 and readme_sha256 recorded in the dataset block; this JSON must come back byte-identical apart from its 'built' timestamp.","Recompute every headline from public/research/g-cloud-15-data-location-census-2026.csv alone, using the recompute recipe printed with each pre-registered metric, and check each percentage against the denominator printed beside it.","Check that no percentage anywhere in this file is reported on n below 10 without a small_n flag and a withheld-percentage reason.","Refetch the Digital Marketplace search facets independently and reconcile the five measures the search can answer (the United Kingdom tick, the EEA tick and the four supplier-type counts) against the detail-page census, exactly and measure by measure. They are census counts from the same catalogue on the same day.","Confirm that no percentage computed on the services asked the location questions uses 14,468 as its denominator, and that no percentage computed on the whole population uses the asked-only denominator.","Confirm the published CSV contains no email address, no telephone number and no supplier contact field, and no security-posture field.","Confirm that no country, jurisdiction or legal regime is named anywhere in the location analysis, that 'Other locations' is never glossed as any particular place, and that neither 'EU-US Privacy Shield' nor 'Rest of world' appears as an option.","Confirm that the Critical Third Parties material is labelled as a financial-services regime everywhere it appears, and that four entities are named, not three.","Rerun the resold-organisation normalisation from the published rules against the published raw strings and confirm the group counts; disagreement with the rules is a legitimate finding, silent divergence is not. The rules include the null-placeholder rule that produces 'Blank or unusable answer', so a rerun that ignores it will overstate 'Other (not a tracked organisation)'.","Confirm the named-organisation table is presented as a ranking inside the published tracked list, never as a ranking of everything suppliers typed, and that the largest untracked answers are published beside it with their counts."],"population_anchors":{"note":"These are the only measures with a whole-population cross-check outside the detail pages. The user-control question, the knowledge question and the 'Other locations' tick are not search-filterable and rest entirely on the parse, which is why the second parser exists.","measures":[{"measure":"population","detail_page_census":14468,"search_index_facet":14468,"difference":0,"matches_exactly":true,"facet_source":"count of services in the three in-scope lots"},{"measure":"ticks_united_kingdom","detail_page_census":13427,"search_index_facet":13427,"difference":0,"matches_exactly":true,"facet_source":"search filter dataStorageAndProcessingLocations=uk, lots 1a+2a+2b"},{"measure":"ticks_eea","detail_page_census":8604,"search_index_facet":8604,"difference":0,"matches_exactly":true,"facet_source":"search filter dataStorageAndProcessingLocations=eea, lots 1a+2a+2b"},{"measure":"supplier_type_not_a_reseller","detail_page_census":7354,"search_index_facet":7354,"difference":0,"matches_exactly":true,"facet_source":"search filter resellingType=not_reseller"},{"measure":"supplier_type_reseller_extra_features_and_support","detail_page_census":2820,"search_index_facet":2820,"difference":0,"matches_exactly":true,"facet_source":"search filter resellingType=reseller_extra_features_and_support"},{"measure":"supplier_type_reseller_extra_support","detail_page_census":3032,"search_index_facet":3032,"difference":0,"matches_exactly":true,"facet_source":"search filter resellingType=reseller_extra_support"},{"measure":"supplier_type_reseller_no_extras","detail_page_census":1262,"search_index_facet":1262,"difference":0,"matches_exactly":true,"facet_source":"search filter resellingType=reseller_no_extras"}],"all_match_exactly":true},"independent_parser_check":{"method":"A second parser, written from the raw HTML and using a structurally different method (mark-up discarded, page reduced to text lines, each field read by locating its label line), re-parsed a seeded random subset of services field by field. It shares no field-level regular expression and no section logic with the parser that produced the dataset. The two do share two module-level helpers: the tag-stripping regular expression and the personal-data scrub, both of which run before any field is identified.","sample_size":600,"sample_seed":20260920,"sample_frame":"all 14,468 services in the census population","fields_compared":["knows_locations","locations","user_control","user_control_present","supplier_type","resold_org_raw","resold_org_present","locations_present"],"comparisons":4800,"disagreements":0,"agreement_pct":100,"per_field":{"knows_locations":{"compared":600,"agree":600,"disagree":0},"locations":{"compared":600,"agree":600,"disagree":0},"user_control":{"compared":600,"agree":600,"disagree":0},"user_control_present":{"compared":600,"agree":600,"disagree":0},"supplier_type":{"compared":600,"agree":600,"disagree":0},"resold_org_raw":{"compared":600,"agree":600,"disagree":0},"resold_org_present":{"compared":600,"agree":600,"disagree":0},"locations_present":{"compared":600,"agree":600,"disagree":0}},"disagreement_examples":[],"rule":"Any field-level disagreement blocks publication until it is explained."},"parse_integrity":{"services_parsed":14468,"service_id_mismatch":0,"framework_not_g_cloud_15":0,"supplier_type_missing_or_unknown":0,"knowledge_missing_or_unknown":0,"unexpected_location_values":0,"personal_data_scrub_hits":0,"resold_org_present_but_blank":0},"preregistered_metrics":[{"id":"no_user_control","statement":"Services whose supplier says the buyer cannot specify where data is stored and processed.","question_as_asked":"Can users specify where data is stored and processed? (answer: No)","value_pct":27.62,"n":3996,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","alternative_denominator":{"label":"the 14,428 services whose supplier answered 'Yes' to 'Do you know where your data is stored and processed?' and were therefore asked the location and user-control questions","pct":27.7,"n":3996},"how_to_recompute":"CSV: count rows where user_control_over_location == 'No', divide by 14468.","brief_expected_pct":30.6,"tolerance_pp":1},{"id":"any_non_uk_location","statement":"Services that can store or process the buyer's data somewhere other than the United Kingdom, on the supplier's own declaration.","question_as_asked":"Where is data stored and processed? (European Economic Area (EEA) and/or Other locations ticked)","value_pct":61.39,"n":8882,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","alternative_denominator":{"label":"the 14,428 services whose supplier answered 'Yes' to 'Do you know where your data is stored and processed?' and were therefore asked the location and user-control questions","pct":61.56,"n":8882},"how_to_recompute":"CSV: count rows where location_eea == '1' or location_other == '1', divide by 14468.","floor_check":"Must be at least the EEA tick alone (8,604 = 59.47% of 14,468); a result below that floor is a parsing error.","brief_expected_pct":59.2,"tolerance_pp":1},{"id":"beyond_uk_and_eea","statement":"Services that tick 'Other locations', the only option in the schema beyond the United Kingdom and the EEA.","question_as_asked":"Where is data stored and processed? (Other locations ticked)","value_pct":38.03,"n":5502,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","alternative_denominator":{"label":"the 14,428 services whose supplier answered 'Yes' to 'Do you know where your data is stored and processed?' and were therefore asked the location and user-control questions","pct":38.13,"n":5502},"how_to_recompute":"CSV: count rows where location_other == '1', divide by 14468.","brief_expected_pct":36,"tolerance_pp":1,"no_search_side_check":"'Other locations' has no search filter, so this figure exists only on the detail pages."},{"id":"resold","statement":"Services whose supplier says it is reselling another organisation's services.","question_as_asked":"Are you reselling another organisation's services? (any of the three reseller answers)","value_pct":49.17,"n":7114,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","how_to_recompute":"CSV: count rows where is_reseller == '1', divide by 14468.","brief_expected_pct":62.3,"tolerance_pp":1,"brief_expectation_rejected":true,"rejection_reason":"The brief pre-registered 62.3%. The census finds a materially lower figure, and it is confirmed independently by the search index's own supplier-type facets, which sum to the population exactly. The pre-registered figure is reported as a disagreement and not used."},{"id":"microsoft_share_of_catalogue","statement":"Services resold from Microsoft, on the widest defensible reading of the free-text field.","question_as_asked":"Which organisation's services do you resell? (free text)","value_pct":16.12,"n":2332,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","how_to_recompute":"CSV: count rows where resold_organisation_mentions contains 'Microsoft', divide by 14468.","brief_expected":"roughly one service in five","brief_expectation_rejected":true,"rejection_reason":"The brief drafted 'roughly one service in five' (about 2,894 services). No counting rule over the free-text field reaches that, including the widest one. The claim is dropped."},{"id":"supplier_does_not_know","statement":"Services whose supplier says it does not know where the data is stored and processed. A footnote, not a headline.","question_as_asked":"Do you know where your data is stored and processed? (answer: No)","value_pct":0.28,"n":40,"denominator":14468,"denominator_label":"all 14,468 services in the census population (G-Cloud 15 lots 1a, 2a and 2b, 2026-09-20)","how_to_recompute":"CSV: count rows where knows_data_locations == 'No', divide by 14468.","brief_expected_pct":0.3,"tolerance_pp":0.2}],"brief_expectations_reconciliation":{"note":"Figures written into the study brief before the crawl, set against the census. Reported so that a checker can see what moved. These are expectations, not sources.","items":[{"metric":"user control = Yes","brief_pct":69.4,"census_pct":72.1,"census_n":10432,"denominator":14468,"verdict":"close, census higher"},{"metric":"any non-UK location","brief_pct":59.2,"census_pct":61.39,"census_n":8882,"denominator":14468,"verdict":"close, census higher"},{"metric":"resold","brief_pct":62.3,"census_pct":49.17,"census_n":7114,"denominator":14468,"verdict":"REJECTED: about thirteen points apart, and the catalogue's own facets agree with the census, not the brief"},{"metric":"supplier does not know","brief_pct":0.3,"census_pct":0.28,"census_n":40,"denominator":14468,"verdict":"agrees"},{"metric":"Microsoft share of the in-scope catalogue","brief_pct":"roughly one service in five (about 20%)","census_pct":16.12,"census_n":2332,"denominator":14468,"verdict":"REJECTED: no counting rule over the free-text field reaches one in five"}]},"things_deliberately_not_done":["No country, jurisdiction or legal regime is named in the location analysis. The schema has three options and supports nothing finer.","No comparison with G-Cloud 14: the frameworks parameter is silently ignored by the search, so the comparison cannot be made from this source.","No claim that any data physically sits anywhere. The study measures declarations.","No security-posture field is published, and no organisation is identified as insecure.","No supplier was contacted, no form was submitted, no authenticated area was accessed and nothing was scanned.","No 'first ever' claim. We found no prior published count of these fields; that is a negative search result, not proof that none exists."]},"series_and_revisions":{"is_a_time_series":false,"why":"One dated census of a live catalogue. There is no earlier run of this measurement to compare against.","revisions":"None. This is the first publication of this dataset. Any later revision will be recorded here with its date and what changed.","breaks_and_why_no_comparison_is_offered":["G-Cloud 14 to G-Cloud 15 is a framework break. The search index's frameworks parameter is silently ignored, so the previous framework's catalogue cannot be retrieved from this source and no comparison is offered.","An option under G-Cloud 13 naming a specific transfer arrangement has been removed. Any comparison of location ticks across frameworks would be comparing different option lists.","G-Cloud 15 is an open framework that reopens for new suppliers after 18 and 36 months, so the catalogue grows between snapshots. A future census will not be comparing a fixed set of services.","The search index can lag the detail pages by a short interval. Where the two disagree, both are printed in the verification block."]},"caveats":["Every figure in this study is a count of what a supplier ticked on a form. Nothing here is evidence of where any data physically sits, and no part of this study inspected, tested or measured any service.","Government's own guidance makes the same point from the other direction: 'while the vendor may offer a technical deployment in a region of your choice, there are often components of the service which are not in the same geography' (Multi-region cloud and software-as-a-service, Government Digital Service, 5 February 2025). A 'United Kingdom' tick does not mean the whole service is in the United Kingdom.","The census is a dated snapshot. The search index was walked between 2026-09-20T04:21:32Z and 2026-09-20T04:26:13Z and the 14,468 detail pages were fetched between 2026-09-20T04:33:39Z and 2026-09-20T05:57:46Z. G-Cloud 15 is an open framework under the Procurement Act 2023 that reopens for new suppliers, so the catalogue will grow and these counts will move.","The population is three of the four publicly listed lots: Lot 1a IaaS and PaaS (1,788), Lot 2a Infrastructure Software iSaaS (2,778) and Lot 2b SaaS (9,902). The whole publicly listed catalogue is 39,730 services. Lot 3 Cloud support services (25,262) is excluded because it is never asked the data-location questions: this is documented in Framework Schedule 1, in the RM1557.15 question export, and in the live search facets, which leave Lot 3 untouched when a location filter is applied.","Lot 1b (IaaS and PaaS above OFFICIAL) is asked the same location questions but is not published in the public catalogue. Framework Schedule 1 requires its service information to be treated as classified information, available to customers with a legitimate right to use it. The census therefore covers the publicly listed catalogue, not the whole framework: the lot that handles data above OFFICIAL cannot be counted from public sources, though a customer with a legitimate right to the information can see it.","The location question offers exactly three options: United Kingdom, European Economic Area (EEA) and Other locations. It names no place beyond those three, and neither does this study. 'Other locations' is the only option beyond the UK and the EEA, and nothing in the data supports reading it as any particular country or jurisdiction. An option in G-Cloud 13 that named a specific transfer arrangement is not one in G-Cloud 15; 'Rest of world' has never been one.","The questions branch. Answering 'No' to 'Do you know where your data is stored and processed?' suppresses both the location checkboxes and the user-control question, so those services are recorded as not asked, never as blank or zero. Both denominators are printed for every affected figure: all services, and only those asked.","'Organisation whose services are being resold' is free text. Answers vary in case, punctuation, legal suffix and scope, some name a product rather than an organisation, and some name several. The normalisation is mechanical, published in full and can be rerun or disputed; the concentration figures should be read as a range across counting rules, not as one number.","The table of named organisations ranks only the 26 organisations on the published pattern list, which was fixed before the answers were counted. An organisation not on that list falls into 'Other (not a tracked organisation)' however many services name it: the largest untracked answer, 'ICS.AI', is given by 146 services, more than 20 of the 26 tracked organisations. The largest untracked answers are published beside the table for exactly that reason.","The field cannot tell a reseller of a hyperscaler's own platform from a reseller of third-party software that merely runs on it. Both are counted the same way, because the question does not distinguish them.","No comparison with G-Cloud 14 is possible from this source. The search index's frameworks parameter is silently ignored: filtering to G-Cloud 14 or G-Cloud 12 returns the identical 39,730 results with identical facets. Framework membership was instead confirmed per service from the listing tag on every record.","Only two of the three location options can be filtered in the search, and the user-control and knowledge questions cannot be filtered at all. Among this study's headline measures, therefore, only the resold share has a whole-population cross-check outside the detail pages, which is why a second, independently written parser re-checked a random subset field by field.","Security-posture fields on the same pages (datacentre security standards, penetration testing frequency and approach, protecting data at rest, data sanitisation, staff and government security clearance) were read past and are deliberately excluded from the published dataset. Nothing in this study identifies a named organisation as insecure.","The supplier contact panel - contact name, telephone number and email address - was removed from every page before anything was written to disk, and a second scrub was run over every free-text field kept for the dataset. Numbers a supplier typed into a free-text answer of its own are not contact fields and were not removed from the snapshot; the scrub is what keeps them out of the published files, which contain no email address and no telephone number. The Open Government Licence does not cover personal data.","Counts of listings are not counts of money, customers or usage. A service with no buyers counts the same as one used across government.","Suppliers answer these questions themselves and are not audited on them by this study. Some answers are plainly approximate: an answer that names several organisations, or a product line rather than an organisation, is still recorded exactly as given.","No third party was contacted for this study. Everything here comes from already-published pages and documents."],"disagreements":[{"id":"resold_share","question":"What share of the in-scope catalogue is resold?","positions":[{"source":"This study's brief, pre-registered before the crawl","value":"62.3%","basis":"a pilot expectation set for a 600-service verification subset"},{"source":"Detail-page census (this study)","value":"49.2% (7,114 of 14,468)","basis":"every service's own 'Supplier type' answer"},{"source":"Digital Marketplace search facets, same day","value":"7,114 of 14,468","basis":"the catalogue's own supplier-type filters, which sum to the population exactly"}],"how_reported":"The two independent measurements of the live catalogue agree with each other and disagree with the pre-registered figure by about thirteen points. The census figure is published, the pre-registered figure is reported here, and the reseller-concentration section of the page is written from the census."},{"id":"lot_labels","question":"What are the three lots in the population called?","positions":[{"source":"This study's brief","value":"'cloud hosting' 1,788; 'cloud software' 9,902; and, wrongly, 'cloud support' 2,778"},{"source":"RM1557.15 question export and the live catalogue","value":"Lot 1a IaaS and PaaS 1,788; Lot 2b SaaS 9,902; Lot 2a Infrastructure Software (iSaaS) 2,778"}],"how_reported":"The counts are identical; the third label in the brief is wrong. Cloud support is Lot 3, has 25,262 services, is never asked the data-location questions and is excluded from the census. The correct lot names are used throughout and the exclusion is stated."},{"id":"critical_third_parties_count","question":"How many providers has HM Treasury designated as Critical Third Parties?","positions":[{"source":"This study's brief","value":"three (AWS EMEA, Google Cloud EMEA, Microsoft)"},{"source":"HM Treasury and Bank of England, 10 July 2026","value":"four: Microsoft Ireland Operations Limited, Google Cloud EMEA Limited, Amazon Web Services EMEA SARL, Oracle Corporation UK Limited"}],"how_reported":"The published figure of four is used, with the legal entity names as designated."},{"id":"framework_start_date","question":"When did G-Cloud 15 start?","positions":[{"source":"RM1557.15 agreement page (primary)","value":"6 August 2026"},{"source":"Pre-award commentary found in web search","value":"17 September 2026"}],"how_reported":"The agreement page is the primary source and is used; the disagreement is recorded here rather than resolved silently."},{"id":"search_vs_detail","question":"Do the search index facets and the detail pages agree?","positions":[{"source":"Search index facets, 20 September 2026","value":"all seven measures, as listed in the table above"},{"source":"Detail-page census, 20 September 2026","value":"the same seven figures, identical on each"}],"how_reported":"Both are printed measure by measure in the verification block. They agree exactly on every measure that the search can answer."}],"licence":{"data":"Open Government Licence v3.0","url":"https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/","attribution":"Contains public sector information licensed under the Open Government Licence v3.0.","personal_data":"The licence does not cover personal data; the supplier contact panel was removed before storage and no contact field, email address or telephone number appears in any output.","third_party_rights":"The Open Government Licence also excludes third party rights the information provider is not authorised to license. It covers the Crown-published catalogue. Short supplier-authored strings - a service name, its categories and the free-text answer naming the organisation resold - are reproduced as factual identifiers of listed services; the long supplier-authored service descriptions on the same pages were deliberately not republished.","derived_work":"Creative Commons Attribution 4.0 International (CC BY 4.0)","derived_work_url":"https://creativecommons.org/licenses/by/4.0/","derived_work_attribution":"Servnet G-Cloud 15 Data Location Census 2026, https://www.servnetuk.com/research/g-cloud-15-data-location-census-2026","derived_work_note":"Two licences apply and they are not interchangeable. The source data are Crown copyright reused under the Open Government Licence v3.0, which requires the OGL attribution statement. Servnet's own analysis, derived tables and this dataset's derived columns are licensed under Creative Commons Attribution 4.0 International (CC BY 4.0), which requires credit to 'Servnet G-Cloud 15 Data Location Census 2026, https://www.servnetuk.com/research/g-cloud-15-data-location-census-2026'. A reuser of the CSV should carry both.","corrections":"Corrections and takedown: https://www.servnetuk.com/research/corrections or webmaster@servnetuk.com."},"url":"https://www.servnetuk.com/research/g-cloud-15-data-location-census-2026"}