Microsoft Walks Away from Over $3 Billion Oracle Cloud Lease Deal Over Security Compliance Concerns
N.R. Finch
Microsoft's negotiation with Oracle over a $3 billion-plus cloud-infrastructure lease collapsed because Oracle's public cloud lacks FedRAMP certification — exposing how compliance credentials, not just capacity, now gate who gets to sell compute in the AI buildout.
Why did the deal fall apart?
Microsoft planned to shift some workloads onto Oracle Cloud Infrastructure (OCI), but OCI's public cloud has not obtained FedRAMP certification — the standardized U.S. federal security framework required for any cloud service handling government data.
Oracle declined to pursue certification for its public cloud. An executive called it "a massive engineering effort"; Oracle's separate government cloud already meets the standard.
This means → the sticking point was security, not price. Microsoft serves major government clients and cannot route their data through an uncertified cloud.
Why is Microsoft shopping for compute elsewhere?
Microsoft's projected 2026 capital expenditure is $190 billion, mostly for data-center expansion — yet self-build still cannot keep pace with AI demand.
An insider summed it up: "We are looking for compute everywhere."
Microsoft already turned to Amazon to supplement capacity for its GitHub platform after service outages. In plain terms = the world's second-largest cloud provider doesn't have enough machines of its own.
Is the whole industry buying compute from each other?
Google and SpaceX recently disclosed a deal: from October 2026 to June 2029, Google will pay SpaceX $920 million per month for AI compute.
Google Cloud has also sold AI compute to Anthropic — the same company buying and selling, which signals that compute has become a tradable commodity.
This reflects a reshaping of cloud supply and demand: whoever holds spare GPU clusters sets the price.
Why does compliance suddenly matter this much?
Amazon's and Google's public clouds both hold FedRAMP certification; Oracle's does not — and that alone locked Oracle out of Microsoft's procurement shortlist.
This means → in the compute-buying frenzy, having machines is necessary but not sufficient. A provider also needs a compliance passport; without certification, it cannot even reach the negotiating table.
Oracle's spokesperson called the report's details "inaccurate" but did not specify which points were wrong, adding only that the two companies' partnership is "productive."
Content is for reference only, not financial advice.