Enterprise Switching CostsWide moat

Microsoft (MSFT) — moat facet

The moat is under the customer, not in front of them — ripping Microsoft out of an enterprise is rebuilding the building's plumbing while everyone keeps working.

Microsoft's deepest moat is inertia — the good kind, the kind that works in the owner's favor. A large company runs its email, its files, its logins, and a great many of its line-of-business applications on Microsoft's stack, and every year of use ties another knot. The result is a switching cost so high that migrating off is not experienced as a purchasing decision at all. It is a multi-year, high-risk, high-disruption project with no obvious upside for the executive who would have to champion it, and considerable career risk if it goes wrong. So, overwhelmingly, it simply does not happen.

Commercial revenue under contract but not yet delivered, at 30 June ($B)$224BFY2023$269BFY2024$368BFY2025$678BFY2026Forms 10-K FY2023-FY2026, commercial remaining performance obligation
Three times bigger in three years: customers are not renewing Microsoft one year at a time any more, they are signing away the rest of the decade.

The single most powerful thread in that knot is identity. Active Directory, and its cloud successor Entra, is the system that decides who inside a company may log in to what1 — and once an organization's entire notion of 'who its people are and what they may touch' lives inside Microsoft's identity system, the company is bound in a way that touches every application it runs. Owning the login is very nearly owning the enterprise, because every other piece of software must ask Microsoft's system who the user is before it does anything at all.

Then there is data gravity, a quieter but relentless force. Years of documents, emails, and records accumulate inside Microsoft's applications and storage, and data, once it settles in a place, exerts a pull on everything around it: the new tool a company buys must work with where the data already lives, which usually means it must work with Microsoft. Each new integration deepens the entanglement, until the stack is woven into a thousand distinct workflows that no one fully maps and no one dares disturb.

The depth of that integration is worth picturing concretely, because it is where the abstraction of a 'switching cost' turns into a wall you can feel. A large enterprise does not merely use Microsoft's programs; it has wired them into custom applications, automated reports, security policies, compliance workflows, and the daily muscle memory of tens of thousands of employees. A spreadsheet feeds a macro that feeds a database that feeds a report an executive reads every Monday, and every link in that chain assumes Microsoft. To pull the foundation out from under all of it is not one decision but ten thousand small ones, each carrying its own risk of something quietly breaking — which is precisely why the migration is forever postponed to a someday that never quite arrives.

The commercial consequence is a customer who renews a dependency rather than reconsiders a choice. When contract time comes, the enterprise is not soberly evaluating alternatives and weighing Microsoft against a rival on the merits. It is renewing something it cannot practically live without, and it knows it, and Microsoft knows it. That is what lets the company raise prices and add products with a steadiness that would be reckless in almost any other business — and it is why, of all the moats a software company can dig, being the thing that is simply too embedded to remove is the most comfortable position of all.

Moat trajectory: Widening

Widening. Every year more of a company's identity, data and workflow lives inside Microsoft's fabric — Entra ID for logins, Azure and Fabric for data, Teams and Office for daily work — and each addition makes leaving harder. Commercial remaining performance obligations rose 84% to $678 billion, which is another way of saying customers keep signing longer, bigger commitments: the weighted average duration is now about 2.3 years, and only 30% is due within twelve months against 45% three years ago. The tar pit only gets stickier, and deeper.

The number that tests this moat
Reported
Commercial remaining performance obligation
$678B at 30 June 2026, +84%

Contracted revenue Microsoft has not yet delivered — the clearest single measure of how much of the future is already signed. It grew almost five times faster than revenue this year, so the question has shifted from whether customers commit to whether Microsoft can deliver what they committed to. Watch the share due within twelve months.

Source: Microsoft, Q4 FY2026 earnings release ↗
Aspects of the moat
⚠ Threats to the moat
References
  1. ReportedActive Directory and its cloud successor Entra ID are Microsoft's enterprise identity layer — the login gate this page describes.
    Microsoft — Active Directory / Entra ID (enterprise identity & single sign-on; capable tiers included in Microsoft 365 plans) — Current product documentation · publ. 2023–2026 · source ↗
Sources
Generated September 22, 2026