ESMA Compliance Table for Cloud Outsourcing Guidelines

Detected March 17th, 2026

Summary

The European Securities and Markets Authority (ESMA) has published a compliance table related to its guidelines on outsourcing to cloud service providers. This document serves as a reference for financial entities to assess their adherence to the existing guidelines.

View original document View source feed page

What changed

The European Securities and Markets Authority (ESMA) has released a compliance table intended to assist financial entities in verifying their adherence to the ESMA Guidelines on outsourcing to cloud service providers (Reference ESMA65-294529287-4824). This table acts as a checklist, detailing specific requirements from the guidelines and providing a framework for demonstrating compliance.

Financial entities, particularly those in the banking, investment, and insurance sectors, should review this compliance table to ensure their outsourcing arrangements with cloud service providers meet the stipulated requirements. While this document is a reference tool and not a new regulatory obligation, it facilitates the internal assessment and reporting processes related to cloud outsourcing risks and compliance.

What to do next

Review the ESMA compliance table for guidelines on outsourcing to cloud service providers.
Assess current cloud outsourcing arrangements against the requirements detailed in the compliance table.
Document adherence to the guidelines for internal records and potential supervisory review.

Source document (simplified)

Compliance table on the guidelines on outsourcing to cloud service providers

Reference ESMA65-294529287-4824 Section Digital Finance and Innovation Guidelines and Technical standards Type Compliance table Main Document
ESMA65-294529287-4824 Compliance table on the guidelines on outsourcing to cloud service providers (EN)
Style ESMA document