Ernst & Young Global Limited

United Kingdom · owned by Independent (United Kingdom) · ey.com · 30 vendors

EY is a global professional services organization providing assurance, tax, strategy and transaction, and consulting services. The organization helps clients create long-term value for stakeholders through services that provide trust through assurance and help clients transform, grow and operate.

Resilience scores

Technology vendors

Insights

Last updated 2026-01-28 · revision 10

30 direct vendors, 285 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

EY's migration readiness is technically high but operationally complex due to regulatory constraints. The organization scores highly on technical capability, utilizing cloud-native technologies (Node.js, Python, Docker) and DevOps tools (Jenkins, Git) that facilitate seamless workload migration. However, the score is constrained by significant Data Residency requirements (GDPR, NIS2, and client-specific financial mandates) which prevent a simple 'lift and shift' approach; data must often remain localized in specific jurisdictions. Additionally, there is a high degree of vendor lock-in with the Microsoft ecosystem (Azure, M365, Power BI) and heavy ERP systems (SAP, Oracle), which increases the complexity and cost of migrating away from these specific platforms. Financial stability ensures they can fund these complex migrations, but the regulatory landscape creates friction.

Compliance

6 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

EY provides ICT services and digital infrastructure support to Essential Entities across the EU and likely meets the size thresholds (50+ employees, €10M+ turnover) to be classified as an Important Entity.

EY provides critical digital infrastructure services and ICT service management to Essential Entities across the EU, potentially qualifying as an Important Entity under NIS2. As a large enterprise with significant EU operations, they likely exceed the 50+ employee and €10M+ turnover thresholds. Medium risk due to cybersecurity requirements and potential operational restrictions, though enforcement is still developing.

GDPR (source) — Assessment Required

EY is headquartered in the UK and operates extensively across EU/EEA countries, processing personal data of employees, clients, and EU residents through their audit, tax, consulting, and advisory services.

As a global professional services firm headquartered in the UK (EU/EEA) and operating across multiple jurisdictions including EU member states, EY processes extensive personal data of employees, clients, and EU residents. The firm handles sensitive financial, tax, and business information requiring strict data protection compliance. High risk due to potential fines up to 4% of global annual turnover and reputational damage in the professional services sector where trust is paramount.

HIPAA (source) — Assessment Required

EY provides services to healthcare clients in the US and may handle Protected Health Information (PHI) as a Business Associate through consulting, audit, and advisory services.

EY provides services to healthcare clients and may handle Protected Health Information (PHI) through their consulting, audit, and advisory services to healthcare organizations. Medium risk due to potential civil and criminal penalties, though HIPAA primarily applies when acting as a Business Associate to covered entities.

Financials

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report