PricewaterhouseCoopers

United Kingdom · www.pwc.com · 1 vendor

PricewaterhouseCoopers (PwC) is a global professional services network, recognized as one of the "Big 4" accounting firms. It provides a wide array of services including assurance, tax, and advisory, aimed at addressing complex business challenges and facilitating growth for various organizations worldwide.

Resilience scores

Technology vendors

Services catalogue

5 services in catalogue across 4 categories; runs on 1 sub-vendor.

Insights

Last updated 2026-08-16 · revision 2

1 direct vendor, 34 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

PricewaterhouseCoopers exhibits high migration readiness, driven by its highly modern and cloud-centric internal technology stack. The company extensively utilizes multiple major cloud platforms (AWS, Azure, GCP), demonstrating a multi-cloud strategy that enhances flexibility and reduces reliance on a single provider. The widespread adoption of containerization (Kubernetes, Docker) and microservices architectures, along with robust CI/CD practices (GitHub / GitHub Actions), indicates a strong foundation for agile development and seamless workload migration. PwC's significant investment in and development of AI-powered platforms and solutions, coupled with its use of various SaaS solutions (Salesforce, SAP, Workday, ServiceNow), further underscores its technical agility and capacity for integrating new technologies. While the limited vendor data suggests a potential for vendor lock-in with a single vendor for one service, this is likely a localized risk rather than a systemic impediment to overall migration efforts, given the breadth of their internal tech capabilities. The lack of specified data residency requirements and detailed regulatory environment information prevents a full assessment of non-technical migration complexities, but the technical readiness is exceptionally strong.

Compliance

11 in-scope frameworks identified; showing 3.

CSRD (source) — Assessment Required

CSRD is applicable to PwC in two dimensions: (1) as a large EU-operating entity, PwC EU member firms may themselves be subject to CSRD reporting requirements; (2) as a sustainability assurance provider, PwC must be accredited to provide CSRD-required limited assurance on sustainability disclosures. Risk is MEDIUM because: (1) CSRD creates significant new business opportunities for PwC's assurance practice; (2) PwC EU member firms that meet CSRD thresholds (large companies with 250+ employees, €40M+ turnover, €20M+ balance sheet) must report under ESRS standards; (3) PwC's own sustainability reporting must comply with CSRD requirements; (4) accreditation requirements for sustainability assurance providers are still being finalized by EU member states.

Evidence: https://www.pwc.com/gx/en/services/audit-assurance/sustainability-reporting-assurance-services.html, https://www.pwc.com/gx/en/services/sustainability.html, https://www.pwc.com/gx/en/about/global-annual-review.html

SOC 2 (source) — Compliant

PwC is both a provider of SOC 2 reporting services to clients AND a consumer of cloud services (AWS, Microsoft Azure, Google Cloud, Oracle, Salesforce) that maintain SOC 2 reports. PwC's own technology platforms and managed services offerings (including PwC One, Sightline, Concourse, and other proprietary products) that process client data are subject to SOC 2 requirements. Risk is MEDIUM because: (1) PwC is a leading SOC 2 auditor itself, indicating deep internal expertise and likely strong internal controls; (2) PwC's managed services and SaaS products create SOC 2 obligations as a service organization; (3) clients increasingly require SOC 2 Type II reports from their professional services providers; (4) failure to maintain SOC 2 compliance could damage PwC's reputation and client relationships; (5) PwC's own audit practice issues SOC 2 reports, creating reputational risk if internal controls are deficient.

Evidence: https://www.pwc.com/us/en/services/audit-assurance/digital-assurance-transparency/soc-reporting.html, https://www.pwc.com/us/en/services/audit-assurance/digital-assurance-transparency.html, https://www.pwc.com/us/en/site/privacy.html

GDPR (source) — Compliant

PwC is headquartered in the United Kingdom and operates extensively across all EU/EEA member states (confirmed offices in Germany, France, Netherlands, Belgium, Ireland, Italy, Spain, Poland, Sweden, Denmark, Finland, Austria, Luxembourg, Portugal, Greece, Czech Republic, Hungary, Romania, Bulgaria, Croatia, Slovakia, Slovenia, Estonia, Latvia, Lithuania, Cyprus, Malta, and more). As a professional services firm, PwC processes vast volumes of personal data including employee data (330,000+ staff globally), client personal data (financial details, KYC data, biometric data, sensitive categories), supplier data, and website visitor data. The risk level is HIGH because: (1) PwC processes special categories of personal data (biometric, health, financial) for client engagements; (2) cross-border data transfers occur routinely across the PwC global network; (3) GDPR fines can reach €20M or 4% of global annual turnover — for a firm with ~$55B+ revenue, maximum exposure is enormous; (4) PwC acts as both data controller and data processor, creating dual compliance obligations; (5) regulatory enforcement in the EU has intensified significantly since 2021; (6) PwC's own privacy statement explicitly acknowledges EU-U.S. Data Privacy Framework adherence, confirming active cross-border data flows subject to GDPR scrutiny.

Evidence: https://www.pwc.com/us/en/site/privacy.html, https://www.pwc.com/us/en/site/data-privacy-framework.html, https://www.pwc.com/gx/en/about/office-locations.html, https://www.pwc.com/gx/en/legal-notices/pwc-privacy-statement.html, https://www.pwc.com/gx/en/about/global-annual-review.html

Financials

Three-year financials

Financial Resilience Score: 8/10

PwC demonstrates strong financial resilience underpinned by its massive global scale (~$55.4bn in FY24 revenues across 149 countries), diversified service portfolio, and membership in the Big Four oligopoly that limits competitive pressure on large-cap audit and complex advisory work. Its recurring statutory audit revenues (~34% of the mix) provide predictable multi-year cash flows, while counter-cyclical services like restructuring and tax advisory tend to offset consulting cyclicality during downturns. The partnership structure means costs (partner distributions) flex naturally with revenue, avoiding the fixed obligations that burden listed peers. However, resilience is tempered by recent adverse developments. FY24 local-currency growth of 3.7% was the slowest in a decade, driven by a global consulting slowdown. The 2024 PwC China Evergrande audit scandal resulted in a six-month suspension, a RMB 441m fine, and mass client losses, cutting China headcount from ~20,000 to ~14,000. The 2023 Australia tax-leaks scandal forced divestiture of the government consulting business. Regulatory scrutiny of audit-consulting conflicts continues in the UK and EU. Additionally, because profits are distributed annually to partners rather than retained, PwC lacks the accumulated equity war chest of listed competitors, constraining M&A capacity. Its $70bn FY28 revenue target now appears challenging.

Key strengths: Global scale of ~$55.4bn revenue across 149 territories, Diversified service mix (Assurance 34%, Advisory 41%, Tax 26%), Recurring statutory audit revenue base, Big Four oligopoly with only three peer competitors, Partnership structure allows cost base to flex with revenue, Strong brand and market position in complex advisory work, Geographic diversification across Americas, EMEA, and Asia-Pacific, $1bn investment in AI/OpenAI alliance

Risk factors: Consulting slowdown - FY24 growth slowest in a decade at 3.7% local currency, PwC China Evergrande audit scandal - six-month suspension and RMB 441m fine, PwC Australia tax-leaks scandal and forced Scyne Advisory divestment, Regulatory scrutiny of audit-consulting conflicts by UK FRC and EU, Generative AI disruption threatening traditional advisory and audit tasks, Partnership cash constraint - profits distributed rather than retained, Reputational damage from China and Australia scandals dragging into FY25, $70bn FY28 revenue target looks challenging given deceleration

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report