For years, multicloud was heralded as the great equalizer. A way to weaken the grip of hyperscale dominance and hand control back to businesses. But for all the bold claims, real-world progress has been frustratingly slow.

Despite 60 percent of businesses moving beyond single-provider setups, just 15 percent have initiated a significant data migration in the past year, according to research by Civo. The disconnect between strategy and implementation suggests that multicloud is proving difficult to execute in reality.

A risk-laden environment

At the heart of the multicloud movement is a very real concern: concentration risk. A handful of cloud giants control the majority of Europe’s infrastructure. In sectors where sensitive data is kept, that level of disproportionate control is frightening.

Data sovereignty, once the domain of IT teams, has become a strategic concern echoed in boardrooms around the world. Geopolitical tensions, from tariff threats to transatlantic regulatory disputes, have laid bare the risks of putting all your eggs in one basket, especially one based overseas. UK businesses, in particular, are now asking the difficult question: who truly owns our data, and which legal system governs its access?

There’s a growing sense among UK businesses that too much control lies in too few hands. The infrastructure behind our digital economy and the data that flows through it are increasingly concentrated among a small number of hyperscalers who call the shots.

With the CMA’s investigation into cloud industry competitiveness finished, the discomfort is only getting clearer. Unsurprisingly, business leaders are now questioning whether it's sustainable to build long-term strategies on platforms they don’t truly control.

Why multicloud adoption is faltering

The theoretical case for multicloud is compelling: diversify your providers, spread your risk, avoid lock-in. But when organizations try to translate this into action, they often hit a wall.

One of the most immediate challenges is visibility. Civo recently found that only 35 percent of organizations have full visibility into where their data is stored and governed - an oversight that directly undermines the core goal of sovereignty-driven diversification. Without a clear understanding of data location and jurisdiction, businesses face serious difficulty in meeting compliance obligations, particularly under legislation like the GDPR, which requires strict control over data transfers and residency.

Operational complexity further compounds the issue. Rather than enhancing agility, multicloud often introduces a tangle of incompatible interfaces, billing systems, performance metrics, and service-level agreements. What begins as a bid for flexibility quickly devolves into fragmentation, driving up overheads and sapping internal capacity.

Even for organizations committed to diversification, escaping the iron grip of hyperscale vendors is anything but straightforward. Restrictive licensing models and proprietary tooling make it difficult to exit entrenched ecosystems. What should be a strategic pivot becomes a costly and resource-intensive negotiation.

Hybrid cloud: bridging ambition and execution

Given these limitations, a growing number of organizations are looking toward hybrid cloud as a more viable alternative. While multicloud spreads workloads across providers, hybrid cloud focuses on unifying infrastructure across public and private cloud environments in a way that is coordinated and manageable.

Hybrid models give businesses the flexibility to maintain sovereignty over sensitive data while still leveraging public cloud capabilities when scale or elasticity is needed. This approach repositions public cloud as one component of a more adaptable architecture.

Where multicloud struggles with fragmentation, hybrid cloud emphasizes integration. The priority becomes building infrastructure that is easier to govern, more transparent in its operations, and more aligned with emerging compliance requirements.

If hybrid cloud is to succeed where multicloud has stalled, cloud providers must be willing to meet businesses halfway. That includes rethinking pricing models and giving organizations full visibility into how and where their data is handled.

Cloud strategy shouldn’t be dictated by technical limitations or vendor restrictions. Businesses need infrastructure that reflects their priorities and won’t be swept out from under them when the next geopolitical shock inevitably hits.