Platform Risk — When Your Business Depends on Someone Else's

Platform risk is the structural vulnerability that arises when a business's revenue, growth, or competitive position depends materially on another company's platform. The dependent company does not control the rules of the platform, the pricing of access to it, or the strategic decisions that determine its future. When the platform changes — its algorithm, its commission structure, its terms of service, or its strategic direction — the dependent company must adapt, regardless of its own preferences.

App Store Dependency

The most visible contemporary form of platform risk is dependency on major mobile operating system platforms. Companies that distribute their products or services primarily through app stores operated by platform owners face a specific structural vulnerability: commission rates, discoverability rules, content policies, and competitive positioning within the platform are all controlled by the platform operator. The dependent company's success is structurally contingent on remaining in favor with — and compliant with — a platform it cannot control.

This dependency can generate significant revenue even while creating structural risk. The financial metrics may look attractive; the structural risk is real and ongoing.

Cloud Infrastructure Dependency

Companies that rely on a single cloud infrastructure provider for critical operations face a concentration of technical and commercial dependency. While cloud providers offer contractual protections, the practical reality of deep integration — data volumes, proprietary APIs, migration complexity — creates significant switching costs that function as platform risk from the opposite direction: the cost of leaving the platform is so high that the dependency becomes structural.

Regulatory Dependency

Some businesses exist because of a specific regulatory framework that grants them access, licenses, or protection that would otherwise be unavailable. Financial institutions with specific regulatory licenses, healthcare companies relying on regulatory exclusivity, or communications companies operating under specific spectrum licenses all carry a form of platform risk: their business model depends on regulatory conditions that could change independently of their own performance.

The Defining Test

The analytical test for platform risk: remove the platform. Does the business survive in a recognizable form, serving its current customers with its current revenue model? If the honest answer is "not easily" or "not without significant restructuring," the platform risk is structural — and the company's classification in the Power Mapping framework is likely Dependent.

Platform risk does not make a company a poor investment. It changes the analytical framework for evaluating it. The key questions shift from "is the business growing?" to "is the dependency relationship stable?" and "is the company reducing its structural concentration over time?"