The INTEL  

The AI and cloud capacity your vendors sell increasingly depends on other companies’ ability to borrow. Oracle and Anthropic now both disclose that if third parties can’t get financing, capacity they have contracted for could be delayed, cost more or not arrive at all. Alphabet discloses $75.7 billion of backstops to support data-center build-outs.

What the filings say:

  • Oracle: it depends on third parties to build some of its data-center capacity, and “their inability to obtain financing, complete construction on schedule or manage construction cost overruns could delay the availability of data center space or increase our costs.”
  • Anthropic: some of its compute providers “depend on third-party financing or credit support to acquire chips and develop capacity, and if such financing or support becomes unavailable or more costly, contracted capacity may be delayed, repriced, reduced, or not delivered.” Part of one chip-equipment lease has already been assigned to “a newly formed special purpose financing entity.”
  • Alphabet: $75.7 billion of backstop obligations relating to data centers, and $22.8 billion of financial guarantees to help counterparties buy long-lead equipment for future power agreements.

Disclosure: FIR Risk uses AI models from several providers, including Anthropic.

Why It Matters  

Third-party risk reviews usually look at the vendor’s own financial health. The filings show a longer chain behind AI and cloud services: your vendor, the companies building its data centers and supplying its chips, and the lenders and financing vehicles funding them.

A strong vendor can still be exposed if that chain breaks. In Anthropic’s words, the result would not only be delay: capacity could be “repriced.” For customers, that shows up as slower availability or higher prices, even if the vendor itself stays healthy.

This is a fourth-party risk, and most reviews don’t ask about it yet.

What To Do — One Key Action  

For your most critical AI and cloud services, add one question to the vendor review: does the capacity serving us depend on other companies’ financing, and what happens to our service and price if that capacity is delayed or repriced?

MITRE ATT&CK  

  • Not technique-specific. This INTEL is about technology supply chain and fourth-party risk.

Learn More  

Powered by FIR Risk Platform — AI-driven threat intelligence for enterprise risk leaders.