Cybersecurity is becoming one of the top priorities for any country. This issue is particularly acute in Ukraine, which is in an active phase of war, as Ukraine's critical infrastructure, networks, registries, and archives are constantly under threat from cyber-attacks.

In an effort to avoid a “Zero Day” scenario, the Ukrainian government has made several strategic decisions related to relocating data centres outside Ukraine, utilizing cloud services, and ensuring data protection. As a result, the cloud services market in Ukraine is undergoing rapid development, creating vast opportunities for global providers such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud. At the same time, the law requires potential providers to comply with specific regulatory requirements and standards to ensure security for Ukrainians.

Transition period and recent changes

Due to the Russian invasion, the legal process for cloud service provider registration was temporarily suspended, making it impossible to complete registration as certain requirements and mandatory document formats had not been approved.

However, on February 11, 2025, the Cabinet of Ministers of Ukraine adopted Resolution No. 154, "Certain Issues Regarding the Provision and Use of Cloud Services and/or Data Processing Centre Services", which addressed existing legal gaps, introduced a transition period, and structured the registration procedure for cloud service providers.

This resolution has now made it possible to officially register as a cloud service provider. Until December 31, 2025, government institutions can still procure cloud services from companies that have not yet been registered. However, after the transition period ends, registration will become mandatory for working with government agencies and critical infrastructure facilities.

What is the regulatory framework for cloud service provider registration in Ukraine?

Ukraine has enacted the Law "On Cloud Services" which regulates the activities of cloud service providers. In order to have access to public procurement and provide services to critical infrastructure, you need to be included in the register of cloud service providers. The registration process requires submission of the following documents:

What are the security and technical compliance requirements for registered cloud service providers?

In order to legally operate in the Ukrainian cloud services market, providers must:

Benefits for Global Cloud Service Providers

Registering as a cloud service provider in Ukraine opens significant opportunities for providers. After registration, a company gains the right to provide services to government agencies and critical infrastructure enterprises. We believe that in the beginning of 2026 only few companies will be included in the register of cloud service providers. As a result, registration as a cloud service provider will provide a serious competitive advantage during the first half of 2026, enabling the company to establish a strong position in the Ukrainian market. In fact, the resolution has created the preconditions for a first-mover advantage in this area. Also, for conservative private entities holding official status strengthens a company's reputation as a reliable partner.

Conclusions

The Ukrainian cloud services market presents promising opportunities for global providers, particularly in the context of digitalizing public services and the rapid growth of the IT sector. However, to operate effectively, companies must comply with Ukrainian legislation, particularly regarding registration, cybersecurity, and infrastructure localization.

Since the registration procedure will take from 6 to 12 months under favourable circumstances, we are convinced that work in this area should begin immediately.

Companies that adapt to the new regulations in a timely manner will gain significant competitive advantages and secure a foothold in one of the most dynamic markets in Eastern Europe.

Authors:

Oleksandr Melnyk, Partner, Head of Corporate Law and M&A Practice at GOLAW, Attorney at Law

Nazarii Zeliak, Associate at Corporate Law and M&A Practice at GOLAW

Vladyslava Zaichko, Paralegal at Corporate Law and M&A Practice at GOLAW