THE BUNKER · ENTERPRISE LOCK-IN · HOW THEY KEEP YOU IN

◈ THE NUMBERS FIRST

SCALE OF THE OPERATION

$2.3T

ENTERPRISE SOFTWARE MARKET

PROJECTED 2026

2–5yr

AVG MIGRATION TIME

ONCE LOCKED IN

$150M+

AVG COST TO EXIT ORACLE

FOR A MID-SIZE ENTERPRISE

94%

ENTERPRISES REPORT LOCK-IN

GARTNER 2024

The enterprise software industry is the largest legal protection racket in the history of commerce. The product is not the software. The product is the switching cost. Every feature, every integration, every proprietary API, every "we'll migrate your data for free" offer — all of it is concrete. They're pouring while you're onboarding.

◈ THE MECHANIC · STEP BY STEP

HOW THEY GET YOU IN AND KEEP YOU

01

THE INVITATION — free tier. pilot program. no commitment. "we'll migrate your data at no cost." sales team buys your team lunch. the bunker door is wide open. nice carpet inside. good lighting.

02

THE INTEGRATION LAYER — connect your CRM. connect your ERP. connect Slack. connect email. connect SSO. "we integrate with everything." yes. they do. through their API. in their format. on their terms.

03

THE FORMAT TRAP — your data is now in their schema. their proprietary objects. their field names. export is possible in theory. in practice: CSV dumps that lose relationships, automations, history, and context. what you get out is not what you put in.

04

THE TEAM ADOPTION MOAT — your people learned the interface. built workflows. wrote documentation. trained new hires. the tool is now institutional memory. switching means retraining humans, not just systems. that's the real lock-in.

05

THE DEPENDENCY GRAPH — 40 other systems now call this one via API. your automations trigger it. your reports pull from it. your customer-facing processes depend on uptime SLAs you signed on page 47 of the MSA nobody read.

06

THE EGRESS TAX — moving data out costs money. AWS charges $0.09/GB egress. at petabyte scale that's six figures just to retrieve what's yours. they don't own your data. they just made it expensive to move.

07

THE PRICE WALK — renewal time. costs went up 30%. "market conditions." "inflation." "we've added significant platform value." your CFO runs the migration cost analysis. opts to renew. the concrete is set.

Every step is presented as a benefit. Every integration is sold as convenience. Every migration offer is reframed as partnership. The bunker is always sold as a suite.

◈ NAMED · WHO DOES IT BEST

THE ARCHITECTS OF THE CONCRETE

ORACLE

The original. Larry Ellison didn't build Oracle on great software — he built it on switching costs so catastrophic that leaving became an organizational transformation project. Support contracts that cost more than the original license. Proprietary PL/SQL that doesn't run anywhere else. "We own your database" is not a feature. it's a sentence.

SALESFORCE

Your entire revenue operation: leads, pipeline, contacts, forecasts, territories, commissions — all in Salesforce objects. Custom fields. Flows. APEX classes written by consultants who no longer work here. The average enterprise Salesforce migration takes 18 months and costs $2M+. They know this. The acquisition of Slack was not a product decision. it was an infrastructure decision. now your comms live in the bunker too.

MICROSOFT

Azure Active Directory is identity. Teams is communication. SharePoint is documents. 365 is email. Dynamics is CRM. Intune is device management. Every enterprise function, one vendor, one login, one renewal. It's not a suite. it's a gravity well. Once your identity is in Azure AD, unplugging means rebuilding authentication across your entire organization. Which no CISO will approve on a Tuesday.

AWS

200+ services. All proprietary at the edges. Lambda functions wired to SQS wired to DynamoDB wired to API Gateway wired to CloudFront. You could rebuild this in any cloud. The rebuild would take two years and require a team that doesn't exist yet. Plus egress fees to extract your own data during migration. They don't need a contract clause. They built the dependency graph for you.

WORKDAY

HR and finance. The two most politically sensitive systems in an organization. Once payroll runs through Workday, once benefits are administered in Workday, once your org chart lives in Workday — who is going to propose switching? The CHRO? The CFO? No. That's the play. put the tool where no one has the political capital to remove it.

SERVICENOW

IT workflows, ITSM, ITOM, security operations, HR service delivery. The joke in IT departments: "nobody ever got fired for buying ServiceNow." Also nobody ever left it without a two-year programme, a systems integrator, and a budget their board questioned in three consecutive audit committees.

◈ THE LANGUAGE · HOW THEY SAY IT

TRANSLATION TABLE

◈ THEY SAY

"We'll migrate your data at no cost."

Translation: we'll get your data into our format at no cost. what you'll pay to get it back out is another conversation. one you'll have in year 4 when you're already inside and the carpet is gone.

◈ THEY SAY

"We integrate with everything."

Translation: everything connects through us. we are the hub. every spoke that connects is a reason you can't remove the hub. the more integrations, the more concrete.

◈ THEY SAY

"Digital transformation partnership."

Translation: we are going to rebuild your operational layer in our architecture. you will not be able to un-rebuild it. this is called a partnership because "permanent structural dependency" doesn't test well in focus groups.

◈ THEY SAY

"Enterprise-grade. Best-in-class. Industry-leading."

Translation: nobody else in your industry is leaving either. social proof as switching cost. if all your competitors are in the same bunker, the industry analyst reports confirm you made the right choice. the concrete is industry standard.

◈ THE TELL · HOW YOU KNOW YOU'RE IN THE BUNKER

DIAGNOSTIC

Run this internally. Answer honestly.

CHECK 01

Can you export all your data — with relationships intact — in less than a week? If no: you're in.

CHECK 02

Do you have custom code (Apex, ABAP, Lambda, Glue jobs, scripts) that only runs on one vendor's infrastructure? If yes: you're in.

CHECK 03

Do multiple teams' workflows depend on one platform's uptime? If yes: they are the infrastructure, not the tool.

CHECK 04

When renewal came, did anyone seriously model the migration alternative — or did it go straight to "what's the best rate we can negotiate?" If the latter: the concrete is set.

CHECK 05

Would the person who proposed leaving get promoted or managed out? That's the real answer.

◈ THE COUNTER · WHAT ACTUALLY WORKS

HOW YOU BUILD WITHOUT A BUNKER

The alternative is not "no software." it's architecture discipline from the start.

◈ PRINCIPLE 01

Open formats at the data layer.

Postgres over proprietary databases. Standard JSON and CSV exports over vendor schemas. If you can't read your data without their client, you don't own your data.

◈ PRINCIPLE 02

Abstraction layers between your code and their API.

Never let vendor API calls live directly in your application layer. Write an interface. If you need to swap the vendor, you swap the implementation, not your entire codebase. Takes two sprints to do right. saves two years to do wrong.

◈ PRINCIPLE 03

Measure total cost of ownership including exit.

Every vendor evaluation should include a migration cost estimate on day one. If nobody will model the exit cost, they don't want you to know what it is. That tells you everything.

◈ PRINCIPLE 04

Default to boring, standard, portable infrastructure.

Boring tools have communities. Boring tools have documentation. Boring tools have competitive alternatives that keep pricing honest. Proprietary is exciting until you need to leave. Then it's a civil engineering project.

◈ THE KENSHO READ · WHAT THIS ACTUALLY IS

CALL IT WHAT IT IS

Enterprise lock-in is not a product failure. It is not a market inefficiency. It is the intended design of the system. These companies are not trying to build tools so good you stay — they are building costs so high you cannot leave.

"The goal is not to be the best option. The goal is to be the only option your procurement team can justify not choosing."

— HOW ENTERPRISE SALES IS ACTUALLY TAUGHT · 2026

The language is all benefits. The architecture is all concrete. The onboarding team is friendly. The renewal team is different. The exit clause is in section 14.3(b) of the master services agreement you signed in 2019 when you were trying to close a deal before end of quarter and the legal team said "it's standard."

It is not standard. It is a bunker. They just hired an interior designer.

The AI era is making this worse. Every "AI-enhanced enterprise platform" is training models on your operational data. Your internal documents. Your customer interactions. Your support tickets. The model they train on your data stays on their servers when you leave. You cannot take it with you. The concrete now has your fingerprints in it.