Leadership1 distinct publisher3 min readPublished
Two surveys with different respondents produce the pairing executives now quote: 94 percent worry about lock-in, 6 percent think they could switch. Treating exit like disaster recovery gives that worry an owner and a price.
The Board Room · Leadership desk

Compiled by The Board RoomSomething wrong?How this is made
An RTO is a promise. Someone owns it, funds it, and gets asked afterwards why the restore ran past the number. Time-to-exit, as Madhura Maskasky defines it, is an estimate: the elapsed time from the decision to leave a vendor to full operational independence on an alternative, reported next to RTO and RPO [6]. That distinction decides whether the idea survives a planning cycle, because a target has a funded owner and an estimate has a slide. The proposal only does work if a named executive commits to a figure for the two or three platforms that would hurt most and defends it the way availability figures have been defended for twenty years [11].
The 94-and-6 pairing is the engine of the argument, and it needs careful handling. The Parallels survey covered 540 IT professionals [1]; the Zapier survey covered 542 enterprise executives [2]. That is 1,082 respondents in total [17], across two instruments, with no respondent asked both questions [18]. Subtract one figure from the other and you get an 88-point spread [16] between a concern measured in one population and a confidence measured in another. It supports the claim that worry is broad and confidence is thin; it does not show any single organisation reporting both, and the version of that slide that reaches a board deck will be stronger than the data beneath it.
The tradeoff sits in the architecture, and the source states it more plainly than most vendor essays do. The discipline Maskasky recommends is to never call a proprietary endpoint when a standard one exists [9], to federate identity through external providers over protocols such as SAML 2.0 rather than a platform's internal model [14], and to keep operational state out of proprietary disk images, backup formats and orchestration schemas [15]. Each of those is a decision to decline part of what you are paying the vendor for. The cost lands on platform engineering every quarter; the benefit arrives once, if it arrives.
A skeptic on the infrastructure team would put it as an insurance premium against an event nobody can schedule. The answer in the source is that the event is already happening and simply arriving unbudgeted: a Swfte AI analysis found 57 percent of IT leaders spent more than $1 million on platform migrations last year [4], which Maskasky attributes to exit readiness never having been quantified in advance [13]. The second answer is that the leverage does not require an exit at all. A defensible number changes the negotiation before renewal [12], which is the part procurement can bank without moving a single workload.
Whose interest this serves is worth stating: Maskasky is co-founder and chief product officer at Platform9, a private cloud platform company [5], and an argument that hyperscaler dependence is an unmeasured reliability gap is an argument that sells private cloud. The mechanism is still testable independently of the messenger. The drill he describes is deliberately small: pick one representative workload, run the migration end to end in a test environment, measure the time and effort, and write down what broke [10].
That is the sequencing point. A drill this quarter costs a team a sprint and produces one grounded number; next quarter that number either gives the renewal conversation a floor or reveals that the estimate the organisation has been carrying was never more than a guess. Either outcome is cheaper than discovering the figure during an acquisition or a price change [19].
Ranked by verification strength, evidence, and original report placement.
A 2026 Parallels survey of 540 IT professionals found that 94% of organizations are concerned about vendor lock-in.
A Zapier survey of 542 enterprise executives found that only 6% believe they could switch their primary technology vendor without material operational disruption.
Madhura Maskasky is the co-founder and Chief Product Officer at Platform9, a private cloud platform company.
Maskasky proposes a metric called time-to-exit: the elapsed time from the decision to leave a vendor to full operational independence on an alternative, and argues it belongs alongside RTO and RPO in infrastructure risk reporting.
The article names four architectural patterns that determine exit readiness: interface abstraction, portable state, identity decoupling and exit drills.
The stated interface-abstraction discipline is to never call a proprietary endpoint when a standard one exists, so that the underlying platform can change without rewriting dependent systems.
Distinct publishers with included, body-backed reporting in this cluster.
forbes.com
1 article · August 28, 2026
Follow any of these and your For You feed starts watching them — no settings page required.
product
The real block on a Big Tech exit is a five-year signature, not a strategy paper1 distinct publisher
leadership
The AI bill nobody reconciles: cost per finished task, not per million tokens1 distinct publisher
invest
Designation day: your cloud vendor now answers to three regulators, and you still answer for it1 distinct publisher
invest
A CEO's $1,000 weekend, and the auto-renew setting that made it possible1 distinct publisher
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
One byline carries every number
Four statistics hold the argument up — Parallels' 540 IT professionals, Zapier's 542 executives, an undated Gartner risk ranking, and a 57%-spent-over-$1m figure credited to Swfte AI — and all four reach the reader through the same Forbes contributor post, none linked to a primary study. The reliability groundwork is solid and uncontroversial, and the architectural prescriptions are specific enough to act on, but specificity is not evidence: no measured migration, named customer or published exit estimate appears anywhere in this reporting.
No measured instance yet
Not one organization in this reporting has run an exit drill, produced a time-to-exit number, or filed one in a risk report. What circulates is the survey pairing, not the metric; the proposal arrives with a methodology and no reference customer, which leaves us nothing to count.
Framing runs ahead of the sourcing
The overstatement isn't in the architecture, it's in the setup. Two unrelated surveys — one asking IT staff whether they worry, the other asking executives whether they could move — are placed 88 points apart as if they described one organization catching itself out, when no respondent in either sample answered both questions. From that pairing the piece steps to a board-level metric alongside RTO and RPO, a claim that would need at least one organization publishing the number. The exit drill is the part that could close this gap, and it is the part nobody has yet performed.
The remedy is also the product
The disclosure is the first line of the story and also its central tension: Maskasky co-founded Platform9 and runs product there, and Platform9 sells private cloud to organizations that have concluded their current provider's pricing or roadmap is no longer theirs to control. 'Measure how long it would take you to leave' is a sound engineering discipline and a sales qualification question in the same breath. It ran in Forbes' contributor council rather than its newsroom, so the byline is the vetting — and the two surveys quoted at the top come from software vendors with their own interest in how enterprises talk about dependency.
Clear on what was argued, blind on whether it holds
We know precisely what was proposed and who benefits if it catches on — the text is explicit and the affiliation is stated up front. Beyond that the ground gives way: one publisher, one interested author, no primary links behind any figure, and a central proposal that is untestable by construction, since a metric nobody has published cannot yet be checked against practice.