Industry Findings: Tightening regulatory and governance baseline changed SaaS procurement and deployment expectations in the Philippines. The National Privacy Commission issued Circular No. 2023-06 in Mar-2024, clarifying security requirements for personal data and setting stricter breach-notification modalities and processor responsibilities. That non-vendor development prompted procurement teams to require demonstrable security artefacts, formal DPIA outputs, and in-product consent management as checklist items for shortlisted suppliers. Architects responded by partitioning regulated datasets into local enclaves and by deploying policy-driven telemetry to support audit requests and regulator inquiries. Pilots that lacked packaged compliance evidence were paused for additional legal review, while suppliers that published clear data-flow diagrams, breach-playbooks, and documented processor obligations moved faster through procurement gates and into enterprise proof-of-concept stages.
Industry Player Insights: Across Philippines sector, many companies are active; some include PLDT, Globe, Sprout Solutions, and Xurpas etc. Our assessment shows telco-led cloud modernisation and hyperscaler partnerships reshaped vendor go-to-market plays in 2023–2025. PLDT and Smart accelerated cloud modernisation with Amdocs-led AWS migrations that entered a multi-year phase in Sep-2023, which made vendor consortia offering AWS-backed managed services more attractive for large enterprise transformations. Globe strengthened its AI-and-data platform posture with Google Cloud and Amdocs collaborations in 2024, which pushed local SaaS buyers to prefer packaged analytics stacks with partner-managed security and low-latency integration options. The consequence: buyers increasingly favour supplier bundles that combine local telco delivery, compliance artefacts, and hyperscaler-backed operational runbooks to reduce procurement friction for regulated and large-scale SaaS deployments.