Platform lock-in is dependence on one vendor’s system so that moving data, workflows, or backups elsewhere becomes difficult or costly. It often happens when content is stored in proprietary formats, kept behind an app-only interface, or made available only through links instead of exportable files.
In cyber security, lock-in matters because availability and recovery depend on the vendor’s choices. If a service is retired, an account is disabled, or an API changes, users may lose access to their own data even without a breach. Attackers also benefit when organizations cannot easily fail over to another system during ransomware, outages, or supply-chain incidents. Defenders reduce this risk by using open formats, regular offline backups, retention controls, and tested export procedures so critical records remain usable outside one platform.