Help & ContactMarketplaceCommunityDEENDEENDiscoverSolutionsIndustriesHealthcarePublic SectorScience and researchAutomotiveMedia and broadcastingRetailUse CasesArtificial intelligenceHigh Performance ComputingBig data and analyticsInternet of ThingsDisaster RecoveryData StorageTurnkey solutionsTelekom cloud solutionsPartner cloud solutionsSwiss T Cloud PublicReferencesProductsCloud ServicesRoadmapRelease NotesService descriptionCertifications and attestationsCloud as a ServiceConsulting & MigrationManaged ServicesBenefitsSecurity/GDPRSovereigntySustainabilityOpenStackMarket leaderBusiness NavigatorPricesPricing modelsComputing & ContainersStorageNetworkDatabase & AnalysisSecurityManagement & ApplicationsPrice calculatorResourcesPartnerCIRCLE PartnerTECH PartnerBecome a partnerAcademyTraining & certificationsCommunityStudies and whitepaperWebinarsBusiness NavigatorMarketplaceDiscover appsBecome a sellerNewsBlogFairs & eventsSuccess StoriesSupportSupport from expertsAI chatbotShared ResponsibilityGuidelines for Security Testing (Penetration Tests)Mobile AppHelp toolsFirst stepsTutorialStatus DashboardSwitch of cloud providerFAQTechnical documentationHelp & ContactMarketplaceCommunity

 Fast & Reliable:

Contact our support

Book now and claim 250 € starting credit
DiscoverSolutionsIndustriesUse CasesTurnkey solutionsSwiss T Cloud PublicReferencesProductsCloud ServicesCloud as a ServiceBenefitsBusiness NavigatorPricesPricing modelsPrice calculatorResourcesPartnerAcademyMarketplaceNewsSupportSupport from expertsHelp toolsTechnical documentation
  • Fast & Reliable:
  • Contact our support
Book now and claim 250 € starting credit
 

Cloud for banks, insurance companies and financial service providers

For banks, insurance companies, financial service providers, FinTechs and InsurTechs that want to process sensitive data securely, scale digital applications flexibly and reliably meet regulatory requirements.

Request consultation now
Modern office high-rises from the financial sector, shot from a frog's perspective, surrounded by clouds in magenta. On the glass façade of one building, a euro symbol is visible.
 
 

How do you modernize your IT without losing security and regulatory control?

Digital business models, cloud banking, AI applications and data-driven services are fundamentally transforming banks, insurance companies and financial service providers. Customers expect digital services in real time, while new competitors are bringing innovations to market faster and faster. At the same time, regulatory requirements are increasing through DORA, MaRisk and other BaFin requirements, meaning requirements relating to data processing, access rights, operational resilience and governance must be met. Complex legacy systems and historically grown IT landscapes further complicate digital transformation. We support you in setting up your IT in a legally compliant and independent manner.

 
 

The highest standards
Your benefits with T Cloud Public

As a regulated KRITIS ICT company that is itself audited by the European Supervisory Authorities (ESA), we are familiar with the high requirements for security, compliance and resilience. We personally support you in your cloud transformation and offer with T Cloud Public a sovereign and comprehensively certified cloud solution for banks and insurance companies.

European cloud for regulated financial companies

T Cloud Public is subject solely to EU jurisdiction (no US CLOUD Act) and is operated in highly secure twin-core data centers in Germany and Europe. You retain full control and data sovereignty.

 

Support with DORA and compliance

The Financial Addendum supports regulated companies in contractually mapping relevant DORA requirements and creates transparency in interaction with your governance and risk management.

Proven security and high availability

BSI C5 Type 2 and numerous ISO certifications demonstrate high standards for information security, data protection and business continuity for the reliable operation of critical applications.

Powerful cloud services

From compute and storage to containers, databases and AI: T Cloud Public offers you a comprehensive portfolio of powerful cloud services that can be scaled flexibly.

Open technologies instead of dependencies

Open technologies such as OpenStack, Terraform and standardized APIs reduce vendor lock-in effects and enable flexible integration into existing IT landscapes.

Personal contacts and managed services

Benefit from experienced experts who know your regulatory requirements and personally support you in your sovereign cloud transformation.

 
 

Our certifications and security standards

  • GDPR-compliant data processing
  • Support for regulatory requirements in the financial sector (including DORA, MaRisk and BaFin requirements)
  • Encrypted data transmission
  • Digital sovereignty through operation in European data centers
  • Zero-trust architecture
  • BSI C5 Type 2 attestation
  • ISO/IEC 27001 certified
To our certificates and attestationsTo our security standards
 
 
 

Strengths that convince
Choose a leading cloud from Europe

Independent analysts rate T Cloud Public as a leading European cloud platform. Benefit from a broad service portfolio, modern AI services and an established cloud ecosystem for your digital transformation.

Tablet and smartphone displaying the Forrester Wave™ report "Public Cloud Platforms in Europe, Q3 2024" – T Cloud Public named a Leader.

Recognized by analysts and specialist media

  • Forrester Wave™: Leader in Europe (Q3 2024)
  • ISG Provider Lens™: Leader in German market
  • iX report 2025: Highest score in test
  • IT Awards: Gold "Sovereign cloud"
View all awards
 
 
 
 

Industry segments
Cloud Computing for banks, insurance companies and financial service providers

Banks, insurance companies and financial service providers face different challenges. 
Find out how T Cloud Public can support you in the respective areas.

Banks and cloud banking

Cloud solutions for banks and cloud banking

Banks must continuously develop digital services without compromising stability, security or regulatory control. At the same time, modern cloud applications meet historically grown core banking systems that often cannot be replaced in the short term. Cloud computing for banks must therefore enable both: innovation and controlled operation of existing applications.

With T Cloud Public, cloud solutions can be gradually integrated into existing IT landscapes. New applications can be developed cloud-natively, while business-critical systems remain connected in a controlled manner. This gives banks the foundation for a secure and flexible digital transformation.

 

Typical requirements

Suitable use cases

  • High availability of digital banking services
  • Secure segmentation of networks and tenants
  • Controlled connection of core banking and specialist systems
  • Strong identity and authorization management
  • Traceable logging of administrative activities
  • Automated development, testing and release processes
  • Defined recovery time objectives and data loss tolerances
  • Controllable provider and platform dependencies
  • Transparent operating and accountability models
  • Digital banking and service platforms
  • B2B credit and financing portals
  • API platforms and open banking interfaces
  • Development and test environments
  • Digital credit and application processes
  • Payment-related applications
  • Document and object storage
  • Hybrid extension of existing data centers
  • Backup and disaster recovery
  • Databases for banking and financial applications

Your benefits with T Cloud Public

Through comprehensive certifications, documented security processes and special agreements for the financial sector, T Cloud Public supports banks in implementing regulatory requirements more efficiently and more easily meeting audit, compliance, risk and resilience requirements.

T Cloud Public provides scalable infrastructure and platform services for classic banking applications and modern cloud banking solutions. Virtual machines, bare metal, containers, databases as well as network and storage services can be flexibly combined and adapted to different regulatory requirements.

Thanks to open technologies such as OpenStack, Terraform and standardized interfaces, banks can gradually modernize existing applications while reducing the risk of vendor lock-in.

 

Request consultation for cloud computing for banks now
Online banking and digital customer services
Schwarzes Icon mit Fingerabdruck und Geldkarte

Cloud solutions for online banking and digital customer services

Online banking applications must be reliably available at all times – even during high traffic volumes or short-term load peaks. At the same time, customers expect fast loading times, mobile services and digital offerings that are continuously expanded. For banks this means: applications must scale flexibly without compromising security, performance or regulatory requirements.

With T Cloud Public, banks create a powerful cloud infrastructure for modern online banking services. Cloud applications can be deployed flexibly, developed in an automated manner and securely integrated into existing banking systems. This creates digital customer services that combine high availability with short development cycles.

 

Typical requirements

Suitable use cases

  • Flexible scaling for high or short-term increasing access volumes
  • Secure authentication and authorization
  • Protection of publicly accessible applications and interfaces
  • Separate development, testing and production environments
  • Continuous monitoring and centralized logging
  • Low latency and stable response times
  • Automated deployment of new software versions
  • Defined emergency and recovery procedures
  • Online banking portals
  • Mobile banking backends
  • Self-service and customer portals
  • Digital account and credit applications
  • Notification and document services
  • API gateways
  • Authentication services
  • Development and test platforms
  • Containerized microservices
  • Load and performance tests

Your benefits with T Cloud Public

Through comprehensive certifications, documented security processes and special agreements for the financial sector, T Cloud Public supports providers of digital banking solutions in efficiently implementing regulatory requirements while simultaneously providing secure, highly available and scalable digital services.

Compute, container, network and database services enable the flexible operation of modern online banking applications. Open APIs, cloud technologies and automated deployment processes support the rapid further development of digital applications and create the necessary flexibility for new customer services.

T Cloud Public is suitable for both standalone online banking portals and for the controlled extension of existing cloud banking landscapes.

 

Request consultation for online banking and digital banking services now
Insurance companies
Schwarzes Icon mit Hochhaus

Cloud solutions for insurance companies

Insurance companies face the challenge of continuously expanding their digital services while securely managing large volumes of sensitive customer, policy and claims data. Modern insurance applications must respond flexibly to seasonal peaks in demand, support new digital products and reliably meet regulatory requirements. Cloud computing provides the necessary flexibility and creates a powerful foundation for the digital transformation of the insurance industry.

With T Cloud Public, insurance companies can gradually modernize their existing IT environments without completely replacing proven core systems. Scalable cloud solutions increase operational efficiency, reduce the time required to deploy new applications and provide the technical foundation for innovative insurance services.

 

Typical requirements

Suitable use cases

  • Flexible scaling during loss events and load peaks
  • Secure processing of personal insurance data
  • Integration of policy, contract and claims systems
  • Support for different database and licensing models
  • Traceable storage of relevant documents
  • Stable performance for customer service and brokers
  • Controlled data transfer between internal and external systems
  • Defined recovery and emergency procedures
  • Separate development, testing and production environments
  • Digital customer and broker portals
  • Claims reporting and claims processing
  • Policy administration and contract management
  • Service and assistance applications
  • Document management and archiving
  • Tariff calculation and pricing
  • Actuarial calculations
  • Data platforms for policy and claims data
  • Building highly available infrastructures as well as backup and disaster recovery
  • Development and test environments for insurance software

Your benefits with T Cloud Public

Through comprehensive certifications, documented security processes and special agreements for the financial sector, T Cloud Public supports insurance companies in efficiently implementing regulatory requirements while securely operating digital customer services, core applications and data platforms.

T Cloud Public provides scalable compute, storage, network and database services for insurance companies. Instead of permanently maintaining their own infrastructure, the required cloud resources can be obtained flexibly, redundantly and cost-efficiently. This allows load peaks to be absorbed and services to be operated reliably.

Open cloud technologies facilitate the integration of existing applications and create the flexibility to provide new digital insurance offerings economically.

 

Request consultation for cloud solutions for insurance companies now
Financial service providers, FinTechs and InsurTechs
Schwarzes Icon mit Hochhaus

Cloud infrastructure for financial service providers, FinTechs and InsurTechs

Financial service providers, FinTechs and InsurTechs often develop new digital applications within short innovation cycles. At the same time, banks, insurance companies and other financial institutions expect traceable security measures, transparent operating models and a cloud infrastructure that reliably supports regulatory requirements. Modern cloud solutions must therefore combine flexibility, security and compliance.

T Cloud Public offers financial service providers an open cloud platform for the development, deployment and operation of digital financial applications. Compute, storage, containers, Kubernetes, databases and networks can be combined flexibly and provisioned in an automated manner. This creates scalable cloud solutions for new digital business models as well as a powerful foundation for digital transformation.

 

Typical requirements

Suitable use cases

  • Automated and reproducible deployment of new applications
  • Clearly separated customer environments
  • Secure and documented interfaces
  • Scalable container and platform services
  • Transparent inclusion of subcontractors
  • Support for regulatory information and control rights
  • Central monitoring and logging
  • Portable cloud architectures
  • Flexible billing of development and production resources
  • Open APIs for modern cloud technologies
  • Banking-as-a-Service platforms
  • Insurance-as-a-Service offerings
  • SaaS solutions for financial institutions
  • Identity and verification services
  • KYC and AML applications
  • Receivables and credit management
  • Digital contract and signature processes
  • API-based financial services
  • Customer platforms for FinTechs and InsurTechs
  • Cloud-native development and DevSecOps

Your benefits with T Cloud Public

Through comprehensive certifications, documented security processes and special agreements for the financial sector, T Cloud Public supports financial service providers, FinTechs and InsurTechs in taking regulatory requirements into account from the outset and providing innovative digital financial services securely, scalably and in a compliant manner.

The open cloud infrastructure based on OpenStack, standardized APIs, Terraform and Infrastructure as Code facilitates automation and reduces dependencies on individual providers. The Financial Addendum additionally supports regulated companies in contractually implementing relevant DORA requirements.

This creates cloud solutions that combine innovation, efficiency and regulatory security.

 

Request consultation for cloud platforms for financial service providers now
Data platforms, risk analyses and AI
Schwarzes Icon mit Cloud-Umriss und Datenbankmodul

Cloud solutions for data platforms, risk analyses and AI

Banks, insurance companies and financial service providers process large amounts of transaction, market, risk and customer data every day. At the same time, requirements for real-time analyses, AI applications and data-based decisions are growing. Cloud computing creates the foundation to provide computing power and storage flexibly – exactly when they are needed.

With T Cloud Public, powerful data platforms, analytics environments and AI applications can be operated economically. Cloud resources can be scaled flexibly and support both short-term simulations and permanently available analytics and AI platforms.

 

Typical requirements

Suitable use cases

  • High computing power for complex models and simulations
  • Parallel processing of large amounts of data
  • Secure merging of different data sources
  • Controlled access to sensitive analysis and company data
  • Reproducible development and analysis environments
  • Flexible scaling of compute and storage resources
  • Separation of development, testing and production systems
  • Continuous monitoring of resources and costs
  • Secure storage of structured and unstructured data
  • Credit, market and liquidity risk models
  • Scenario analyses and stress tests
  • Actuarial simulations
  • Fraud and anomaly detection
  • ESG data platforms
  • Regulatory and internal reporting
  • Machine learning models
  • Generative AI with company data
  • Portfolio and forecast calculations
  • Temporary HPC clusters

Your benefits with T Cloud Public

T Cloud Public provides compute, storage, database, container, big data, AI and high-performance computing services for data-intensive applications. Companies can scale analytics platforms flexibly, develop new AI applications and use computing capacity as needed without maintaining excess capacity on a permanent basis.

This enables powerful cloud solutions for data analytics, risk and fraud detection, ESG reporting and modern AI applications in the financial sector.

 

Request consultation for data platforms, analytics and AI now
 
 
 
3D female figure holding a padlock next to the text "European Way of Cloud" against a colourful magenta and green background.

White paper: The European way of cloud

Discover current market data, customer examples and the most important success factors for using sovereign cloud solutions.

Download white paper European way of cloud now
 
 
 

Your path to the secure cloud
For banks, insurance companies and financial service providers

Depending on your requirements and your cloud expertise, we offer you different ways into our cloud: from independent self-service through cloud-based complete solutions to the analysis and strategic realignment of your IT and cloud infrastructure. Find your ideal entry point into our cloud.

 
Graphic featuring the text “Cloud credit €250” on an orange, magenta, and purple gradient, with magenta stars.

Get started now – with 250 € cloud credit

Provide your cloud resources flexibly and easily via self-service. With 250 € starting credit, you can get started right away, implement initial projects and test our cloud.

Register now
Graphic showing the text "Marketplace" with a shopping bag icon featuring a cloud symbol on a magenta gradient background.

Obtain complete solutions from our marketplace

Expand your IT flexibly with sovereign cloud-based solutions for the finance and insurance sector – including secure identity & access management for customer data, digital signatures, document management as well as automation and LLM services and much more. We will be happy to advise you on finding the right solution for your needs.

Discover marketplace now
 
 

Cloud assessment and strategy for your sovereign cloud transformation

The introduction of a cloud solution begins with a thorough analysis of your business, technical and regulatory requirements. Together we develop a cloud strategy that combines security, compliance and economic efficiency and accompanies you from initial planning through to secure operations.

1. Define goals and suitable workloads

Together we define which applications, data and business processes are suitable for the cloud or should be developed cloud-natively. We look at benefits, technical dependencies, performance requirements and your strategic goals and prioritize suitable workloads for digital transformation.

2. Classify data and functions

Data, applications and business processes are assessed according to protection requirements, criticality and regulatory requirements. This creates a solid foundation for selecting suitable cloud services and categorizing critical or important functions.

3. Assess risks and provider dependencies

Before implementation, we analyze information security, data locations, supply chains, concentration risks, failure scenarios and possible dependencies on individual cloud providers. This creates transparency and supports a long-term secure cloud strategy.

4. Develop target architecture and contractual basis

Based on the assessment, we integrate T Cloud Public into your current IT landscape and also support complex multi-cloud scenarios. At the same time, we pay attention to service levels, responsibilities, security requirements, subcontractors as well as exit provisions and support the contractual mapping of relevant DORA requirements.

5. Implement pilot project in a controlled manner

A clearly delimited workload makes it possible to test cloud technologies, security measures, automation and organizational processes under real conditions. This allows experience to be gained and risks to be assessed at an early stage.

6. Migrate applications and data gradually

Depending on the application, migration takes place through rehosting, replatforming or refactoring. Defined testing procedures, fallback options and clear acceptance criteria support a secure and controlled introduction of new cloud solutions.

7. Regularly review operations, resilience and exit

After migration, we continuously monitor security, availability, costs, permissions and service provider risks. Recovery and exit procedures are regularly reviewed so that your cloud infrastructure remains powerful, secure and regulatorily compatible in the long term.

 
Request individual consultation now
 
 
 
 

References
Successful cloud solutions in the financial sector and in the insurance industry

Banks, insurance companies and financial service providers already use T Cloud Public for a wide variety of scenarios – from business-critical applications and databases to digital customer portals, cloud banking, ESG data platforms and modern AI applications. Our references show how companies are driving their digital transformation forward securely and in a controlled manner.

ReferenceCore applications in the public cloud

ROLAND Rechtsschutz switched from a private cloud environment to T Cloud Public. The insurer operates central applications and Oracle databases there, among other things. Bare metal resources enabled the consideration of special licensing requirements.

To the ROLAND Rechtsschutz reference

ReferenceScalable financial applications and databases

Creditreform uses T Cloud Public for database-based applications as well as development and test environments. Scalable cloud solutions support the company in deploying applications flexibly and implementing regulatory requirements efficiently.

To the Creditreform reference

ReferenceImproved output management

For the secure and reliable dispatch of invoices and benefit statements of AOK Niedersachsen, Binect operates its output management solution on T Cloud Public. Sensitive health and social data can be securely processed and flexibly scaled.

To the AOK Niedersachsen reference

ReferenceESG data platform for the financial world

Dataland operates a powerful ESG data platform on T Cloud Public. Banks, asset managers and other financial market participants thereby gain structured access to sustainability data for analyses, reporting and regulatory requirements.

To the Dataland reference

ReferenceCloud banking for business customers

EUVIC developed a cloud-based credit portal for business customers for SaarLB. The infrastructure for development and production operations was provided via what is now T Cloud Public.

To the EUVIC and SaarLB reference
 
 

Find the right cloud solution for your company

Whether you want to develop digital banking services further, modernize insurance applications or build data-driven applications and AI platforms – we support you in developing a cloud strategy that combines security, compliance and innovation.

Schedule a non-binding consultation now
 

FAQ – Frequently asked questions about cloud for banks, insurance companies and financial service providers

What do cloud bank, bank cloud and banking cloud mean?

The terms cloud bank, bank cloud and banking cloud are often used synonymously. They generally describe cloud infrastructures, platforms or applications that are used specifically for banks and digital financial services.

These include, for example, cloud resources for digital banking services, data platforms, analytics applications or cloud-based extensions of existing core banking systems. The term alone, however, says nothing about whether a public cloud, private cloud, hybrid cloud or multi-cloud architecture is used.

T Cloud Public is not a bank and not a core banking system. It provides a secure cloud infrastructure and powerful platform services on which banks and their IT service providers can develop, operate and scale applications flexibly.

What is cloud banking?

Cloud banking refers to the use of cloud technologies for digital banking services and banking-related applications. These include, for example, online banking portals, credit platforms, data analyses, development environments or cloud-based extensions of existing core banking systems.

Cloud banking does not mean that the entire banking IT has to be moved to a public cloud. In practice, clearly defined applications or workloads are often initially migrated or developed cloud-natively. This allows innovations to be implemented faster without completely replacing existing systems.

T Cloud Public supports banks in implementing cloud banking in a controlled, secure and gradual manner.

What is an online banking cloud?

An online banking cloud provides scalable cloud resources for online banking applications and digital customer services. These include, among others, web portals, mobile banking backends, APIs, databases, authentication services as well as container and platform services.

Which applications are actually operated in a cloud depends on the respective architecture, regulatory requirements and the individual risk analysis. Particularly business-critical functions are often gradually integrated or connected via secured interfaces.

With T Cloud Public, powerful cloud solutions for modern online banking applications can be flexibly developed and securely operated.

What is meant by cloud insurance?

The term cloud insurance can have two different meanings:

  •    A cloud solution for insurance companies
  •    Insurance against cloud failures or other IT risks

On this page, cloud insurance refers to the first meaning: a cloud infrastructure and platform services for insurance companies. Typical areas of application are digital customer portals, claims processing, contract management, data platforms or actuarial calculations.

T Cloud Public supports insurance companies in scaling applications flexibly, meeting regulatory requirements and driving digital transformation forward securely.

Are banks and insurance companies allowed to use a public cloud?

Yes. Banks and insurance companies are generally allowed to use public cloud services. The prerequisite is that they assess cloud usage on a risk-based basis and fulfill the applicable requirements for governance, information security, data protection, compliance, contract design and operational resilience.

Responsibility for compliant operations always remains with the financial company. It is not fully transferred to the cloud provider.

T Cloud Public supports banks and insurance companies with European data processing, recognized security certifications and a cloud infrastructure that is suitable for regulated use cases.

What requirements does DORA place on cloud services?

The Digital Operational Resilience Act (DORA) defines requirements for the secure use of ICT services in the financial sector. Cloud providers are considered ICT third-party service providers and are included in the risk management of regulated financial companies.

The most important requirements include, among others:

  •    Assessment of the cloud service prior to contract conclusion
  •    Risk assessment of the supported functions
  •    Contractually regulated rights and obligations
  •    Continuous monitoring of performance and risks
  •    Inclusion in the information register
  •    Emergency, recovery and exit strategies
  •    Management of subcontractors
  •    Assessment of concentration risks

T Cloud Public supports financial companies in implementing these requirements with appropriate security evidence, documentation and the Financial Addendum.

Is T Cloud Public DORA-compliant?

The term "DORA-compliant cloud" falls short. DORA is primarily directed at financial companies and defines requirements for dealing with ICT third-party service providers.

Whether cloud usage meets regulatory requirements therefore does not depend solely on the cloud provider. Also decisive are the respective application, risk analysis, governance model, contract design and operating model.

T Cloud Public supports DORA-regulated companies with European data processing, extensive security evidence and a Financial Addendum that takes into account relevant contractual requirements.

What content must cloud contracts regulate under DORA?

Depending on the type and criticality of the cloud service, contracts must take into account various regulatory requirements. These include, among others:

  •    Description of agreed services
  •    Locations of data processing and data storage
  •    Requirements for availability, integrity and confidentiality
  •    Service levels and reporting obligations
  •    Support for ICT incidents
  •    Information, control and audit rights
  •    Regulations for subcontractors
  •    Termination and transition provisions
  •    Return, transfer and deletion of data
  •    Exit and migration scenarios

If a cloud service supports critical or important functions, additional requirements apply to contract design and third-party risk management.

With the Financial Addendum, T Cloud Public supports financial companies in contractually mapping relevant DORA requirements.

Must all cloud services be included in the DORA information register?

Financial companies must maintain an information register of their contractual arrangements for the use of ICT services. The register covers not only cloud services for critical or important functions, but basically all relevant ICT services. However, depending on the use case, the scope and classification of individual entries differ.

To create the information register, financial companies sometimes need information from their ICT third-party service providers. T Cloud Public supports its customers with transparent documentation and the necessary information.

Must bank and insurance data be stored in Germany?

There is no general obligation to store all bank and insurance data exclusively in Germany. What is decisive is rather the type of data, the regulatory requirements, the location of data processing and the assessment of the respective use case.

Financial companies must be able to trace at all times where data is stored and processed, which legal framework applies and who can access it.

T Cloud Public processes data in European data centers within the European legal framework and supports financial companies in implementing requirements for data protection, compliance and digital sovereignty.

What is a critical or important function?

A function is considered critical or important if its failure would significantly impair business continuity, the stability of business processes, compliance with regulatory requirements or the provision of financial services.

The assessment is always carried out by the respective financial company and is based on the specific use case. Therefore, the same cloud service can support a critical function at one company, while it is less critical at another.

T Cloud Public supports banks and insurance companies in developing suitable cloud architectures for different protection requirements and regulatory requirements.

What role do subcontractors play in a bank cloud or insurance cloud?

Cloud services are often provided through multiple service providers. Financial companies must therefore be able to trace which subcontractors are involved, which services they take on and at which locations data is processed.

Particularly for critical or important functions, transparency, information rights and clear responsibilities along the entire supply chain play a central role.

T Cloud Public supports financial companies with transparent information on supply chains and creates a reliable foundation for governance, compliance and third-party risk management.

How can vendor lock-in be avoided in cloud banking?

Vendor lock-in cannot be avoided by contractual provisions alone. An open cloud architecture and the selection of suitable technologies are equally decisive.

These include, for example:

  •    Open standards and APIs
  •    OpenStack as an open cloud platform
  •    Containers and Kubernetes
  •    Infrastructure as Code with Terraform
  •    Standardized data formats
  •    Documented interfaces
  •    Regular exit tests and migration scenarios

T Cloud Public is based on OpenStack and supports open, portable cloud architectures. This allows banks, insurance companies and financial service providers to reduce dependencies on individual providers and design their cloud strategy flexibly in the long term.

Which certifications are relevant for banks and insurance companies?

Certifications and audit reports can support provider assessment, but do not replace the individual risk analysis of the financial company. Depending on the use case, evidence regarding the following areas is particularly relevant:

  • Information security
  • Protection of personal data
  • Cloud-specific security controls
  • Business continuity
  • IT service management
  • Effectiveness of financial reporting controls

T Cloud Public holds, among others, BSI C5 Type 2, SOC 1 Type II, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, ISO 22301 and ISO/IEC 20000-1. The respective scope must be matched with the services and locations actually used.

Can existing core banking and insurance applications be migrated to the cloud?

In principle, established or business-critical applications can also be transferred to a cloud environment. Whether a migration makes sense depends, among other things, on architecture, interfaces, licensing model, protection requirements, criticality and availability requirements. Depending on the application, different strategies may be considered:

  •    Rehosting without fundamental application changes
  •    Replatforming with limited technical adjustments
  •    Refactoring to a cloud-native architecture
  •    Continued operation in a hybrid environment
  •    Replacement with a new cloud application

A gradual approach reduces the risks compared to simultaneously migrating all applications.

Does the ECB's cloud outsourcing guide also apply to insurance companies?

The guideline published by the European Central Bank in 2025 is aimed at banks under ECB supervision. It describes supervisory expectations and good practices for implementing DORA-related requirements for cloud outsourcing.

For insurance companies, the guideline is not the immediately applicable supervisory framework. However, topics such as service provider management, resilience, data and information security, concentration risks and exit strategies are also relevant for insurers.


Schedule your non-binding consultation now

Your phone number seems to be incorrect. Please note it must contain at least four digits. Zeros at the beginning are not considered.
Your phone number seems to be incorrect. Please note that it must have a maximum of 26 characters.
Your phone number appears to be incorrect. Please note that only numbers from 0 to 9 can be used.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

* required fields

 

T Cloud Public Community

This is where users, developers and product owners meet to help each other, share knowledge and discuss.

Discover now

Free expert hotline

Our certified cloud experts provide you with personal service free of charge.

0800 3304477 (from Germany)

+800 33044770 (from abroad)

24 hours a day, seven days a week

Write an E-Mail

Our customer service is available free of charge via E-Mail

Write an E-Mail

AIssistant Cloudia

Our AI-powered search helps with your cloud needs.