For banks, insurance companies, financial service providers, FinTechs and InsurTechs that want to process sensitive data securely, scale digital applications flexibly and reliably meet regulatory requirements.
Digital business models, cloud banking, AI applications and data-driven services are fundamentally transforming banks, insurance companies and financial service providers. Customers expect digital services in real time, while new competitors are bringing innovations to market faster and faster. At the same time, regulatory requirements are increasing through DORA, MaRisk and other BaFin requirements, meaning requirements relating to data processing, access rights, operational resilience and governance must be met. Complex legacy systems and historically grown IT landscapes further complicate digital transformation. We support you in setting up your IT in a legally compliant and independent manner.
As a regulated KRITIS ICT company that is itself audited by the European Supervisory Authorities (ESA), we are familiar with the high requirements for security, compliance and resilience. We personally support you in your cloud transformation and offer with T Cloud Public a sovereign and comprehensively certified cloud solution for banks and insurance companies.
T Cloud Public is subject solely to EU jurisdiction (no US CLOUD Act) and is operated in highly secure twin-core data centers in Germany and Europe. You retain full control and data sovereignty.
The Financial Addendum supports regulated companies in contractually mapping relevant DORA requirements and creates transparency in interaction with your governance and risk management.
BSI C5 Type 2 and numerous ISO certifications demonstrate high standards for information security, data protection and business continuity for the reliable operation of critical applications.
From compute and storage to containers, databases and AI: T Cloud Public offers you a comprehensive portfolio of powerful cloud services that can be scaled flexibly.
Open technologies such as OpenStack, Terraform and standardized APIs reduce vendor lock-in effects and enable flexible integration into existing IT landscapes.
Benefit from experienced experts who know your regulatory requirements and personally support you in your sovereign cloud transformation.
Independent analysts rate T Cloud Public as a leading European cloud platform. Benefit from a broad service portfolio, modern AI services and an established cloud ecosystem for your digital transformation.
Banks, insurance companies and financial service providers face different challenges.
Find out how T Cloud Public can support you in the respective areas.
Banks must continuously develop digital services without compromising stability, security or regulatory control. At the same time, modern cloud applications meet historically grown core banking systems that often cannot be replaced in the short term. Cloud computing for banks must therefore enable both: innovation and controlled operation of existing applications.
With T Cloud Public, cloud solutions can be gradually integrated into existing IT landscapes. New applications can be developed cloud-natively, while business-critical systems remain connected in a controlled manner. This gives banks the foundation for a secure and flexible digital transformation.
Typical requirements | Suitable use cases |
|---|---|
|
|
Through comprehensive certifications, documented security processes and special agreements for the financial sector, T Cloud Public supports banks in implementing regulatory requirements more efficiently and more easily meeting audit, compliance, risk and resilience requirements.
T Cloud Public provides scalable infrastructure and platform services for classic banking applications and modern cloud banking solutions. Virtual machines, bare metal, containers, databases as well as network and storage services can be flexibly combined and adapted to different regulatory requirements.
Thanks to open technologies such as OpenStack, Terraform and standardized interfaces, banks can gradually modernize existing applications while reducing the risk of vendor lock-in.
Online banking applications must be reliably available at all times – even during high traffic volumes or short-term load peaks. At the same time, customers expect fast loading times, mobile services and digital offerings that are continuously expanded. For banks this means: applications must scale flexibly without compromising security, performance or regulatory requirements.
With T Cloud Public, banks create a powerful cloud infrastructure for modern online banking services. Cloud applications can be deployed flexibly, developed in an automated manner and securely integrated into existing banking systems. This creates digital customer services that combine high availability with short development cycles.
Typical requirements | Suitable use cases |
|---|---|
|
|
Through comprehensive certifications, documented security processes and special agreements for the financial sector, T Cloud Public supports providers of digital banking solutions in efficiently implementing regulatory requirements while simultaneously providing secure, highly available and scalable digital services.
Compute, container, network and database services enable the flexible operation of modern online banking applications. Open APIs, cloud technologies and automated deployment processes support the rapid further development of digital applications and create the necessary flexibility for new customer services.
T Cloud Public is suitable for both standalone online banking portals and for the controlled extension of existing cloud banking landscapes.
Insurance companies face the challenge of continuously expanding their digital services while securely managing large volumes of sensitive customer, policy and claims data. Modern insurance applications must respond flexibly to seasonal peaks in demand, support new digital products and reliably meet regulatory requirements. Cloud computing provides the necessary flexibility and creates a powerful foundation for the digital transformation of the insurance industry.
With T Cloud Public, insurance companies can gradually modernize their existing IT environments without completely replacing proven core systems. Scalable cloud solutions increase operational efficiency, reduce the time required to deploy new applications and provide the technical foundation for innovative insurance services.
Typical requirements | Suitable use cases |
|---|---|
|
|
Through comprehensive certifications, documented security processes and special agreements for the financial sector, T Cloud Public supports insurance companies in efficiently implementing regulatory requirements while securely operating digital customer services, core applications and data platforms.
T Cloud Public provides scalable compute, storage, network and database services for insurance companies. Instead of permanently maintaining their own infrastructure, the required cloud resources can be obtained flexibly, redundantly and cost-efficiently. This allows load peaks to be absorbed and services to be operated reliably.
Open cloud technologies facilitate the integration of existing applications and create the flexibility to provide new digital insurance offerings economically.
Financial service providers, FinTechs and InsurTechs often develop new digital applications within short innovation cycles. At the same time, banks, insurance companies and other financial institutions expect traceable security measures, transparent operating models and a cloud infrastructure that reliably supports regulatory requirements. Modern cloud solutions must therefore combine flexibility, security and compliance.
T Cloud Public offers financial service providers an open cloud platform for the development, deployment and operation of digital financial applications. Compute, storage, containers, Kubernetes, databases and networks can be combined flexibly and provisioned in an automated manner. This creates scalable cloud solutions for new digital business models as well as a powerful foundation for digital transformation.
Typical requirements | Suitable use cases |
|---|---|
|
|
Through comprehensive certifications, documented security processes and special agreements for the financial sector, T Cloud Public supports financial service providers, FinTechs and InsurTechs in taking regulatory requirements into account from the outset and providing innovative digital financial services securely, scalably and in a compliant manner.
The open cloud infrastructure based on OpenStack, standardized APIs, Terraform and Infrastructure as Code facilitates automation and reduces dependencies on individual providers. The Financial Addendum additionally supports regulated companies in contractually implementing relevant DORA requirements.
This creates cloud solutions that combine innovation, efficiency and regulatory security.
Banks, insurance companies and financial service providers process large amounts of transaction, market, risk and customer data every day. At the same time, requirements for real-time analyses, AI applications and data-based decisions are growing. Cloud computing creates the foundation to provide computing power and storage flexibly – exactly when they are needed.
With T Cloud Public, powerful data platforms, analytics environments and AI applications can be operated economically. Cloud resources can be scaled flexibly and support both short-term simulations and permanently available analytics and AI platforms.
Typical requirements | Suitable use cases |
|---|---|
|
|
T Cloud Public provides compute, storage, database, container, big data, AI and high-performance computing services for data-intensive applications. Companies can scale analytics platforms flexibly, develop new AI applications and use computing capacity as needed without maintaining excess capacity on a permanent basis.
This enables powerful cloud solutions for data analytics, risk and fraud detection, ESG reporting and modern AI applications in the financial sector.
Discover current market data, customer examples and the most important success factors for using sovereign cloud solutions.
Depending on your requirements and your cloud expertise, we offer you different ways into our cloud: from independent self-service through cloud-based complete solutions to the analysis and strategic realignment of your IT and cloud infrastructure. Find your ideal entry point into our cloud.
Provide your cloud resources flexibly and easily via self-service. With 250 € starting credit, you can get started right away, implement initial projects and test our cloud.
Expand your IT flexibly with sovereign cloud-based solutions for the finance and insurance sector – including secure identity & access management for customer data, digital signatures, document management as well as automation and LLM services and much more. We will be happy to advise you on finding the right solution for your needs.
The introduction of a cloud solution begins with a thorough analysis of your business, technical and regulatory requirements. Together we develop a cloud strategy that combines security, compliance and economic efficiency and accompanies you from initial planning through to secure operations.
Together we define which applications, data and business processes are suitable for the cloud or should be developed cloud-natively. We look at benefits, technical dependencies, performance requirements and your strategic goals and prioritize suitable workloads for digital transformation.
Data, applications and business processes are assessed according to protection requirements, criticality and regulatory requirements. This creates a solid foundation for selecting suitable cloud services and categorizing critical or important functions.
Before implementation, we analyze information security, data locations, supply chains, concentration risks, failure scenarios and possible dependencies on individual cloud providers. This creates transparency and supports a long-term secure cloud strategy.
Based on the assessment, we integrate T Cloud Public into your current IT landscape and also support complex multi-cloud scenarios. At the same time, we pay attention to service levels, responsibilities, security requirements, subcontractors as well as exit provisions and support the contractual mapping of relevant DORA requirements.
A clearly delimited workload makes it possible to test cloud technologies, security measures, automation and organizational processes under real conditions. This allows experience to be gained and risks to be assessed at an early stage.
Depending on the application, migration takes place through rehosting, replatforming or refactoring. Defined testing procedures, fallback options and clear acceptance criteria support a secure and controlled introduction of new cloud solutions.
After migration, we continuously monitor security, availability, costs, permissions and service provider risks. Recovery and exit procedures are regularly reviewed so that your cloud infrastructure remains powerful, secure and regulatorily compatible in the long term.
Banks, insurance companies and financial service providers already use T Cloud Public for a wide variety of scenarios – from business-critical applications and databases to digital customer portals, cloud banking, ESG data platforms and modern AI applications. Our references show how companies are driving their digital transformation forward securely and in a controlled manner.
ROLAND Rechtsschutz operates central applications and Oracle databases on T Cloud Public – with bare metal resources to accommodate special licensing requirements.
Creditreform uses T Cloud Public for database-based applications and development and test environments – deploying flexibly while meeting regulatory requirements efficiently.
Binect operates its output management solution for AOK Niedersachsen on T Cloud Public – for the secure, scalable dispatch of sensitive health and social data.
Dataland operates a powerful ESG data platform on T Cloud Public, giving banks and asset managers structured access to sustainability data for analyses, reporting and compliance.
EUVIC developed a cloud-based credit portal for business customers for SaarLB. The infrastructure for development and production operations was provided via what is now T Cloud Public.
Whether you want to develop digital banking services further, modernize insurance applications or build data-driven applications and AI platforms – we support you in developing a cloud strategy that combines security, compliance and innovation.
The terms cloud bank, bank cloud and banking cloud are often used synonymously. They generally describe cloud infrastructures, platforms or applications that are used specifically for banks and digital financial services.
These include, for example, cloud resources for digital banking services, data platforms, analytics applications or cloud-based extensions of existing core banking systems. The term alone, however, says nothing about whether a public cloud, private cloud, hybrid cloud or multi-cloud architecture is used.
T Cloud Public is not a bank and not a core banking system. It provides a secure cloud infrastructure and powerful platform services on which banks and their IT service providers can develop, operate and scale applications flexibly.
Cloud banking refers to the use of cloud technologies for digital banking services and banking-related applications. These include, for example, online banking portals, credit platforms, data analyses, development environments or cloud-based extensions of existing core banking systems.
Cloud banking does not mean that the entire banking IT has to be moved to a public cloud. In practice, clearly defined applications or workloads are often initially migrated or developed cloud-natively. This allows innovations to be implemented faster without completely replacing existing systems.
T Cloud Public supports banks in implementing cloud banking in a controlled, secure and gradual manner.
An online banking cloud provides scalable cloud resources for online banking applications and digital customer services. These include, among others, web portals, mobile banking backends, APIs, databases, authentication services as well as container and platform services.
Which applications are actually operated in a cloud depends on the respective architecture, regulatory requirements and the individual risk analysis. Particularly business-critical functions are often gradually integrated or connected via secured interfaces.
With T Cloud Public, powerful cloud solutions for modern online banking applications can be flexibly developed and securely operated.
The term cloud insurance can have two different meanings:
On this page, cloud insurance refers to the first meaning: a cloud infrastructure and platform services for insurance companies. Typical areas of application are digital customer portals, claims processing, contract management, data platforms or actuarial calculations.
T Cloud Public supports insurance companies in scaling applications flexibly, meeting regulatory requirements and driving digital transformation forward securely.
Yes. Banks and insurance companies are generally allowed to use public cloud services. The prerequisite is that they assess cloud usage on a risk-based basis and fulfill the applicable requirements for governance, information security, data protection, compliance, contract design and operational resilience.
Responsibility for compliant operations always remains with the financial company. It is not fully transferred to the cloud provider.
T Cloud Public supports banks and insurance companies with European data processing, recognized security certifications and a cloud infrastructure that is suitable for regulated use cases.
The Digital Operational Resilience Act (DORA) defines requirements for the secure use of ICT services in the financial sector. Cloud providers are considered ICT third-party service providers and are included in the risk management of regulated financial companies.
The most important requirements include, among others:
T Cloud Public supports financial companies in implementing these requirements with appropriate security evidence, documentation and the Financial Addendum.
The term "DORA-compliant cloud" falls short. DORA is primarily directed at financial companies and defines requirements for dealing with ICT third-party service providers.
Whether cloud usage meets regulatory requirements therefore does not depend solely on the cloud provider. Also decisive are the respective application, risk analysis, governance model, contract design and operating model.
T Cloud Public supports DORA-regulated companies with European data processing, extensive security evidence and a Financial Addendum that takes into account relevant contractual requirements.
Depending on the type and criticality of the cloud service, contracts must take into account various regulatory requirements. These include, among others:
If a cloud service supports critical or important functions, additional requirements apply to contract design and third-party risk management.
With the Financial Addendum, T Cloud Public supports financial companies in contractually mapping relevant DORA requirements.
Financial companies must maintain an information register of their contractual arrangements for the use of ICT services. The register covers not only cloud services for critical or important functions, but basically all relevant ICT services. However, depending on the use case, the scope and classification of individual entries differ.
To create the information register, financial companies sometimes need information from their ICT third-party service providers. T Cloud Public supports its customers with transparent documentation and the necessary information.
There is no general obligation to store all bank and insurance data exclusively in Germany. What is decisive is rather the type of data, the regulatory requirements, the location of data processing and the assessment of the respective use case.
Financial companies must be able to trace at all times where data is stored and processed, which legal framework applies and who can access it.
T Cloud Public processes data in European data centers within the European legal framework and supports financial companies in implementing requirements for data protection, compliance and digital sovereignty.
A function is considered critical or important if its failure would significantly impair business continuity, the stability of business processes, compliance with regulatory requirements or the provision of financial services.
The assessment is always carried out by the respective financial company and is based on the specific use case. Therefore, the same cloud service can support a critical function at one company, while it is less critical at another.
T Cloud Public supports banks and insurance companies in developing suitable cloud architectures for different protection requirements and regulatory requirements.
Cloud services are often provided through multiple service providers. Financial companies must therefore be able to trace which subcontractors are involved, which services they take on and at which locations data is processed.
Particularly for critical or important functions, transparency, information rights and clear responsibilities along the entire supply chain play a central role.
T Cloud Public supports financial companies with transparent information on supply chains and creates a reliable foundation for governance, compliance and third-party risk management.
Vendor lock-in cannot be avoided by contractual provisions alone. An open cloud architecture and the selection of suitable technologies are equally decisive.
These include, for example:
T Cloud Public is based on OpenStack and supports open, portable cloud architectures. This allows banks, insurance companies and financial service providers to reduce dependencies on individual providers and design their cloud strategy flexibly in the long term.
Certifications and audit reports can support provider assessment, but do not replace the individual risk analysis of the financial company. Depending on the use case, evidence regarding the following areas is particularly relevant:
T Cloud Public holds, among others, BSI C5 Type 2, SOC 1 Type II, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, ISO 22301 and ISO/IEC 20000-1. The respective scope must be matched with the services and locations actually used.
In principle, established or business-critical applications can also be transferred to a cloud environment. Whether a migration makes sense depends, among other things, on architecture, interfaces, licensing model, protection requirements, criticality and availability requirements. Depending on the application, different strategies may be considered:
A gradual approach reduces the risks compared to simultaneously migrating all applications.
The guideline published by the European Central Bank in 2025 is aimed at banks under ECB supervision. It describes supervisory expectations and good practices for implementing DORA-related requirements for cloud outsourcing.
For insurance companies, the guideline is not the immediately applicable supervisory framework. However, topics such as service provider management, resilience, data and information security, concentration risks and exit strategies are also relevant for insurers.
T Cloud Public Community
This is where users, developers and product owners meet to help each other, share knowledge and discuss.
Free expert hotline
Our certified cloud experts provide you with personal service free of charge.
0800 3304477 (from Germany)
+800 33044770 (from abroad)
24 hours a day, seven days a week
Write an E-Mail
Our customer service is available free of charge via E-Mail
AIssistant Cloudia
Our AI-powered search helps with your cloud needs.