Cloud infrastructure in financial services this week

Week ending 20 October 2026 · 22 sources

Banks take AI to sovereign cloud as market infrastructure migrates

Starling trained a banking AI model on UK sovereign cloud, UOB signed a cloud MoU with AWS and Huntington built a small business platform with Google Cloud 123. CLS and CME Group reported migration progress 45.

Which way the market is moving

Sovereign cloud moves into bank AI training

Starling became the first bank to train an AI model on UK sovereign cloud 1.

Starling turned to UK sovereign cloud to develop a banking AI model 6. Finextra reported it as the first bank to train an AI model on UK sovereign cloud 1.

Sovereign options are also appearing in the networking layer: VyOS announced a partnership with ADESTIS to support sovereign cloud and multi-cloud networking 10. Banking Dive commentary argues that as AI moves into production, infrastructure strategy becomes a competitive differentiator 11. NTT Data makes a similar case, describing cloud as the missing link in banking AI 12.

What it means: Institutions planning to train or fine-tune models on customer data now have a reference case for doing so on in-country infrastructure. Data residency, model location and exit terms belong in AI workload decisions, not only in core hosting decisions.

Questions for vendors:

  1. Where exactly are training data, model weights and logs stored, and who can access them?
  2. Which legal entity operates the sovereign environment, and which foreign laws could reach it?
  3. What GPU capacity is committed to us, and what happens if demand exceeds it?

In the registry: Edge data centres (NEXTDC), Intelligent Connectivity (Logicalis), Managed Cloud and Infrastructure (Abacus Technology)

Market infrastructure migrations report progress

CLS completed an infrastructure migration with Kyndryl and CME Group says its cloud migration is ahead of schedule 45.

CLS, a financial market infrastructure group delivering settlement, processing and data solutions, announced with Kyndryl the completion of an infrastructure migration 4. At Sibos 2026, the CLS Chief Risk Officer discussed how financial institutions can strengthen operational resilience amid geopolitical uncertainty 13.

CME Group says its cloud migration is running ahead of schedule 5. It also announced cloud migration milestones 14. Both are operators of core market infrastructure reporting progress on large migrations in the same week 4514.

What it means: Institutions that connect to these operators should confirm how connectivity, testing windows and recovery arrangements change as the platforms move. The cases also give useful reference points for planning their own large migrations.

Questions for vendors:

  1. Which interfaces, endpoints or network paths changed for participants during the migration?
  2. How were recovery time and recovery point objectives tested after cutover?
  3. What concentration risk does the new hosting model create, and how is it managed?

In the registry: Azure Managed Services (Macquarie Cloud Services), Edge data centres (NEXTDC), Mainframe services (Ensono)

Hyperscalers build bank-facing AI and ledger products

Huntington, Jack Henry and UOB each deepened work with Google Cloud or AWS this week 372.

Huntington Bank introduced The 1866 Studio, an AI-powered small business operating system built with Google Cloud's Gemini Enterprise platform 153. Jack Henry connected to Google Cloud's digital ledger 7.

Amazon Web Services and Singapore's United Overseas Bank signed a memorandum of understanding to explore the use of cloud services across the bank's global operations 2. The MoU covers cloud and AI capabilities 8. FXC Intelligence selected AWS to deliver its MCP offering 16, and Global Screening Services partnered with Storm Reply on an AI-powered cloud capability for sanctions screening 17.

What it means: Hyperscalers are moving up from infrastructure into products that sit close to customers and ledgers. That raises the stakes on lock-in and on how responsibility is split when an AI or ledger service fails.

Questions for vendors:

  1. Which parts of the service depend on proprietary AI or ledger components, and what is the exit path?
  2. How is customer data used, retained and isolated when it passes through the AI platform?
  3. Who is accountable for incidents in a jointly built service, and how are they reported to us?

In the registry: Cloud Services (Interactive), Cloud evolution (Cevo), Juju (Canonical)

Supplier credentials and reporting clocks tighten

A stolen ConnectWise SkyKick credential exposed Microsoft 365 tenants, while EU and UK rules raise security expectations 91819.

A stolen ConnectWise SkyKick credential exposed Microsoft 365 tenants 9. Cloud Backup was pulled worldwide as customers hunted for planted credentials valid until 2028 9. Separately, ads tied to mercenary spyware turned up on ANSTO and critical infrastructure networks in Australia 20.

Reporting duties are tightening 18. Under the EU Cyber Resilience Act, manufacturers must since 11 September 2026 send an early warning to a national CSIRT and ENISA within 24 hours 18. The UK NCSC has published recommendations for configuring post-quantum cryptography in TLS and says now is the time to migrate 19.

What it means: Backup and management tools that hold standing access to cloud tenants are part of the attack surface and need the same review as core suppliers. Institutions should check which third parties hold long-lived credentials into their environments.

Questions for vendors:

  1. What standing credentials or app permissions does your tool hold in our tenant, and when do they expire?
  2. How fast would you notify us of a credential compromise, and what evidence would you provide?
  3. How do you meet EU Cyber Resilience Act early warning duties for products we use?

In the registry: Mainframe services (Ensono), Edge data centres (NEXTDC), Managed Cloud and Infrastructure (Abacus Technology)

Regulation and supervision

Sources

  1. Finextra Research, 2026-10-14: Starling becomes first bank to train AI model on UK sovereign cloud
  2. Finextra (cloud), 2026-10-13: Singapore's UOB signs cloud MoU with AWS
  3. Google Cloud Press Corner, 2026-10-19: Huntington Bank Introduces The 1866 Studio, an AI-Powered Small Business Operating System Built with Google Cloud
  4. Finextra (security), 2026-10-15: CLS completes infrastructure migration with Kyndryl
  5. Yahoo Finance, 2026-10-12: CME Group Says Cloud Migration Running Ahead of Schedule
  6. FinTech Global, 2026-10-15: Starling turns to UK sovereign cloud to develop banking AI model
  7. FinTech Global, 2026-10-19: Jack Henry connects to Google Cloud’s digital ledger
  8. FinTech Futures, 2026-10-13: UOB and AWS ink MoU for cloud and AI capabilities
  9. iTnews, 2026-10-18: Stolen ConnectWise 'SkyKick' credential exposed Microsoft 365 tenants
  10. Yahoo Finance, 2026-10-15: VyOS Announces Partnership with ADESTIS to Support Sovereign Cloud and Multi-Cloud Networking
  11. Banking Dive, 2026-10-19: The next AI decision financial institutions must get right
  12. NTT Data, 2026-10-14: Why cloud is the missing link in banking AI
  13. Finextra, 2026-10-15: Emerging Risks in the FX Market: Navigating Uncertainty and Innovation
  14. Yahoo Finance, 2026-10-12: CME Group Announces Cloud Migration Milestones
  15. Finextra, 2026-10-19: Huntington Bank partners Google Cloud for AI-powered small business operating system
  16. Finextra (payments), 2026-10-16: FXC Intelligence issues cross-border payment on AWS
  17. Finextra (cloud), 2026-10-14: GSS and Storm Reply collaborate on sanctions screening
  18. FinTech Global, 2026-10-19: CRA reporting clock is already ticking for EU manufacturers
  19. NCSC, 2026-10-15: Post-quantum updates to our TLS guidance
  20. iTnews, 2026-10-16: Australian gov, media networks reached by Israeli firm's spy ads
  21. ECB Banking Supervision, 2026-10-14: Frank Elderson: Ensuring resilience in the face of uncertainty
  22. ECB, 2026-10-19: Frank Elderson: From climate and nature risks to economic resilience and competitiveness

About cloud infrastructure software

Cloud and infrastructure providers host and run an institution's technology: cloud platforms, managed hosting and infrastructure operations.

Browse the products in the registry

Previous weeks

Get the market overview every Monday: subscribe to the Vederca newsletter.