Cloud infrastructure in financial services, week ending 16 October 2026

Week ending 16 October 2026 · 22 sources

Banks take AI training onto sovereign and hybrid cloud

Starling is developing a banking AI model on UK sovereign cloud, and SBS launched a sovereign AI platform for banks with NVIDIA 12. UOB and AWS signed an MoU on hybrid cloud and AI banking 3.

Which way the market is moving

Sovereign cloud becomes the home for banking AI

Starling is developing a banking AI model on UK sovereign cloud, and SBS launched a sovereign AI platform for banks with NVIDIA 12.

Starling has turned to UK sovereign cloud to develop a banking AI model 1. Finextra Research reported Starling as the first bank to train an AI model on UK sovereign cloud 4. Separately, SBS launched a sovereign AI platform for banks with NVIDIA 2.

FinTech Global described the choice facing anti-money laundering teams as sovereign AI against shared intelligence 10. NTT Data argued that cloud is the missing link in banking AI 11. Together, these stories put the hosting location of models and training data alongside model choice in banking AI discussions 10111.

What it means: Institutions planning AI on customer or transaction data should treat where models are trained and hosted as a design and risk decision, not a later procurement detail. Sovereign options may limit access to shared intelligence, so the trade-off needs to be made explicitly.

Questions for vendors:

  1. In which jurisdictions are training data, model weights and inference workloads held, and who can access them?
  2. Which parts of your sovereign offering depend on a foreign parent company or a hyperscaler underneath?
  3. How would we move a trained model and its data to another provider if we needed to exit?

In the registry: Red Hat OpenShift (Red Hat), Mainframe services (Ensono), Azure Managed Services (Macquarie Cloud Services)

Hyperscaler deals tie cloud to AI plans

UOB signed an MoU with AWS to explore cloud services across its operations, and CaixaBank expanded its Google Cloud agreement 126.

Amazon Web Services and United Overseas Bank signed a memorandum of understanding to explore the use of cloud services across the bank's global operations 12. Coverage described the work as covering cloud and AI capabilities and exploring hybrid cloud infrastructure for ASEAN banking 513.

CaixaBank announced an expanded strategic agreement with Google Cloud to strengthen its technological capabilities 6. The agreement aims to accelerate the integration of AI, data management and cloud infrastructure across its business 6. In both cases the announced scope pairs cloud infrastructure with AI work rather than hosting alone 56.

What it means: Large cloud agreements are increasingly bundled with AI services, which can deepen dependence on one provider. Institutions should separate infrastructure terms from AI service terms when negotiating so each can be assessed and exited on its own.

Questions for vendors:

  1. Which AI services in this agreement can run on our own or another provider's infrastructure?
  2. How does the hybrid model split workloads between on-premises and public cloud, and who operates each part?
  3. What regional data residency commitments apply in each market covered?

In the registry: Juju (Canonical), Red Hat OpenShift (Red Hat), Cloud evolution (Cevo)

Concentration and resilience stay on the agenda

Commentators asked whether cloud concentration has become a RegTech problem, while ECB supervisor Frank Elderson spoke on resilience 714.

FinTech Global asked whether cloud concentration has become a RegTech problem 7. ECB Banking Supervision published a speech by Frank Elderson on ensuring resilience in the face of uncertainty 14.

At Sibos 2026, a debate on trust under pressure focused on resilience in a world where compromise must be assumed, and called for trust and collaboration at machine speed to fight banking industry threats 15. CLS Chief Risk Officer Deborah Hrvatin discussed how financial institutions can strengthen operational resilience while dealing with geopolitical uncertainty 16. The common thread is planning for disruption rather than assuming it will not happen 1615.

What it means: Institutions should map which critical services, including compliance tooling bought as SaaS, sit on the same few cloud providers. Exit and outage plans need testing against that combined exposure, not one contract at a time.

Questions for vendors:

  1. Which cloud provider and regions host your service, and do any of your own suppliers depend on the same provider?
  2. What is your tested recovery time if your primary cloud region is unavailable?
  3. Will you take part in our outage and exit testing, and share results?

In the registry: Environment Optimisation (Ultradata), Cloud evolution (Cevo), Juju (Canonical)

Migrations and cloud-native platforms across the sector

CLS completed an infrastructure migration with Kyndryl, and insurers and screening providers moved to cloud-native platforms 171819.

CLS, a financial market infrastructure group, and Kyndryl announced the successful completion of an infrastructure migration 17. SGX FX and BlackRock expanded the integration between BidFX, SGX FX's cloud-based FX execution management platform, and Aladdin 20.

SiriusPoint will implement DOCOsoft Vew, an AI-powered cloud-native SaaS claims platform 18. Global Screening Services partnered with cloud engineering company Storm Reply on a new AI-powered cloud capability for sanctions screening 19. Atos expanded its partnership with Fortinet to deliver a unified cybersecurity framework across hybrid and multi-cloud environments 21.

What it means: Market infrastructure, insurers and compliance providers are all running core functions on cloud and managed services. Third-party risk reviews need to cover the provider's own cloud and managed service chain, not just the application.

Questions for vendors:

  1. Which managed service provider and cloud platform run this service, and how are changes to them notified to us?
  2. How was the migration validated for data completeness and recovery before cutover?
  3. How is security policy kept consistent across your hybrid and multi-cloud environments?

In the registry: Mainframe services (Ensono), Edge data centres (NEXTDC), Azure Managed Services (Macquarie Cloud Services)

UK guidance says migrate TLS to post-quantum now

The NCSC published recommendations for configuring post-quantum cryptography in TLS and said now is the time to migrate 22.

The UK National Cyber Security Centre published its recommendations for configuring post-quantum cryptography in TLS 22. Its stated position is that now is the time to migrate 22.

The guidance arrived in the same week that a Sibos debate stressed resilience in a world where compromise must be assumed 15. Because TLS protects connections to and between cloud-hosted services, migration under the guidance would reach endpoints run by institutions and by their cloud and managed service providers alike 22.

What it means: Institutions should inventory TLS endpoints across their cloud estate, including those run by providers, and ask when each will support post-quantum configurations. Provider roadmaps will set the pace for much of this work.

Questions for vendors:

  1. When will your load balancers, gateways and APIs support post-quantum TLS configurations?
  2. Can we choose and verify the TLS configuration used on connections to our tenancy?
  3. How will you test post-quantum settings for performance and compatibility before rollout?

In the registry: Edge data centres (NEXTDC), Juju (Canonical), Intelligent Connectivity (Logicalis)

Regulation and supervision

Sources

  1. FinTech Global, 2026-10-15: Starling turns to UK sovereign cloud to develop banking AI model
  2. The Paypers, 2026-10-14: SBS launches sovereign AI platform for banks with NVIDIA
  3. The Paypers, 2026-10-13: UOB and AWS sign MoU on hybrid cloud and AI banking
  4. Finextra Research, 2026-10-14: Starling becomes first bank to train AI model on UK sovereign cloud
  5. FinTech Futures, 2026-10-13: UOB and AWS ink MoU for cloud and AI capabilities
  6. Finextra (cloud), 2026-10-09: CaixaBank expands Google Cloud collaboration
  7. FinTech Global, 2026-10-09: Has cloud concentration become a RegTech problem?
  8. Yahoo Finance UK, 2026-10-15: Microsoft can justify higher valuation as AI demand drives Azure growth, UBS says
  9. Yahoo Finance, 2026-10-10: Microsoft vs. Alphabet: Which AI Cloud Stock Is Cheaper After the Capital Spending?
  10. FinTech Global, 2026-10-15: Sovereign AI vs shared intelligence: AML’s new dilemma
  11. NTT Data, 2026-10-14: Why cloud is the missing link in banking AI
  12. Finextra (cloud), 2026-10-13: Singapore's UOB signs cloud MoU with AWS
  13. CRN Asia, 2026-10-12: UOB and AWS explore hybrid cloud infrastructure for ASEAN banking
  14. ECB Banking Supervision, 2026-10-14: Frank Elderson: Ensuring resilience in the face of uncertainty
  15. Finextra (security), 2026-10-09: Sibos 2026: Trust and collaboration at 'machine speed' needed to fight banking industry threats
  16. Finextra, 2026-10-15: Emerging Risks in the FX Market: Navigating Uncertainty and Innovation
  17. Finextra (security), 2026-10-15: CLS completes infrastructure migration with Kyndryl
  18. Finextra (cloud), 2026-10-14: DOCOsoft contracted by Siriuspoint for claims management
  19. Finextra (cloud), 2026-10-14: GSS and Storm Reply collaborate on sanctions screening
  20. Finextra (cloud), 2026-10-15: SGX FX expands integration with BlackRock’s Aladdin® platform
  21. Yahoo Finance UK, 2026-10-14: Atos expands partnership with Fortinet to deliver a global unified cybersecurity framework across hybrid and multi-cloud environments
  22. NCSC, 2026-10-15: Post-quantum updates to our TLS guidance

About cloud infrastructure software

Cloud and infrastructure providers host and run an institution's technology: cloud platforms, managed hosting and infrastructure operations.

Browse the products in the registry

Get the market overview every Monday: subscribe to the Vederca newsletter.