Financial services IT vendors listed as DORA raises outsourcing scrutiny

Financial services IT vendors are receiving closer attention from banks and insurers as legacy systems face demands from DORA compliance, real-time payments and AI-led operations, according to Parminder Saini, CEO of Triple Minds, in an external opinion published on Finextra. Saini identified eight providers serving banking, insurance, wealth management and capital markets, while warning that regulatory fit and data portability can shape the long-term cost of outsourcing.

The list reflects a broader shift toward specialist providers for areas such as anti-money-laundering monitoring, know-your-customer automation, Solvency II reporting, cloud migration and open banking APIs, Saini wrote. He said firms use external partners to access tested regulatory expertise, pre-built delivery frameworks, implementation capacity and scale without adding permanent headcount.

Which financial services IT vendors were named?

Saini named DXC Technology, Sopra Banking Software, Objectway, msg group, Avaloq, Comarch, Intellias and Profile Software as companies active in banking and insurance technology services or platforms.

• DXC Technology was described as having more than 45 years in financial services IT, with offerings across core banking, insurance administration, payments modernization, governance, risk and compliance, and AI integration. Saini cited Hogan and CoreIgnite for core banking and Assure for life and annuity, property and casualty, and reinsurance administration.

• Sopra Banking Software, based in France, was described as a banking and payments specialist supporting more than 1,500 financial institutions in over 80 countries, with API-ready systems and PSD2 and PSD3 compliance coverage.

• Objectway, an Italian provider, was positioned around wealth management, including portfolio management, onboarding, order management and reporting for private banks, asset managers and family offices.

• msg group, founded in Germany in 1980, was cited for insurance systems, actuarial modelling and compliance work tied to IFRS 17 and Solvency II, particularly in Germany, Austria and Switzerland.

• Avaloq, the Swiss banking technology company now part of NEC, was described as a SaaS-first provider for private banks and wealth managers, including a BPaaS model that combines software with outsourced middle- and back-office operations.

• Comarch, founded in Poland in 1993, was identified for core banking, mobile banking, insurance policy administration, claims and payment processing covering SWIFT, SEPA and instant payments.

• Intellias was presented as an engineering partner rather than a platform vendor, building mobile banking apps, open banking API layers and AI or machine-learning tools for credit risk and fraud detection.

• Profile Software, based in Greece, was cited for investment management and digital banking products, including Axia for capital markets and Finuevo for cloud-native core banking.

What does DORA change for bank technology outsourcing?

DORA, the EU’s Digital Operational Resilience Act, came into force in January 2025, according to Saini. He wrote that vendors lacking information and communications technology risk-management documentation are being removed from procurement shortlists, making third-party risk due diligence a regulatory selection issue rather than a back-office formality.

The regulation matters because banks and insurers remain accountable for operational resilience even when technology is supplied by an outside provider. In practical terms, contract terms, oversight rights, incident reporting and evidence of controls can affect whether a vendor is suitable for a regulated institution.

Saini also pointed to generative AI moving from trials into production at several European banks and to continued consolidation in financial technology, citing Avaloq and NEC, Finastra ownership shifts and governance concerns at Temenos. He said buyers should assess lock-in risk early in vendor selection.

How should firms compare platform vendors and IT services firms?

Saini distinguished between platform vendors, which sell packaged software, and IT services companies, which build bespoke systems for specific client needs. In his examples, Sopra Banking Software, Avaloq and Profile Software were platform vendors, while Intellias was described as a custom engineering partner.

He said firms should assess implementation records in the relevant geography, because experience in one regulatory market may not transfer directly to another. He also flagged pricing structures, including SaaS, BPaaS and per-transaction models, and said data portability terms can affect the cost and difficulty of switching providers later.

This story draws on original reporting from Finextra Research.