Cloud and IT for Financial Institutions
SUE modernizes, builds, and manages IT for financial institutions: banks, insurers, payment institutions, and fintech companies. Through application modernization, we make legacy core systems more agile, step by step. As part of this, we build and manage cloud platforms and landing zones that comply with DORA, PCI DSS, and the GDPR.
Challenges for Financial Institutions
DNB and AFM now consider reliance on a few non-European cloud providers to be a systemic risk. At the same time, instant payments and open banking require platforms that are always available. The main challenges are:
- Legacy core systems that slow down every change
COBOL and mainframe applications contain decades of business logic that isn’t documented anywhere else. Gartner expects that more than 70% of mainframe exits starting in 2026 will fail to meet their goals, mainly because organizations overestimate what GenAI tools can do. If you don’t know what the code does, you can’t replace it safely. - Strict requirements in the areas of security, compliance, and audits
Strict requirements in the areas of security, compliance, and audits. DORA, PSD2, PCI DSS, and the GDPR require demonstrable governance, traceability, and consistent operational procedures across all environments. Under DORA, you are required to assess your IT service providers. SUE is ISO 27001- and ISO 9001-certified. We make the certificate and its scope available for your supplier assessment. - Dependence on a single cloud provider
Clouds, on-premises systems, microservices, and data pipelines are becoming increasingly disparate, which drives up costs and reduces visibility. The ECB requires an exit plan before a critical service goes live. A platform that relies on services from a single hyperscaler turns that exit plan into a mere formality.
Our solutions
SUE builds cloud native platforms that comply with DORA and the ECB’s cloud requirements. We modernize your legacy systems in phases and then manage the platform for you, if you wish.
- Landing zones with a testable exit strategy: Hybrid and multi-cloud landing zones on AWS, Azure, or a European cloud, defined as Infrastructure as Code, with backups stored outside the primary provider. Kubernetes ensures workload portability. With the Data Sovereignty Assessment, we determine which data and workloads are permitted to run where.
- reverse architecting Legacy Modernization Withour “Application Modernization ” Assessment, we map out business rules, dependencies, and data flows in COBOL and other legacy code before changing a single line of code. We then modernize step by step: APIs around the core, transforming functionality into services, or targeted rebuilds. No big bang.
- Management with an audit trail: Automated deployments, Zero Trust, short-lived credentials, and Managed Kubernetes or Managed Cloud with observability. Every change is traceable, so you can show during an audit who changed what and when.
Projects we are proud of
Buckaroo Enhances Cloud Security and Simplifies PCI DSS Compliance with Wiz
How CarWise Is Accelerating Its Transition to SaaS with SUE
Our use cases in this sector
-
No More OS Management Under Kubernetes: In a highly regulated environment, a lot of time was spent managing traditional Linux VMs under Kubernetes. We replaced them with Talos Linux: an immutable operating system without SSH or a shell that you manage exclusively via an API. Patching is now an image upgrade instead of per-machine maintenance.
-
Temporary SSH keys instead of static credentials: Static SSH keys used in automation never expire and are difficult to trace, making them a recurring issue in audits. We had Vault generate temporary SSH keys that expire after use. A leaked key quickly becomes useless, and every access event is logged in the audit log.
Together with our partners
Modernize the code. Optimize the cloud. Run the platform.
SUE is a Dutch cloud native solutions partner that modernizes mission-critical applications, reduces cloud costs, and manages your platform. Specialists in Linux, Kubernetes, and the cloud.
29+
Years Experience
150+
Engineers and consultants
1.150+
Certifications
ISO
9001 & 27001
500+
Projects
75+
Research papers
Partner of progressive organizations
Frequently asked questions
All frequently asked questionsDiscuss your situation with an expert
Discuss your situation with an expert
* required