Image generated with AI
Regulators increasingly expect demonstrable control over ICT risks: where data resides, who can access it, how services can be exited, and how quickly operations can recover. For many institutions, complex cloud dependencies make these requirements harder to evidence. T Cloud Public provides banks and insurers with a public cloud operated by Deutsche Telekom under EU law, certified to C5 and ISO 27001, with encryption keys that remain under customer control. Our compliance experts help translate DORA, NIS2 and the EU AI Act into operational controls, audit-ready evidence and tested exit strategies.
A sovereign cloud combines three dimensions:
T Cloud Public is designed to support organizations with demanding security, compliance and sovereignty requirements, including banks and insurers.
Yes. T Cloud Public is designed to support key DORA requirements through transparent subcontractor governance, contractual audit rights, EU data residency, recognized security attestations and workload portability. Our governance, risk and compliance services help organizations implement DORA-related documentation and controls.
Yes. T Cloud Public supports Bring Your Own Key (BYOK) and Hold Your Own Key (HYOK) models. With HYOK, encryption keys remain under customer control, helping organizations maintain control over access to encrypted data. These capabilities can support data protection, sovereignty and compliance requirements relevant to banking and insurance organizations.
Yes. Insurers process highly sensitive health, claims and policyholder data and are subject to DORA alongside sector-specific supervisory requirements.
T Cloud Public supports insurers in running policy administration systems, claims analytics and AI workloads on European infrastructure. Our governance, risk and compliance specialists have experience with Solvency II, VAIT and DORA requirements related to outsourcing, operational resilience and cloud adoption.
We assess regulatory obligations, data flows and third-party dependencies, then help implement controls aligned with DORA, NIS2, ISO 27001 and the EU AI Act. Services include penetration testing, vulnerability assessments and audit-ready reporting. Our methodology is informed by Deutsche Telekom's experience operating large-scale, security-critical infrastructure.
DORA requires financial institutions to maintain realistic exit strategies for critical ICT services. T Cloud Public is based on open standards that support workload portability and help reduce vendor lock-in. For organizations using multiple cloud providers, T-Systems offers independent SLA monitoring and governance services that support oversight and documentation of provider performance. AI workload-routing options can also help direct workloads to alternative European providers where sovereignty requirements apply.
