Google Cloud
Google Cloud is the cloud business of Google and rents computing power, storage, databases, security services and AI models to companies and public bodies. Customers run their applications in Google data centers and pay for the capacity they use, so they do not have to buy and operate their own servers. Google Cloud has customers in more than 200 countries and territories.
Banks, exchanges and insurers are one of the industries for which Google Cloud builds its own products and contract terms. They use the platform for trading systems, risk models, regulatory reporting and AI assistants for their staff, and they can keep data inside regions such as Frankfurt, Berlin or Zurich. Contracts for regulated customers follow the outsourcing rules of European supervisors.
AI agents and AML risk scores for banks
Google Cloud launched Gemini Enterprise for Financial Services on 25 August 2026, an AI package for capital markets and corporate banking that started in preview. The package contains a Financial Research agent managed by Google, more than 50 skills for financial roles and 13 connectors to data sources such as FactSet, LSEG, MSCI, S&P Global and SEC Edgar. Deutsche Bank worked as a design partner for the research agent, and CME Group already uses the package in its own workflows.
For financial crime, Google Cloud sells Anti Money Laundering AI, an API that trains on the core banking data and suspicious activity reports of a bank. AML AI produces monthly risk scores for retail and commercial banking customers, with explanations that analysts, auditors and supervisors can follow. The model uses only the data that the bank supplies, and banks use the scores to replace or complement older transaction monitoring.
Deutsche Bank, Commerzbank and other European bank clients
Deutsche Bank and Google Cloud signed a letter of intent for a multi-year strategic partnership in July 2020, after the bank had asked several cloud providers for proposals in February of that year. The bank planned to move its existing systems in phases and to use data science and machine learning for tasks such as cash flow forecasting for treasury clients.
Commerzbank has used Google Cloud since 2017 and signed a five-year strategic partnership in March 2021 to move a large number of banking applications to the cloud. The first customer application on the platform was a digital account analysis that helps the bank and its customers process loan applications faster. Google Cloud also takes part in the Collaborative Cloud Audit Group, in which European financial firms audit cloud providers together.
BNP Paribas signed a five-year partnership on 24 September 2026 that brings Gemini models into LLM@CIB, the internal AI assistant of its corporate and institutional bank with more than 65,000 users. CaixaBank in Spain extended its agreement with Google Cloud on 9 October 2026 until 2033 and will deploy Gemini Enterprise agents for document work and data analysis. In the United Kingdom, Lloyds Banking Group uses Gemini and machine learning for its customer service.
Sovereign cloud in Germany and Switzerland
Google Cloud runs two regions in Germany, Frankfurt (europe-west3) and Berlin (europe-west10), and one in Switzerland, Zurich (europe-west6), each with three zones. With the Google Cloud Data Boundary, a customer fixes the region where its core data is stored, controls its own encryption keys and has every administrative access logged. The Switzerland Data Boundary package keeps data in Swiss regions at no extra charge, and a premium variant limits support access to staff based in the EU.
T-Systems and Google Cloud agreed in September 2021 to build a sovereign cloud for German organizations, in which T-Systems manages encryption and identity and supervises access to the German facilities. On 20 May 2026, Thales announced a new sovereign cloud for Germany based on Google Cloud Dedicated, run on isolated infrastructure by a German company that Thales fully owns. The offering is in preview, aims for general availability by the end of 2026 and targets the German C5 and C3A criteria, with disaster recovery across a sister region that S3NS runs in France.
Christoph Böhm, Chief Information Officer and Chief Operating Officer of Deutsche Börse, welcomed the Thales offering as a way to scale highly regulated processes in the cloud across borders. For classified data, Google Distributed Cloud air-gapped runs fully disconnected from the internet and cannot be shut down remotely by Google. Banks that compare these models for a sovereign cloud check who operates the infrastructure and which law applies to the operator.
Universal Ledger, blockchain nodes and Web3 services
Google Cloud Universal Ledger, or GCUL, is a private and permissioned distributed ledger for wholesale payments and the tokenization of assets. CME Group announced on 25 March 2025 that it had completed the first phase of integration and testing and planned direct tests with market participants, with the aim of launching new services in 2026. In the Universal Ledger API, still a pre-GA offering, accounts hold tokens that represent commercial bank money, and a clearinghouse sets the limits within which token managers mint and burn them.
Blockchain Node Engine runs dedicated blockchain nodes as a managed service, so a company gets its own RPC and WebSocket endpoints and pays a flat hourly fee whatever the number of requests. Blockchain RPC is in public preview and free during the preview, and it gives shared access to Ethereum mainnet and testnet with up to 100 requests per second and 1 million per day. The Web3 startup program of Google Cloud gives young blockchain companies up to $200,000 in credits for Google Cloud and Firebase over two years.
DORA, BaFin and FINMA rules for cloud outsourcing
Since 17 January 2025, banks, insurers and investment firms in the EU apply the Digital Operational Resilience Act, whose Article 30 lists the clauses that a contract with an ICT provider must contain. For services that support critical or important functions, Article 28 also requires exit strategies, so that a bank can move to another provider or back in-house. Google Cloud offers updated contract terms for Google Cloud, Google Workspace and SecOps services that cover Article 30 and the technical standard on subcontracting, plus a guide for the register of information.
In November 2025, the European Supervisory Authorities put Google Cloud EMEA Limited and its subsidiaries on their list of 19 designated providers, which makes the company one of the critical ICT third-party providers under direct EU oversight. A Lead Overseer from one of the three authorities now assesses how the provider manages ICT risk, and Google Cloud points out that this oversight does not replace the duties of each financial entity under DORA.
In Germany, BaFin explained its view of cloud outsourcing in a supervisory notice of February 2024 (in German), which adds no new requirements and has boxes on what changes under DORA. Google Cloud states that its contracts for German financial institutions address this guidance and publishes mappings for Google Cloud and Google Workspace. For Swiss banks and insurers, Google Cloud maps its contracts in the same way to FINMA Circular 2018/3 on outsourcing.
Upcoming fintech and finance events in Germany
What is Google Cloud?
Google Cloud is the cloud computing business of Google, which sells computing capacity, data platforms, security services and AI models such as Gemini to companies and public bodies. Financial institutions use it for trading, risk calculation, reporting and AI assistants, under contract terms written for regulated firms.
DORA contract terms for banks and insurers
Google Cloud offers financial entities in the EU updated DORA contract terms that cover Article 30 of the regulation and the technical standard on subcontracting. Customers request these terms from their Google Cloud representative, and Google Cloud also publishes mappings that show how its contracts meet Article 30.
Regions in Frankfurt, Berlin and Zurich
The Frankfurt region of Google Cloud has the code europe-west3, the Berlin region is europe-west10 and the Zurich region is europe-west6. Each of the three regions has three zones, so a bank can spread an application across separate zones without moving data out of Germany or Switzerland.
What is GCUL?
GCUL stands for Google Cloud Universal Ledger, a permissioned distributed ledger that Google Cloud offers to financial institutions for payments and tokenized assets. CME Group tested it for wholesale payments and the tokenization of assets, and the API is available as a pre-GA offering.
Sovereign cloud with T-Systems and Thales
T-Systems and Google Cloud agreed in September 2021 to deliver sovereign cloud services for German companies, the public sector and healthcare organizations. Thales followed in May 2026 with a German company of its own that will run Google Cloud Dedicated on isolated infrastructure with local German staff.
Google Cloud and Finance Loop
Finance Loop covers cloud providers, data residency and the DORA oversight of ICT suppliers in the Digital Infrastructure & Sovereignty track, which includes the sovereign cloud offers for banks in Germany and Switzerland. Google Cloud was a partner of CV Summit 2026, the blockchain and AI conference of CV Labs at the Kongresshaus Zurich on 29 and 30 September 2026.
Finance Loop is a professional network and has the goal of driving the institutional use of emerging technologies in finance, such as AI, digital payments, cloud and blockchain solutions. Finance Loop helps its members build skills and personal networks in these fields: Investment & Digital Assets, Payments & Digital Money, Digital Infrastructure & Sovereignty, and Risk & Compliance.