Lloyds Banking Group executed a £4 billion technology overhaul powered by Thought Machine, successfully decommissioning over 500 legacy applications and migrating 46% of its digital tools to cloud environments.33 The modernized core enables Lloyds to deploy generative AI across its operations and servicing teams, drastically cutting processing complexity for its 21 million app users while currently managing £1 billion in deposits on the new engine.33
[4] 2 Regional and Greenfield Deployments [source]
Western Union utilized Mambu's composable architecture to launch a mobile-first digital banking app across Germany, Italy, Romania, and Poland in just seven months.34 Capitalizing on this agility, the company modernized its entire European payment operations shortly after, migrating all SWIFT, SEPA, and TARGET2 payments to Mambu in six months and completely decommissioning its legacy payments hub.34
In Chile, Banco de Crédito e Inversiones (Bci) launched its digital bank, MACH, on Mambu's platform in just 12 months. Relieved of infrastructure maintenance and supported by seamless API integration, MACH's engineering teams scaled the platform to 4.2 million users, establishing it as the second-largest bank in Chile by customer base.35 Similarly, Germany's OYAK ANKER Bank completed a full-stack migration to Mambu's cloud-native core with implementation partner Innovance, replacing rigid legacy stacks with an event-driven workflow that significantly increased market responsiveness.36
[4] 3 Transaction Throughput and Latency Benchmarks [source]
Modern UX requires low-latency backend execution. Thought Machine enforces rigorous performance gates, utilizing general availability releases rather than experimental code during testing to prove enterprise resilience. Certified baseline testing on a simulated portfolio of 30 million live accounts processing over 1 billion transactions yielded precise metrics:
- High-priority transactions (Online Postings): 4,769 transactions per second (TPS) with 95% of responses executing in under 500 milliseconds.37
- Live balance inquiries: 15,035 TPS with 95% of responses delivered in under 200 milliseconds.37
- End-of-day processing: Completed in 90 minutes at a rate of 20,676 TPS.37
Advanced lab studies pushing the platform to 70 million live accounts sustained 8,000 TPS for high-priority commands, executing 95% of responses in under 151 milliseconds.37
[5] The Regulatory Imperative: DORA Compliance [source]
The European Union’s Digital Operational Resilience Act (DORA), enforced on January 17, 2025, mandates that all financial entities and their critical ICT service providers maintain robust capabilities to withstand, respond to, and recover from severe operational disruptions.38 The legislation impacts 22,000 EU financial institutions, levying penalties for non-compliance that reach up to 10% of a firm's global annual turnover or 1% of daily worldwide turnover for critical third-party providers.2139
DORA permanently shifts core banking modernization from a strategic option to a strict regulatory mandate. Legacy monoliths, crippled by batch processing and fragmented data architectures, structurally fail to meet DORA’s stringent reporting and testing requirements.
[5] 1 Incident Detection and the 24-Hour Reporting Mandate [source]
DORA requires financial institutions to classify and report critical ICT-related incidents to national competent authorities within a strict 24-hour window.40 Legacy environments force compliance teams to conduct extensive, manual cross-referencing across disconnected databases to assess the scope of a breach. Cloud-native platforms utilizing event sourcing and centralized API gateways provide immediate, immutable audit trails, allowing security teams to instantly isolate anomalies and automatically generate compliance evidence.41
[5] 2 Third-Party Concentration Risk [source]
The regulation forces banks to extend oversight deep into their supply chains, treating third-party vendor risk as a primary vulnerability.42 Financial entities must conduct comprehensive concentration risk assessments prior to onboarding. A bank relying entirely on a single cloud provider faces unacceptable systemic risk under DORA's framework; the regulation demands diversification, verifiable failover capabilities, and specific "key contractual provisions" that grant the bank auditing and termination rights over vendors.3943
[5] 3 Threat-Led Penetration Testing (TLPT) [source]
Entities deemed critical to the financial system must undergo Threat-Led Penetration Testing (TLPT) every three years, requiring active participation from their critical technology providers.44 Legacy cores lack the agility to withstand live-fire cyber simulations without service degradation. Modern platforms utilizing continuous integration/continuous deployment (CI/CD) pipelines and automated Kubernetes container orchestration seamlessly execute automated rollbacks and traffic failovers during stress tests.45 According to McKinsey, financial institutions are allocating between €5 million and €15 million strictly to overhaul systems to meet DORA operational resilience baselines.46
References
[1] Crassula (2026). "What is a core banking system?". Crassula Guides. 2: CCG Catalyst (2025). "Sector Spotlight Core Banking Systems — First Generation". CCG Catalyst. 3: Redwerk (2026). "Legacy Banking System Digital Transformation". Redwerk Blog. 4: i-exceed (2026). "Digital Banking Onboarding Trends". i-exceed Blog. 5: Kernel Growth (2025). "Why Banking First Implementation Matters". Kernel Growth. 6: 10x Banking (2024). "The Case for Modernizing Legacy Core Banking Systems". 10x Insights. 7: Redwerk (2026). "Legacy Banking System Digital Transformation". Redwerk Blog. 8: UX Planet (2018). "10 painful real-world examples of how banking's legacy destroys customer experience". UX Planet. 9: Coders.dev (2026). "Banking UX Design Challenges and Opportunities". Coders.dev Blog. 10: BestDevOps (2026). "Top 10 Core Banking Systems Features Pros Cons Comparison". BestDevOps. 11: DataIntelo (2026). "Event Sourcing with CQRS in Core Banking Market". DataIntelo Reports. 12: Mavidev (2025). "CQRS and Event Sourcing in Financial Systems". Mavidev Blog. 13: Thought Machine (2023). "Product Development". Thought Machine Blog. 14: Thought Machine (2025). "Vault Core". Thought Machine. 15: Mambu (2026). "Process Orchestrator". Mambu Insights. 16: BestDevOps (2026). "Top 10 Core Banking Systems Features Pros Cons Comparison". BestDevOps. 17: Tokyo FinTech (2019). "No Mambu Jambo: The Power Behind N26". Medium. 18: Backbase (2026). "Open Banking Marketplace". Backbase Blog. 19: SDK.finance (2026). "Top Digital Banking Software Providers". SDK.finance Blog. 20: Temenos (2023). "10 Tips for Onboarding". Temenos Resources. 21: Insoftex (2026). "What is digital banking meaning types and benefits". Insoftex Insights. 22: The Kentro (2026). "Legacy System Modernization Without the Big Bang Risk". The Kentro Insights. 23: Pfuetze, T. (2025). "The Great Core Banking Awakening". Medium. 24: V2 Solutions (2025). "Progressive Modernization in Finance". V2 Solutions Whitepapers. 25: Avasant (2026). "Banking Business Process Transformation 2026 RadarView". Avasant Reports. 26: ERP for Private Equity (2025). "What is the ERP Implementation Process". ERP for PE. 27: Inspirria (2020). "Know Why NetSuite Cloud ERP Best System". Inspirria Blog. 28: Multishoring (2024). "On-Premise to Cloud Migration Comprehensive Guide". Multishoring. 29: Scalosoft (2025). "Migration and Modernization Services". Scalosoft Cloud. 30: Finastra (2025). "Choosing your deployment path: balancing control and flexibility". Finastra Viewpoints. 31: Thought Machine (2022). "JPMorgan Chase Hall of Innovation". Thought Machine Press Releases. 32: TechTarget (2024). "JPMorgan Chase technology goal: Innovation with cost control". TechTarget. 33: NeonTri (2026). "Digital transformation examples in banking". NeonTri Blog. 34: Mambu (2025). "Western Union". Mambu Customers. 35: Mambu (2025). "MACH". Mambu Customers. 36: Mambu (2025). "OYAK ANKER Bank Core Migration". Mambu Insights. 37: Thought Machine (2025). "Performance Proven the Right Way". Thought Machine Whitepapers. 38: Palo Alto Networks (2025). "What is the DORA Act". Cyberpedia. 39: Dotfile (2025). "DORA compliance requirements for financial institutions 2025 guide". Dotfile Resources. 40: Consentmanager (2025). "DORA EU". Consentmanager Legal. 41: Mirai Risk Tech (2025). "How DORA will affect banks and their balance sheet management vendors". Mirai Risk Tech Articles. 42: Panorays (2026). "What is Digital Operational Resilience Act". Panorays Blog. 43: Palo Alto Networks (2025). "What is the DORA Act". Cyberpedia. 44: IBM (2025). "DORA". IBM Cloud Compliance. 45: ViitorCloud (2025). "Legacy to Cloud Native System Modernization". ViitorCloud Blog. 46: SBS Software (2024). "DORA impact financial cyber resilience". SBS Insights [source]