Bank of Sydney has begun rebuilding the engine room of its business, shifting its core banking system onto Infosys Finacle running in the cloud, in a move the lender is casting as the foundation for a more automated and eventually AI-driven bank. For a smaller player in a market dominated by the big four, the decision is less about chasing headlines and more about clearing the technical debt that has long held mid-tier and challenger banks back.
The news, first reported by CRN Australia, positions the cloud migration as step one of a longer journey. The order matters. You cannot bolt genuinely useful artificial intelligence onto a bank that still runs its accounts, payments and lending on rigid, decades-old systems. Before a bank can offer real-time fraud detection, personalised product recommendations or agentic customer service, it needs data it can actually reach and a platform that can scale on demand. That is the promise of putting a modern core banking product like Finacle on cloud infrastructure.
Why the plumbing comes first
Core banking is the unglamorous heart of any lender. It is the ledger that tracks every deposit, withdrawal, loan repayment and interest calculation. Legacy cores, some of them written in programming languages that predate the internet, are notoriously difficult to change. Adding a new product can take months. Extracting clean data for analytics can be a project in itself. For a bank that wants to move quickly on AI, that inertia is fatal.
Infosys Finacle, the banking suite owned by Indian technology giant Infosys, is one of the platforms competing to replace those ageing systems worldwide. Its pitch to institutions like Bank of Sydney is straightforward: a componentised, cloud-native core that exposes data through modern interfaces, so the bank can plug in analytics, machine learning and third-party services without ripping everything out each time. Running it in the cloud rather than a bank-owned data centre adds elasticity, letting the lender scale computing power up and down as demand shifts.
The phrase doing the heavy lifting in the announcement is “AI-ready”. It is worth treating that with a degree of caution, because vendors and banks alike have learned that the term sells. What a cloud core genuinely delivers is the precondition for AI, not the intelligence itself. Cleaner data, faster deployment and a platform that can host modern tooling are real benefits. The customer-facing AI features tend to arrive later, and only if the bank invests in the models, governance and staff to build them.
Two ways to read the move
Supporters of this kind of modernisation argue it is exactly what smaller Australian banks need to stay relevant. The big four have spent billions on technology, and the gap in customer experience can be stark. A challenger that modernises its core can, in theory, punch above its weight, launching new products faster and offering the kind of digital experience customers now expect from any app on their phone. On this view, Bank of Sydney is making a sensible, if overdue, bet on its own future.
Sceptics point to the long history of core banking transformations that ran late, blew their budgets or delivered less than promised. Replacing the core of a live bank has been likened to changing the engine of a plane in flight. The projects are complex, the migration of decades of customer data is fraught, and the payoff can be slow to materialise. There is also a strategic question worth asking. A bank that moves its most critical system onto a single vendor’s cloud-hosted platform gains agility but also deepens its dependence on that vendor and the cloud provider underneath it. Concentration risk of this kind has moved up the agenda for regulators globally.
The Australian stakes
For Australia, the Bank of Sydney project is a small but telling data point in a much larger shift. The country’s financial regulators have been sharpening their focus on both operational resilience and the risks that come with heavy reliance on a handful of cloud and technology suppliers. The Australian Prudential Regulation Authority’s standard on operational risk management, known as CPS 230, has pushed banks and insurers to map their critical operations and manage the third parties that support them. A move like this sits squarely inside that conversation. It can strengthen resilience by retiring brittle legacy systems, and it can create new dependencies that need careful oversight.
There is also a sovereignty thread that keeps surfacing in local debate about AI and cloud. As Australian institutions push more of their most sensitive workloads onto global platforms, questions about where data sits, who can access it and how it feeds AI systems become sharper. Bank of Sydney is a modest player, but the pattern it represents, mid-tier banks modernising cores in the cloud to prepare for AI, is spreading across the sector. The cumulative effect on the resilience and independence of Australia’s financial plumbing is a legitimate policy question, not just an IT procurement footnote.
For customers, the near-term change is likely to be invisible. Successful core migrations are the ones nobody notices, where accounts keep working and the improvements arrive quietly as faster product launches and smoother digital services. The AI dividend, if it comes, will show up later, in areas such as fraud monitoring that catches suspicious activity in real time, faster loan decisions, and support tools that understand a customer’s history rather than starting from scratch on every call.
What’s next
The real test lies ahead. Laying a cloud foundation is the beginning of the work, not the end of it. The bank will need to migrate its data cleanly, keep services running through the transition, and then actually build or buy the AI capabilities that justify the effort. Watch for how quickly new products appear on the modernised platform, and whether the bank can show tangible AI-driven improvements rather than talking about readiness in the abstract. For the wider Australian market, the more interesting question is how many other challenger and mid-tier lenders follow the same path, and how regulators respond as the sector’s most critical systems increasingly run on someone else’s cloud.
Sources: CRN Australia.
