Intesa Sanpaolo's Core Banking Migration to Google Cloud Sets New Standard for Data Sovereignty in European Finance

Intesa Sanpaolo, Italy's largest bank, announced on July 2, 2026, the successful completion of a massive cloud migration project, moving over 800 core banking applications to Google Cloud. This significant undertaking utilized two Google Cloud regions located in Turin and Milan, hosted within TIM's data centers. The initiative aimed to enhance the bank's IT infrastructure, making it faster, more secure, AI-ready, and sustainable. Crucially, the arrangement fully satisfies the bank's data residency requirements under Italian and European regulations, with TIM managing the end-to-end governance and FinOps monitoring. The migration retired an equivalent number of legacy applications from the bank's on-premises infrastructure without recording any major incidents. This development is profoundly significant for practitioners in the financial services sector and other highly regulated industries. It provides a tangible example that large-scale cloud adoption is achievable even with stringent data sovereignty and compliance demands. For CIOs and engineering leaders, it validates a hybrid approach where global cloud providers partner with local telecommunication companies to offer localized cloud infrastructure. This model directly addresses concerns around the US CLOUD Act and GDPR, which have historically slowed cloud adoption in sensitive sectors. The successful execution by Intesa Sanpaolo demonstrates that it's possible to leverage the scalability and advanced services of a hyperscaler like Google Cloud while maintaining precise control over data location and governance. This migration fits into a broader, well-established trend of enterprises seeking to modernize their IT estates while grappling with evolving regulatory landscapes and the imperative to become 'AI-ready.' The concept of 'sovereign cloud' has gained considerable traction, driven by concerns over data residency, legal jurisdiction, and technological autonomy. This project exemplifies how financial institutions are moving beyond simple 'lift-and-shift' strategies towards more sophisticated replatforming and refactoring efforts that integrate cloud-native capabilities. The emphasis on FinOps monitoring and a comprehensive staff training plan, involving over 3,000 employees and 170 Google Cloud certifications, reflects a mature approach to cloud adoption that extends beyond technical implementation to organizational culture and financial accountability. In practice, this means that organizations in regulated sectors should actively explore sovereign cloud offerings and partnerships that can provide the necessary assurances for data residency and governance. It underscores the need for a robust, multi-faceted migration strategy that not only considers technical aspects but also legal, financial, and human capital elements. Practitioners should prioritize detailed application assessments to determine which workloads are suitable for such environments and invest heavily in upskilling their teams. Furthermore, the focus on AI-readiness within this migration highlights that future cloud strategies must inherently support advanced analytics and machine learning capabilities, making data governance and lineage critical from the outset. This case serves as a powerful precedent, demonstrating that regulatory compliance and cloud innovation are not mutually exclusive but can be achieved through strategic partnerships and meticulous planning.