How dependent is your IT on individual cloud, software and platform providers? With the ti&m Digital Sovereignty Check, we create transparency within 2-3 weeks around critical dependencies in AI, applications, data management, platforms and infrastructure.

You receive a prioritised roadmap with concrete options for action: from exit strategies and multi-cloud approaches to EU provider and data residency scenarios. Directly aligned with your DORA requirements for ICT third-party risk as well as relevant requirements from the EU Data Act and BaFin cloud guidelines.

Talk to us about the ti&m Digital Sovereignty Check.

DORA Art. 13 para. 6 requires ICT security training for employees and management. Our masterclass fulfils this requirement in a practical way and strengthens your teams’ secure coding expertise in line with Art. 25.

The masterclass combines short theory sessions with interactive labs on SQL injection, broken access control, cryptography, CORS and CSRF. Participants work with realistic exploits and fixes instead of classroom-style teaching.

The result: documented security awareness, a better understanding of secure software development and reliable evidence for your DORA audit. Available as a modular Basic, Professional or Custom Class.

Talk to us about the masterclass.

PSD3 and the Payment Services Regulation (PSR) are changing authorisation management in payments. Account-servicing payment service providers with online-accessible payment accounts will in future have to provide a dashboard that enables customers to view third-party access in real time and revoke permissions at any time with a single click.

We deliver not only the dashboard, but also the foundation beneath it. The starting point is a technical Consent Architecture Assessment: your IAM and core banking reality, the comparison against the six mandatory PSR requirements and concrete architectural decisions. Within 2-3 weeks, you know where you stand and what needs to be done. Those who build a clean architecture today can serve PSD3 and the coming open finance wave, FIDA, on the same foundation.

The compliance deadline is expected to become effective in early 2028.

Talk to us about a Consent Architecture Assessment.

Banks and financial institutions with established Java/JEE landscapes are under pressure from cloud and licensing requirements. Those still running on JBoss, WildFly or WebSphere now face proprietary licensing costs and a DORA concentration risk. We migrate JEE monoliths incrementally to Quarkus. Without a big bang and with demonstrable results in ongoing production.

The result: up to 96% faster start-up times, 88% less memory consumption and cloud-native deployments. Four migration patterns - Strangler Fig, Lift-and-Reshape, Greenfield-Sidecar and AI-assisted extraction - ensure controlled modernisation. AI accelerators support code analysis, documentation and refactoring.

Talk to us about a migration assessment.