Avaloq

Models are the newest layer on a core banking platform trading since 1985, and its ledger, payments and securities trading run intact without them. Where they do sit inside regulated work is corporate actions processing, a back office obligation with settlement consequences when it goes wrong.

Avaloq says its agents automate work without compromising accuracy, compliance or trust, which names a result rather than a control. The corporate actions agent decodes SWIFT messages and prospectuses on its own and passes structured data into the core banking system, with no review step, confidence threshold or exception queue described on that path. Corporate actions carry settlement consequences, so this is the path where an unreviewed error reaches account holders.

A corporate action processed wrongly produces incorrect entitlements, and the loss lands on identified account holders. The one performance figure, 98 percent accuracy for the corporate actions agent, comes from the adviser quoted on a Datos Insights award, with no test set, method or exception rate behind it. A bank's model risk team could not reproduce it, so it works as a headline rather than as validation.

Avaloq's corporate actions agent won a 2025 Datos Impact Award in wealth management, and the adviser quoted on the award puts it at 98 percent accuracy, up to 40 percent time savings in preparing multilingual notifications and live for 80 percent of Avaloq's Banking Operations clients. Those figures carry no named client and no stated method. Named institutions speak for the platform as a whole, with LGT's chief executive on running every banking unit on one system and RBC Wealth Management on moving its Asia platform to the public cloud.

Under the business process model the company runs client banking operations from its own hubs, so its staff and agents handle records of institutions that compete with one another. Whether models learn across those institutions, and where the software business ends and the operations business begins, is never drawn.

A core banking platform holds the full transaction and holdings record of identified individuals. Avaloq's privacy notice covers its websites and social media pages, not the data clients process on the platform. Its trust center lists the General Data Protection Regulation and the Swiss Federal Act on Data Protection among its frameworks and records data retention schedules and deletion of customer data at exit as controls, without the contract terms that would put them in a client agreement.

Avaloq runs a public trust center listing ISO 27001:2022 and ISO 22301:2019, the business continuity standard, with the main certificates, the ISO 27001 annex and the statement of applicability among its resources. SOC 2 sits on the same list with no report type or period, and the ISO 27001 certification covers several products, services and internal processes rather than the whole company. The trust center also lists the Digital Operational Resilience Act and Swiss Financial Market Supervisory Authority (FINMA) Circular 2023/1 among its frameworks.

Clients hold the authorizations, and the company claims no financial license or regulator run assessment of its models. Its operations business does sit inside outsourcing arrangements that supervisors examine under operational resilience rules, though that is a client obligation, not a vendor credential.

Governance of the agent line is undocumented, with no framework, model documentation or independent assessment of an AI management system. Decision support reaching advisers and their clients carries no published fairness evaluation.

Avaloq publishes nothing on who bears the loss when an agent or a managed service gets a result wrong. When the vendor runs the process as well as the software, the line between a product defect and a service failure is what a contract must settle, and none of it is public. An account holder hit by a mishandled corporate action has no described route to a determination.

For its agents Avaloq names no base model, provider, version or hosting arrangement, and the award text says only that the corporate actions agent uses large language models and agentic automation. The parent group, NEC, is named as a source of research in artificial intelligence, which points toward where models may originate without identifying one.

Core banking, portfolio management and digital channels share one architecture built for multiple entities and jurisdictions, so the platform is the core rather than a layer above it. A partner network adds named portfolio analytics, advisory content and securities finance connectivity providers.

Cloud service or on premises, both developed and operated by the vendor, plus fully outsourced operations, answer the first question a bank under a data localization rule asks. Residency regions, tenancy and where the models themselves run are unstated.

Platform, operations service and agent line all trade by quote, with no rate published. Several contracting models run side by side, and nothing shows whether the model layer is bundled, priced per seat or charged by consumption.

More than 170 institutions in over 35 countries hold more than four trillion Swiss francs of client assets on the platform, with RBC Wealth Management and BDO Unibank named. Hubs in Singapore and Manila serve Asia Pacific, and a 2026 group partnership extends delivery into South Africa, Kenya and Nigeria.