Technology & Data

Domain ID	BD09
Owner	Chief Technology Officer
Systems	SD01 · SD02 · SD03 · SD04 · SD05 · SD06 · SD07 · SD08
Repos	bank-core, bank-kyc, bank-aml, bank-payments, bank-credit, bank-risk-platform, bank-platform, bank-app
Applicability	Platform — The Technology and Data domain owns and operates all eight system domains. These are the platform infrastructure that both Track 1 and Track 2 run on.

Core banking platform, cloud infrastructure, data platform (Postgres + Snowflake), security, API layer, DevOps, and data governance.

Functions

Core banking platform (ledger, Postgres) · Snowflake data platform · API gateway & microservices · Cloud infrastructure & DevOps · Cybersecurity & SOC · Data governance & quality · IAM · Change & release management

All 8 system domains sit within BD09

Every system domain is owned by BD09 from a technology operations perspective, while individual modules may be built and maintained by the domain teams (e.g. BD07 owns the AML model configuration, BD05 owns credit scorecard configuration).

Risk domains

• D05 Data & Technology
• D09 Operational Resilience
• D10 Privacy & Data Rights

Policies owned

• DT-001 — Information Security Policy
• DT-002 — Cybersecurity Policy
• DT-003 — Technology Risk Management Policy
• DT-004 — Data Governance Policy
• DT-006 — Cloud & Infrastructure Policy
• DT-007 — Change and release management
• DT-008 — Third-Party & Outsourcing Risk Policy
• DT-009 — AI & algorithm policy
• DT-010 — Environments and deployment standards
• DT-011 — AI development guardrails
• DT-012 — Ledger Data Contracts & Event Publication Policy
• OPS-001 — Business Continuity Policy
• OPS-002 — Disaster Recovery Policy
• OPS-003 — Incident Management Policy
• OPS-006 — Change Management Policy
• PRI-003 — Personal Information Retention & Destruction Policy
• PRI-005 — Privacy Impact Assessment Policy
• REP-005 — Data Quality & Assurance Policy

Policies applicable

• OPS-001 — Business Continuity Policy
• PAY-006 — PCI DSS Compliance Policy
• PRI-005 — Privacy Impact Assessment Policy
• REP-005 — Data Quality & Assurance Policy

---

Compiled 2026-05-22 from source/entities/business-domains/BD09.yaml