Technology and AI for financial services firms

Technology and AI for firms where the data is the business.

Financial advice, wealth management, mortgages and payments run on trust and paperwork: fact-finds, ID documents, pension statements, suitability reports, client money. Your clients hand you the most sensitive information they own, the FCA expects you to look after it, and your board is now asking what you're doing about AI. Foundry runs the technology so you can evidence the first thing and answer the second without giving up control of the data.

Talk to Foundry

In your words

Sound familiar?

Common patterns in the working week of financial services firms, written the way they tend to sound. They are illustrations, not quotes from clients. If more than one of these is your week, keep reading.

A client's pension statements are in a WhatsApp thread on an adviser's personal phone.
Someone has been pasting client details into a free AI chat tool to draft letters. We found out by accident.
Consumer Duty landed and we're not sure our systems help us prove anything.
We passed the insurer's questionnaire, but honestly we guessed on two of the answers.
Someone left in March and their email is still forwarding to a personal address.
The suitability report takes a day to write and most of it is the same every time.

Your environment

What the business actually depends on.

Microsoft 365 for email, calendar and documents
Back-office, CRM and cashflow-modelling platforms, mostly cloud
Provider portals with individual logins per adviser
E-signature and secure messaging for client paperwork
Advisers working from home and client premises on laptops and phones
Document-heavy processes: fact-finds, annual reviews, suitability reports, onboarding

Your risks

Security, compliance, availability and data.

Email compromise leading to fraudulent instructions or diverted funds
Client identity and financial documents leaking through email, personal devices or consumer AI tools
FCA expectations around operational resilience, outsourcing and third-party risk
Consumer Duty and record-keeping obligations that need auditable systems
AI used without governance: no register, no data classification, no human oversight
Cyber-insurance conditions for MFA, endpoint protection and backups

Your problems

The IT frustrations these businesses run into.

The compliance officer is also the person who knows the passwords
Every provider portal has its own login and none of them are in a vault
Documents live in email, OneDrive, the back-office system and a filing cabinet
Nobody has tested whether the client files could be recovered
The board wants an AI plan; nobody knows where client data would go

The Foundry solution

Foundry runs the firm's technology to a standard you can show a regulator, then builds on it. Microsoft 365 configured and administered properly, every laptop and phone managed and encrypted, a password vault for the provider portals, MFA on everything, email security that stops the fraud attempts, backups that are tested rather than assumed, and a secure client workspace for documents that should never be attachments. On that foundation: workflows that take the repetition out of onboarding and reviews, and AI assistants deployed where your data governance says they should be, inside your own tenant where that is what the classification demands, with human approval and an audit trail you own. We design to support your obligations and give you the evidence; interpreting them stays with you and your compliance advisers.

The platform

Your Foundry stack

The capabilities of the platform that matter most for financial services firms, and what each one is for. Take what you need.

Foundry Secure

→ MFA, Conditional Access, EDR, email security, password vault for provider portals, evidence for insurers and regulators

Foundry Support

→ Laptops and phones managed and patched, Microsoft 365 administration, starters and leavers, suppliers

Foundry Connect

→ Microsoft 365, email, Teams, identity and licensing, cloud telephony

Foundry Portal

→ Branded client workspace for fact-finds, ID and statements, with access that can be revoked

Foundry AI

→ Document and knowledge assistants over your own client files, deployed in your own tenant, with approval and audit

Foundry Automation

→ Client onboarding, document chasing, annual-review preparation and reporting as workflows

Foundry Cloud

→ Azure infrastructure for back-office integrations and private AI environments, Microsoft 365 backup, tested recovery

Foundry Engineering

→ Integrations between back office, CRM and provider data; internal tools no product quite fits

FAQ

Questions financial services firms might ask

Will this help with FCA and Consumer Duty obligations?

We are a technology partner, not a compliance consultancy, so we won't interpret the rules for you and we won't tell you a product makes you compliant. What we do is run the systems to a documented standard (access control, MFA, encryption, backup, logging) and give you the evidence, so when your compliance consultant or the regulator asks how client data is protected, there's a clear answer. A firm remains responsible for what it outsources; we build so that responsibility can be evidenced.

Can we use AI with client data at all?

Yes, if it is designed rather than improvised. The first step is stopping client data going into consumer AI tools with unknown terms. The second is choosing a deployment model to match the data: an enterprise API under commercial terms for minimised content, or a model running inside your own Azure subscription and region for anything sensitive, with retrieval limited to what each adviser may see, human approval on anything consequential, and an audit log you own. We design that architecture with you and put it in writing.

Our advisers use their own phones. Is that a problem?

It's a common one. We can manage work data on personal phones without touching personal data, so client documents stay inside managed apps and can be wiped when someone leaves, while photos and messages stay private.

Can you help with the cyber-insurance questionnaire?

Yes. Insurers ask about MFA, endpoint protection, backups, patching and email security. Because we run those controls, we can answer with specifics and evidence rather than best guesses.

See what the first call covers