GRA
Spatial financeWhere capital meets hazard, exposure and transition
Financial technology and transformation
Technology changes the risks the financial system carries: models and automation in credit and underwriting, digital platforms and payment rails, digital assets, and the cryptographic transition quantum computing will force. The Global Risks Alliance (GRA) studies them through research and professional learning. It builds, sells, endorses and operates no financial technology, and advises on no product or transaction. Part of the Global Risks Alliance home, drawing on the technology and operational risk platforms.
01Register
Three pages under financial technology and transformation.
02Why it matters
Technology moves risk faster than institutions adapt.
New technology rarely creates a wholly new kind of loss. It changes the speed, scale and concentration of losses the industry already knows: operational failure, model error, fraud, liquidity runs and third-party dependence.
Speed
Faster transmission
Instant payments, automated trading and digital channels let a shock travel across institutions in hours rather than weeks, which shortens the time supervisors and boards have to act.
Concentration
Shared providers
Many institutions now rely on the same cloud, data and model providers. A single failure can reach many balance sheets at once, as the transmission view on the GRA home page shows.
Opacity
Harder to explain
Complex models and automated decisions can be difficult to validate, explain to customers or challenge, which raises conduct, fairness and model risk together.
03Rule status
Technology rules in force and pending, October 2026.
| Rule | Status |
|---|---|
| EU AI Act high-risk duties for credit scoring | From 2 December 2027 after the AI Omnibus |
| US model risk guidance SR 26-2 | Issued April 2026 |
| DORA | Applies since January 2025 |
| MiCA | Fully applicable since December 2024 |
| NIST post-quantum standards | Published August 2024 |
Pending items are named as pending. GRA rechecks each status against the issuing body before republishing, because technology rules have moved repeatedly since 2024.
04Research lines
Three lines of work, one evidence standard.
- 01
AI and automation
How statistical and machine-learning models are validated, governed and overseen in credit, underwriting, fraud detection and operations, and what happens when many institutions rely on similar models. See AI and automation.
- 02
Digital assets research
The prudential, operational and conduct risks of tokenised instruments, stablecoins and distributed ledgers, studied for professional learning and never as trading, custody or investment guidance. See digital assets research.
- 03
Quantum and cryptographic transition
What the move to quantum-resistant cryptography means for payments, records, digital identity and continuity planning, and why long-lived data is exposed today. See quantum and cryptographic transition.
Each line publishes research only after review, with its evidence label, sources and limits stated beside every finding.
05Responsible innovation
Questions GRA asks of any new technology.
- Which existing financial risks does it amplify, and through which channels?
- Who depends on whom, and where does concentration build up across institutions?
- Can its outputs be validated, explained and contested by the people they affect?
- What fails safely, what fails together, and how is service restored?
- Which questions belong to supervisors, auditors or the institution itself, and not to an industry body?
GRA describes technologies to help institutions ask better questions. It does not evaluate vendors, recommend products or certify any system. The science of each technology is described by The Global Centre for Risk and Innovation (GCRI) in its innovation and technological change pages.
06Status
What is available now.
Information and enquiries are open today. Research outputs appear through publications and professional briefs once they pass review. Researchers and institutions can propose a question to the contact form. The acknowledgement gives a reference and names the next step.
07Sources
Where this page’s references lead.
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
- EU AI Act (Regulation 2024/1689) as amended by the AI Omnibus, Regulation 2026/1744 (credit-scoring high-risk duties from 2 December 2027)
- US interagency revised guidance on model risk management, SR 26-2 (April 2026), superseding SR 11-7
- EU Digital Operational Resilience Act, Regulation 2022/2554 (applies from 17 January 2025)
- EU Markets in Crypto-Assets Regulation (MiCA), Regulation 2023/1114
- NIST post-quantum cryptography standards FIPS 203, 204 and 205 (August 2024)
08Pages
Pages in Financial technology and transformation.
09Questions
Questions and answers.
Does GRA test or rate fintech products?
No. GRA does not test, rate, certify or endorse any product, vendor or platform. Its research describes risks and controls in general terms so that institutions can carry out their own assessment.
Is this section investment research?
No. Nothing here is advice on buying, selling or holding any security, digital asset or financial product. Nothing recommends an investment.
How does this relate to the Fintech Nexus platform?
Fintech Nexus is GRA’s established sector platform for payments, digital identity, distributed ledgers and AI in financial services. This section frames the cross-cutting questions; the platform carries the sector community and its methods.
Can I contribute expertise?
Yes. Professionals can register interest in working groups through membership and participation. Working groups open only when their terms and review capacity are in place.
ReportsContribute
Contribute evidence from this page.
Reports is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
Global Risks Alliance
- EmailGateway GW-GRASend it from this pageEvidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.
- ZenodoOpen depositDeposit it and submit to the communityPublish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.
- ReportsGlobal Risks AllianceSee every way to contributeThe contribution types, how each is reviewed, what credit you receive, the licence and what is never accepted.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
The Global Risks Alliance
Bring an exposure or capital question to the Alliance.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.