SUNANDO ROY – On Banking, Finance and Society

 

Digital platforms are no longer peripheral actors in financial intermediation. They have become the connective tissue of the modern financial system—linking consumers, merchants, banks, fintechs, and infrastructure providers through algorithmic and data-driven ecosystems. From payment gateways and digital lending marketplaces to BigTech super-apps, embedded-finance providers, crypto exchanges, and cloud service operators, platforms now perform functions economically equivalent to regulated financial activities—without always falling within the regulatory perimeter.

This shift is forcing supervisors to confront a new risks and thereby the need for new supervisory designs.

What Makes a Platform Different

Unlike traditional financial institutions designed around balance sheets, products, and linear value chains, platforms operate as multi-sided markets. They thrive on user interdependence, data-network effects, and modular architectures that allow rapid scaling and integration with third parties.

Their business models are built on data capture, behavioral analytics, and algorithmic decision-making. This produces enormous economies of scope: a single platform can act simultaneously as a lender, payments intermediary, service outsourcer, and digital marketplace. Yet from a supervisory standpoint, risk is no longer confined within legal entities—it flows through APIs, data pipelines, and shared infrastructure.

Traditional entity-based supervision therefore struggles to capture where risk originates, how it propagates, or who is ultimately accountable.

From Entity-Centric to Ecosystem-Based Supervision

Supervisors are beginning to move beyond frameworks that treat each entity in isolation. Instead, they are mapping economic functions—payments, credit intermediation, custody, risk-transfer—across an increasingly convergent landscape of platforms, affiliates, and outsourcing arrangements.

This shift requires “looking through” legal forms to identify the economic substance of intermediation. For example, a BigTech firm offering deferred payment services may perform the same credit function as a licensed lender, but its risk dynamics—liquidity management, data governance, cross-subsidiary dependencies—differ dramatically.

Ecosystem-based supervision thus implies a cross-sectoral, dynamic view of platform linkages and dependencies, demanding new analytical and institutional capabilities.

Key Supervisory Risks Posed by Financial Platforms

1. Concentration risk – A handful of cloud or platform providers now underpin critical financial infrastructure, creating single points of failure.
2. Operational and third-party dependencies – Disruptions to core APIs or outsourced systems can propagate instantly across multiple institutions.
3. Conduct and data risks – Platform dominance in consumer data and interface control amplifies risks of misuse, discrimination, and opaque profiling.
4. Algorithmic opacity – AI-driven decisions in credit, pricing, and dispute resolution introduce unobservable biases and model risk.
5. Liquidity and run-like dynamics – Platform-mediated finance (e.g., stablecoins, tokenized deposits) can experience real-time contagion through loss of trust.

These risks transcend traditional prudential categories, challenging supervisors to monitor resilience, data governance, and systemic interdependencies simultaneously.

Why Traditional Lines of Defence Fall Short

The classical three-lines-of-defence model assumes clear institutional boundaries and static risk ownership. Platforms, however, blur these lines: embedded compliance controls operate within code, real-time data flows bypass sequential oversight, and platform participants may lack visibility into collective exposures.

Ex-post audits and annual reporting cycles cannot capture dynamic risk propagation in digital ecosystems. Supervisory frameworks must therefore evolve toward continuous, data-driven supervision—integrating real-time analytics, anomaly detection, and algorithmic transparency assessments.

Emerging Tools and Approaches

Supervisors are experimenting with new instruments to operationalize ecosystem oversight:

• Platform and ecosystem mapping to visualize dependencies and critical nodes.
• Outsourcing and third-party registers to track reliance on material service providers.
• API-level supervision that grants direct data access to critical platform operations.
• SupTech dashboards and continuous monitoring, enabling alerts on operational disruptions or conduct anomalies.
• Cross-sector coordination between financial, competition, cybersecurity, and data-protection authorities to align oversight across mandates.

These tools signal a shift toward proactive, technologically enabled supervision grounded in data transparency and functional accountability.

Redefining the Supervisory Perimeter

As platform interdependencies deepen, supervisors must ask: when does a platform become systemically important? Systemic significance might arise not from balance-sheet size, but from dependency centrality—how many institutions and consumers rely on its infrastructure.

Whether to regulate platforms directly or through financial entities that depend on them remains a live debate. A pragmatic path lies in proportional, risk-based, and modular regulation—anchoring oversight to the scale and criticality of functions performed, rather than corporate form.

Implications for Supervisors and Regulated Entities

Supervisory authorities need new skill sets in data science, network analysis, and algorithmic auditing. Institutional structures must evolve toward multidisciplinary teams that bridge prudential, conduct, and technology expertise.

Boards of regulated institutions relying on platforms must also strengthen governance, ensuring oversight of third-party risk, data governance, and algorithmic accountability. Transparency and traceability in complex platform chains will become primary metrics of supervisory trust.

Supervising platforms is  a core dimension of preserving financial stability, market integrity, and consumer trust.

 

Annex : Platforms – A Primer

Definition: Digital platforms in the financial sector

Digital platforms in the financial sector are technology-enabled infrastructures that intermediate, orchestrate, or enable interactions among multiple groups—such as customers, financial institutions, merchants, developers, and third-party service providers—by providing standardised interfaces (e.g., APIs), shared rules, and data exchange mechanisms to deliver financial products and services at scale.

Put simply, a financial digital platform is not just a product or a firm, but an operating layer that coordinates an ecosystem of participants and transactions.

Core elements of a financial digital platform

1. Multi-sided participation
   Brings together two or more distinct user groups (e.g., consumers and merchants; banks and fintechs).
2. Technological intermediation
   Uses software, cloud infrastructure, APIs, and algorithms to match, route, price, clear, or settle financial interactions.
3. Standardised access rules
   Defines onboarding criteria, data standards, contractual terms, and risk controls for participants.
4. Data centrality
   Collects, processes, and monetises transactional, behavioural, and sometimes alternative data.
5. Network effects
   Platform value increases as more users or service providers join (direct or indirect network effects).
6. Modular service architecture
   Allows third parties to “plug in” services (payments, credit scoring, KYC, insurance, analytics).

 

Aspect	Traditional financial institution	Digital financial platform
Role	Product manufacturer	Ecosystem orchestrator
Architecture	Vertically integrated	Modular & API-driven
Competition	Firm vs firm	Ecosystem vs ecosystem
Data use	Internal optimisation	Cross-participant coordination
Risk profile	Balance-sheet focused	Operational, data, conduct & systemic

Common examples (by function)

• Payment platforms: wallets, payment gateways, super-apps
• Credit platforms: marketplace lending, BNPL ecosystems
• Investment platforms: robo-advisors, trading platforms
• Banking-as-a-Service (BaaS) platforms
• Crypto-asset and tokenisation platforms

Regulatory and supervisory lens

From a supervisory perspective (as reflected in global discussions at bodies such as Bank for International Settlements, IOSCO, and Financial Stability Board), a digital platform in finance is increasingly viewed as a critical control point that can:

• Concentrate operational and cyber risk
• Create data dominance and conduct risks
• Transmit liquidity, credit, and reputational shocks
• Generate system-wide dependencies (especially via cloud, APIs, or dominant intermediaries)