{"contract_version":"sector-research/2.0.0","page":"https://netify.co.uk/sd-wan-sase-for-financial-services/","title":"Financial Services SD-WAN & SASE: Evidence, UK and North America (2026)","description":"SD-WAN and SASE for financial services: 30 providers graded on 28 requirements with sources, UK and North American regulation kept separate, live shortlist tool and RFP builder.","sector":"financial-services","regime_filter":null,"regimes":[{"key":"uk","label":"United Kingdom (FCA, PRA, UK GDPR)","short":"UK"},{"key":"eu","label":"European Union (DORA)","short":"EU"},{"key":"us","label":"United States (FFIEC, GLBA, NYDFS, SEC)","short":"US"},{"key":"canada","label":"Canada (OSFI)","short":"Canada"}],"author":"Harry Yelland","fact_checked_by":"Robert Sturt","date_published":"2026-01-12","date_modified":"2026-09-12","intro":["Legacy WAN architectures cannot support financial services’ demands for ultra-low latency trading, multi-site connectivity and regulatory compliance. However, SD-WAN and SASE solutions provide the answer through application-aware routing, centralised management and integrated security for FCA operational resilience (PS21/3), PCI DSS 4.0.1 and UK GDPR compliance."],"environments":[{"heading":"Retail Bank Branches","body":"Bank branches depend on continuous connectivity for core banking systems, payment processing and customer service applications. Limited offline functionality covers basic enquiries only: staff cannot access customer account histories, process transactions or approve lending decisions without live connectivity. Extended outages force branches to turn customers away or revert to manual processes, creating customer dissatisfaction and compliance risks."},{"heading":"Trading Floors & Investment Offices","body":"Trading floors and investment management offices introduce considerably more complex performance requirements. Core banking systems remain critical, while these sites also run trading platforms requiring sub-millisecond execution speeds, real-time market data feeds processing thousands of price updates per second, and risk management systems coordinating position monitoring across multiple asset classes. Slow trading platform performance means traders cannot execute orders at intended prices, potentially resulting in significant financial losses."},{"heading":"Wealth Management & Advisory","body":"Wealth management and advisory offices represent a more dispersed operational model. Financial advisers, relationship managers and client service teams often operate from smaller regional offices with minimal IT support. Network reliability is essential for advisers accessing portfolio management systems during client meetings, secure messaging between advisory teams and video consultations with high-net-worth clients."}],"performance":{"paragraphs":["Trading floors experience predictable demand spikes during market open, close and major economic announcements. During these peaks, multiple traders simultaneously execute orders, market data feeds process unprecedented volumes, risk management systems calculate real-time exposures and settlement systems handle transaction confirmations, all within financial services networks."],"latency":[{"label":"Core Banking","body":"Requires responsive performance but can tolerate modest latency: extended response times frustrate staff and reduce client service efficiency."},{"label":"Real-Time Trading","body":"Operates on considerably tighter margins. When markets move rapidly, order execution must occur within milliseconds to achieve intended prices."},{"label":"Payment Processing","body":"Requires consistent low latency to maintain transaction throughput: higher latency creates processing backlogs that undermine service levels and client confidence."},{"label":"Market Data Feeds","body":"Cannot tolerate delays when every millisecond affects execution quality and profitability."}],"operations":"Financial services networks must frequently operate without dedicated on-site IT support. With SD-WAN and SASE, organisations can move to a centrally managed approach with zero-touch provisioning. IT teams can configure, monitor and troubleshoot remotely. When a new branch opens, equipment arrives pre-configured and connects automatically."},"procurement":{"intro":"A structured RFP, tailored to specific network requirements, operational model and compliance obligations, ensures all vendors respond to the same financial services-specific requirements (FCA operational resilience support, trading application prioritisation, PCI DSS segmentation).","requirements":["Market reconfiguration and site changes: define expected rates of openings, closures and service relocations with contractual obligations for rapid provisioning and clean decommissioning.","Differentiated resilience by site type: trading floors and payment processing centres require near-continuous availability with sub-second failover; advisory offices might tolerate brief outages with appropriate client communication protocols.","Peak period performance: specify peak period bandwidth needs (market open/close, major economic announcements, month-end processing) and acceptable performance degradation during congestion.","Third-party resilience and vendor assurance: with the FCA’s operational resilience deadline now passed, include specific questions about how an SD-WAN vendor’s own infrastructure meets FCA operational resilience standards, their important business services and impact tolerances, and evidence of their scenario testing. Verify ISO 27001 and SOC 2 certifications.","Multi-entity and regulated subsidiary requirements: specify whether different regulated entities within a financial services group will share network infrastructure and what security boundaries must exist between different legal entities, regulated subsidiaries and offshore operations."]},"segments":[{"heading":"Enterprise Financial Organisations","body":"Hundreds of locations with dedicated NOC, in-house security teams and complex network architectures including dedicated trading networks, enterprise SOCs and global WAN infrastructure. SD-WAN RFP procurement involves IT, trading technology, infosec and compliance stakeholders with formal approval processes. Often run multiple business lines (retail banking, investment banking, wealth management) requiring differentiated service levels and potentially separate network domains."},{"heading":"Mid-Market Financial Organisations","body":"Boutique wealth management firms, regional building societies and specialist lenders operate with leaner IT teams. Network decisions are typically made by smaller teams with broader responsibilities, requiring simplified solutions. Typically lack dedicated SOCs and should consider managed service provider assistance or solutions with integrated security capabilities and outsourced security monitoring."}],"faqs":[{"q":"What is the primary benefit of SD-WAN for financial services organisations?","a":"The primary benefit is the ability to prioritise critical traffic (trading platforms, core banking) through application-aware routing whilst enabling secure, resilient connectivity for distributed branches and remote advisors. This ensures that transaction-critical systems are prioritised over non-critical traffic, whilst complying with strict regulatory availability requirements."},{"q":"Why is SASE becoming essential for modern financial environments?","a":"SASE converges networking and security into a single cloud-based framework. For financial institutions, this reduces the complexity of securing hybrid workforces and distributed branches, whilst providing consistent policy enforcement for PCI DSS and GDPR compliance regardless of where users or applications are located."},{"q":"How does SD-WAN help address PCI DSS 4.0.1 compliance?","a":"SD-WAN assists with PCI DSS 4.0.1 compliance by implementing granular network segmentation that isolates cardholder data environments (CDE) from general corporate traffic. This reduces the scope of PCI audits and prevents lateral movement of threats, whilst centralised logging provides the evidence required for compliance reporting."},{"q":"How does network latency affect financial services trading systems?","a":"High network latency causes delays in executing trades, processing market data and confirming transactions. When systems fail to respond promptly, it leads to execution at unintended prices and missed trading opportunities, directly impacting profitability and potentially client relationships in time-critical situations where milliseconds can determine trade success."},{"q":"What should be included in a financial services SD-WAN RFP?","a":"Clear requirements for peak bandwidth handling during trading activity periods (such as market open/close and major economic announcements), specific vendor questions regarding their ability to support FCA operational resilience evidence requirements, multi-site resilience with sub-second failover for critical sites, network segmentation for PCI DSS cardholder data environments, and the vendor’s own operational resilience posture and third-party risk management capabilities."}],"regulation_map":{"note":"Netify reference data, September 2026. UK, EU, US and Canadian regimes listed separately; confirm current versions on the regulator's own site before citing.","requirement_regimes":{"uk_regulatory_alignment_fca_and_pra":["uk"],"eu_dora_alignment":["eu","uk"],"us_regulatory_alignment_ffiec_glba_nydfs_sec":["us"],"canada_regulatory_alignment_osfi":["canada"],"uk_delivery":["uk"],"north_america_delivery":["us","canada"]},"regulations":[{"name":"FCA SYSC 15A and PRA SS1/21: operational resilience","jurisdiction":"UK","regimes":["uk"],"applies_to":"Banks, building societies, insurers, investment firms, payment and e-money firms regulated by the FCA or PRA","expects":"Firms identify important business services, set impact tolerances and must be able to stay within them through severe but plausible disruption; the network is usually a mapped dependency. Full compliance was required by 31 March 2025.","requirement_codes":["resilience_and_tested_recovery","incident_notification_support","concentration_risk_and_subcontractor_transparency","uk_regulatory_alignment_fca_and_pra"],"evidence_that_counts":"A UK-regulated customer case naming the service and a resilience outcome; provider material on supporting impact-tolerance mapping or scenario testing; contractual recovery objectives published for FS customers.","evidence_that_does_not_count":"A generic uptime percentage; an SLA page with no FS or resilience-testing context."},{"name":"PRA SS2/21 and FCA SYSC 8: outsourcing and third-party risk","jurisdiction":"UK","regimes":["uk"],"applies_to":"PRA and FCA regulated firms using material outsourcing, including managed network and security services","expects":"Due diligence, sub-outsourcing transparency, audit and access rights, data location, business continuity and documented exit plans for material outsourced services.","requirement_codes":["third_party_and_outsourced_access","concentration_risk_and_subcontractor_transparency","exit_and_portability","data_residency_and_sovereignty","logging_audit_and_evidence_retention","uk_regulatory_alignment_fca_and_pra"],"evidence_that_counts":"Published audit-rights or sub-processor lists; exit or data-return terms; a UK FS customer case that references outsourcing governance.","evidence_that_does_not_count":"A statement that the provider \"works with banks\"."},{"name":"UK Critical Third Parties regime (FSMA 2023; PRA, FCA and Bank of England rules effective 1 January 2025)","jurisdiction":"UK","regimes":["uk"],"applies_to":"Third parties designated by HM Treasury as critical to the UK financial system; indirectly relevant to any large network or cloud provider","expects":"Designated CTPs face direct oversight, resilience testing and incident reporting duties. Firms are expected to understand concentration in their own supply chains.","requirement_codes":["concentration_risk_and_subcontractor_transparency","uk_regulatory_alignment_fca_and_pra"],"evidence_that_counts":"Provider statement on CTP readiness or designation; independent reporting of designation.","evidence_that_does_not_count":"Assuming designation because the provider is large."},{"name":"UK GDPR and Data Protection Act 2018 (international transfers via IDTA or UK Addendum)","jurisdiction":"UK","regimes":["uk"],"applies_to":"Any organisation processing UK personal data","expects":"Lawful international transfers, security of processing, records of processing; where logs and inspection data are stored and by whom.","requirement_codes":["data_residency_and_sovereignty","encryption_and_key_management","logging_audit_and_evidence_retention"],"evidence_that_counts":"Stated UK or EU data residency for logs and management plane; transfer mechanism named; UK data-processing terms published.","evidence_that_does_not_count":"A global privacy notice with no residency statement."},{"name":"DORA: Regulation (EU) 2022/2554, applying from 17 January 2025","jurisdiction":"EU (and UK groups with EU-regulated entities)","regimes":["eu","uk"],"applies_to":"EU financial entities and their ICT third-party providers, including network and security providers","expects":"ICT risk management, major-incident reporting to the competent authority, resilience testing (threat-led testing for larger entities), register of ICT third parties, Article 30 contractual terms (service levels, data location, audit, exit) and oversight of critical ICT providers.","requirement_codes":["eu_dora_alignment","resilience_and_tested_recovery","incident_notification_support","exit_and_portability","concentration_risk_and_subcontractor_transparency","logging_audit_and_evidence_retention"],"evidence_that_counts":"A provider DORA statement that names the service and the Article 30 contractual terms; an EU FS customer case referencing DORA; a DORA-aligned addendum.","evidence_that_does_not_count":"A blog post saying DORA matters; ISO 27001 alone."},{"name":"PCI DSS v4.0.1 (future-dated requirements mandatory from 31 March 2025)","jurisdiction":"Global (card brands)","regimes":["uk","eu","us","canada"],"applies_to":"Any entity storing, processing or transmitting cardholder data, and service providers that can affect its security","expects":"Segmentation of the cardholder data environment, strong cryptography over public networks (Req 4), MFA (Req 8), logging and monitoring (Req 10), and a service-provider responsibility matrix (Req 12.8 and 12.9).","requirement_codes":["payment_and_cardholder_data_segmentation","pci_dss_alignment","encryption_and_key_management","logging_audit_and_evidence_retention","third_party_and_outsourced_access"],"evidence_that_counts":"An Attestation of Compliance for the named service; a customer case that names PCI scope reduction or segmentation with the service; a published responsibility matrix.","evidence_that_does_not_count":"The words \"PCI compliant\" with no scope or service named."},{"name":"SWIFT Customer Security Programme (CSCF, annual attestation)","jurisdiction":"Global","regimes":["uk","eu","us","canada"],"applies_to":"SWIFT users, mainly banks and market infrastructures","expects":"Segregation of the SWIFT secure zone, restricted access, MFA and logging for the SWIFT environment; attested annually.","requirement_codes":["swift_csp_alignment","network_segmentation_and_zoning","identity_and_zero_trust_access"],"evidence_that_counts":"A customer or provider statement naming the service in a SWIFT secure-zone design.","evidence_that_does_not_count":"General segmentation claims with no SWIFT reference."},{"name":"GLBA Safeguards Rule (16 CFR Part 314, FTC; amended rule effective June 2023, FTC breach notification from May 2024)","jurisdiction":"US","regimes":["us"],"applies_to":"Non-bank financial institutions under FTC jurisdiction (lenders, brokers, tax preparers, some fintechs)","expects":"Written information security programme with encryption in transit and at rest, MFA, access controls, logging, continuous monitoring or annual penetration testing, service-provider oversight, and notification of qualifying events.","requirement_codes":["us_regulatory_alignment_ffiec_glba_nydfs_sec","encryption_and_key_management","identity_and_zero_trust_access","logging_audit_and_evidence_retention","third_party_and_outsourced_access","incident_notification_support"],"evidence_that_counts":"A US non-bank FS customer case naming the service; provider material that maps the service to Safeguards Rule elements.","evidence_that_does_not_count":"A general \"compliance\" page listing GLBA among twenty logos."},{"name":"FFIEC IT Examination Handbook (Architecture, Infrastructure and Operations 2021; Information Security; Business Continuity Management)","jurisdiction":"US","regimes":["us"],"applies_to":"Banks, credit unions and their service providers examined by the federal banking agencies","expects":"Examiners expect network segmentation, secure remote access, resilience and recovery testing, third-party management and logging in line with the booklets.","requirement_codes":["us_regulatory_alignment_ffiec_glba_nydfs_sec","network_segmentation_and_zoning","resilience_and_tested_recovery","remote_and_hybrid_workforce","logging_audit_and_evidence_retention"],"evidence_that_counts":"A US bank or credit-union case naming the service; provider material written for FFIEC examinations.","evidence_that_does_not_count":"A mention of FFIEC with no service named."},{"name":"Interagency Guidance on Third-Party Relationships: Risk Management (OCC, Federal Reserve, FDIC, June 2023)","jurisdiction":"US","regimes":["us"],"applies_to":"Banking organisations supervised by the three agencies","expects":"Due diligence, contract terms, ongoing monitoring and termination planning for third parties, including network and security providers; attention to concentration and subcontracting.","requirement_codes":["third_party_and_outsourced_access","concentration_risk_and_subcontractor_transparency","exit_and_portability","us_regulatory_alignment_ffiec_glba_nydfs_sec"],"evidence_that_counts":"Published subcontractor transparency, audit rights or termination assistance terms; a US bank case referencing third-party oversight.","evidence_that_does_not_count":"Generic partner-programme material."},{"name":"Computer-Security Incident Notification Rule (OCC, Federal Reserve, FDIC; effective April 2022)","jurisdiction":"US","regimes":["us"],"applies_to":"Banking organisations and their bank service providers","expects":"Banks notify their regulator within 36 hours of a notification incident; bank service providers must notify affected bank customers as soon as possible of an incident that has disrupted covered services for four or more hours.","requirement_codes":["incident_notification_support","us_regulatory_alignment_ffiec_glba_nydfs_sec"],"evidence_that_counts":"A provider incident-notification commitment for bank customers, in contract terms or a published statement naming the service.","evidence_that_does_not_count":"A status page."},{"name":"NYDFS Cybersecurity Regulation, 23 NYCRR Part 500 (amended November 2023, phased dates to November 2025)","jurisdiction":"US (New York)","regimes":["us"],"applies_to":"Entities licensed by the New York Department of Financial Services, including many banks, insurers and money transmitters","expects":"Asset inventory, access privilege management, MFA across the estate, encryption, monitoring and logging, 72-hour incident notification, and a third-party service provider policy.","requirement_codes":["us_regulatory_alignment_ffiec_glba_nydfs_sec","identity_and_zero_trust_access","encryption_and_key_management","logging_audit_and_evidence_retention","incident_notification_support","third_party_and_outsourced_access"],"evidence_that_counts":"A NYDFS-regulated customer case naming the service; provider material mapping the service to Part 500 sections.","evidence_that_does_not_count":"A list of US regulations on a compliance page."},{"name":"SEC Regulation S-P amendments (adopted May 2024; compliance December 2025 for larger entities, June 2026 for smaller)","jurisdiction":"US","regimes":["us"],"applies_to":"Broker-dealers, investment companies, registered investment advisers and transfer agents","expects":"Incident response programme, customer notification within 30 days of becoming aware of unauthorised access, and oversight of service providers handling customer information.","requirement_codes":["us_regulatory_alignment_ffiec_glba_nydfs_sec","incident_notification_support","third_party_and_outsourced_access","cloud_and_saas_data_controls"],"evidence_that_counts":"A broker-dealer or adviser case naming the service; provider incident-notification terms.","evidence_that_does_not_count":"A general security whitepaper."},{"name":"SEC cybersecurity disclosure rules (Form 8-K Item 1.05; effective December 2023)","jurisdiction":"US","regimes":["us"],"applies_to":"US-listed public companies, including listed financial institutions","expects":"Disclosure of material cybersecurity incidents within four business days of determining materiality; the network provider must be able to supply timely incident facts.","requirement_codes":["incident_notification_support","logging_audit_and_evidence_retention"],"evidence_that_counts":"Provider commitments on incident timelines and forensic log access.","evidence_that_does_not_count":"Marketing about \"full visibility\"."},{"name":"Sarbanes-Oxley Act Section 404: IT general controls","jurisdiction":"US","regimes":["us"],"applies_to":"US-listed companies and their financial reporting systems","expects":"Change management, access control and logging for systems in financial reporting scope; the network is in scope where it carries or protects those systems.","requirement_codes":["change_control_and_configuration_governance","identity_and_zero_trust_access","logging_audit_and_evidence_retention"],"evidence_that_counts":"Provider change-control and audit-log capability described for the named service; a SOC 1 or SOC 2 report scope naming the service.","evidence_that_does_not_count":"A SOC 2 logo."},{"name":"FINRA Rule 4370: business continuity plans","jurisdiction":"US","regimes":["us"],"applies_to":"FINRA member broker-dealers","expects":"Documented business continuity and emergency contact plans covering critical systems and connectivity.","requirement_codes":["resilience_and_tested_recovery","us_regulatory_alignment_ffiec_glba_nydfs_sec"],"evidence_that_counts":"A broker-dealer case naming the service in a continuity design.","evidence_that_does_not_count":"General failover claims."},{"name":"OSFI Guideline B-13: Technology and Cyber Risk Management (effective 1 January 2024) and the Technology and Cyber Security Incident Reporting Advisory","jurisdiction":"Canada","regimes":["canada"],"applies_to":"Federally regulated financial institutions (banks, insurers, trust companies)","expects":"Technology asset management, secure network architecture, resilience, cyber incident reporting to OSFI within 24 hours of determining an incident is reportable.","requirement_codes":["canada_regulatory_alignment_osfi","resilience_and_tested_recovery","incident_notification_support","network_segmentation_and_zoning"],"evidence_that_counts":"A Canadian FRFI case naming the service; provider material mapping to B-13.","evidence_that_does_not_count":"A Canadian office address."},{"name":"OSFI Guideline B-10: Third-Party Risk Management (effective 1 May 2024)","jurisdiction":"Canada","regimes":["canada"],"applies_to":"Federally regulated financial institutions","expects":"Risk-based due diligence, contract provisions (data, audit, subcontracting, exit), concentration risk and ongoing monitoring of third parties.","requirement_codes":["canada_regulatory_alignment_osfi","third_party_and_outsourced_access","concentration_risk_and_subcontractor_transparency","exit_and_portability"],"evidence_that_counts":"Published subcontractor and exit terms; a Canadian FRFI case referencing third-party governance.","evidence_that_does_not_count":"Partner-programme marketing."},{"name":"PIPEDA and Quebec Law 25","jurisdiction":"Canada","regimes":["canada"],"applies_to":"Private-sector organisations handling personal information in Canada; Quebec adds stricter rules and cross-border assessments","expects":"Safeguards proportionate to sensitivity, breach reporting, and assessment before transferring personal information outside Quebec.","requirement_codes":["data_residency_and_sovereignty","canada_regulatory_alignment_osfi","encryption_and_key_management"],"evidence_that_counts":"Stated Canadian data residency for logs or management plane; Quebec-specific terms.","evidence_that_does_not_count":"A global privacy notice."},{"name":"ISO/IEC 27001, SOC 2 Type II, FIPS 140-2/140-3, Cyber Essentials Plus, FedRAMP","jurisdiction":"Cross-jurisdiction assurance","regimes":["uk","eu","us","canada"],"applies_to":"The provider's own platform and operations","expects":"Assurance over the provider's controls. FedRAMP is a US federal programme, not a financial services regulation. Cyber Essentials is UK government-backed baseline assurance.","requirement_codes":["encryption_and_key_management","logging_audit_and_evidence_retention","identity_and_zero_trust_access","managed_operations_and_soc"],"evidence_that_counts":"A certificate or report with a scope that names the service; FIPS validation certificate numbers.","evidence_that_does_not_count":"Proof for any regulatory column. A certification never makes a regulatory column Proven on its own."}]},"sector_evidence":{"contract":"sector-evidence-view/1.1.0","sector":"financial-services","summary":{"provider_count":30,"requirement_count":28,"accepted_sources":28,"total_sources":72,"providers_complete":0,"last_checked":"2026-09-12"},"status_vocabulary":[{"state":"proven","label":"Proven","definition":"An accepted source directly connects the provider's named SD-WAN, SASE, SSE or managed service to that manufacturing requirement."},{"state":"partial","label":"Partial","definition":"Relevant evidence exists, but the product connection, factory detail, geography or outcome is incomplete."},{"state":"not_found","label":"Not found","definition":"Credible sources were checked but no defensible evidence was found. This does not prove the provider lacks the capability."},{"state":"not_applicable","label":"Not applicable","definition":"The requirement does not apply to the provider's operating model."},{"state":"to_review","label":"To review","definition":"Research has not yet been completed."}],"evidence_rules":["Prefer customer-authored case studies, official manufacturer statements, contract awards and independent reporting.","A named manufacturer using a named SD-WAN, SASE, SSE or managed service is the strongest evidence.","A generic manufacturing solutions page is supporting evidence, not proof of a deployment.","Do not treat switching, Wi-Fi, data-centre or industrial networking evidence as SD-WAN or SASE evidence unless the source makes that connection.","Do not infer OT security from general IT security. Record the factory, production, industrial control or OT connection stated by the source.","Do not claim IEC 62443, NIST 800-82, NIS2 or another standard unless the source supports the precise wording.","Copy a short exact quotation that proves the point, then write a concise factual summary in your own words.","Record publication and checked dates. State what each source does not prove."],"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","explanation":"","evidence_rule":"Do not treat switching, Wi-Fi, data-centre, colocation or trading-floor LAN evidence as SD-WAN or SASE evidence unless the source makes that connection.","display_order":1,"regimes":"all"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","explanation":"","evidence_rule":"Do not treat switching, Wi-Fi, data-centre, colocation or trading-floor LAN evidence as SD-WAN or SASE evidence unless the source makes that connection.","display_order":2,"regimes":"all"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","explanation":"","evidence_rule":"Do not treat switching, Wi-Fi, data-centre, colocation or trading-floor LAN evidence as SD-WAN or SASE evidence unless the source makes that connection.","display_order":3,"regimes":"all"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","explanation":"","evidence_rule":"","display_order":4,"regimes":"all"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","explanation":"","evidence_rule":"Do not treat switching, Wi-Fi, data-centre, colocation or trading-floor LAN evidence as SD-WAN or SASE evidence unless the source makes that connection.","display_order":5,"regimes":"all"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","explanation":"","evidence_rule":"Do not treat switching, Wi-Fi, data-centre, colocation or trading-floor LAN evidence as SD-WAN or SASE evidence unless the source makes that connection.","display_order":6,"regimes":"all"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","explanation":"","evidence_rule":"","display_order":7,"regimes":"all"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","explanation":"","evidence_rule":"Do not treat switching, Wi-Fi, data-centre, colocation or trading-floor LAN evidence as SD-WAN or SASE evidence unless the source makes that connection.","display_order":8,"regimes":"all"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","explanation":"","evidence_rule":"","display_order":9,"regimes":"all"},{"code":"encryption_and_key_management","label":"Encryption and key management","explanation":"","evidence_rule":"","display_order":10,"regimes":"all"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","explanation":"","evidence_rule":"","display_order":11,"regimes":"all"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","explanation":"","evidence_rule":"","display_order":12,"regimes":"all"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","explanation":"","evidence_rule":"","display_order":13,"regimes":"all"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","explanation":"","evidence_rule":"","display_order":14,"regimes":"all"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","explanation":"","evidence_rule":"","display_order":15,"regimes":"all"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","explanation":"","evidence_rule":"","display_order":16,"regimes":"all"},{"code":"incident_notification_support","label":"Incident notification support","explanation":"","evidence_rule":"","display_order":17,"regimes":"all"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","explanation":"","evidence_rule":"","display_order":18,"regimes":"all"},{"code":"exit_and_portability","label":"Exit and portability","explanation":"","evidence_rule":"","display_order":19,"regimes":"all"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","explanation":"","evidence_rule":"Do not claim FCA, PRA, DORA, FFIEC, GLBA, NYDFS, SEC, OSFI, PCI DSS or SWIFT CSP alignment unless the source supports the precise wording. A SOC 2 report or ISO 27001 certificate is supporting evidence for the security columns, not proof for a regulatory column. Keep the regimes separate. A US bank case study does not evidence UK regulatory alignment, and a UK building society does not evidence NYDFS or FFIEC alignment. Record the regime in the source row.","display_order":20,"regimes":["uk"]},{"code":"eu_dora_alignment","label":"EU DORA alignment","explanation":"","evidence_rule":"Do not claim FCA, PRA, DORA, FFIEC, GLBA, NYDFS, SEC, OSFI, PCI DSS or SWIFT CSP alignment unless the source supports the precise wording. A SOC 2 report or ISO 27001 certificate is supporting evidence for the security columns, not proof for a regulatory column. Keep the regimes separate. A US bank case study does not evidence UK regulatory alignment, and a UK building society does not evidence NYDFS or FFIEC alignment. Record the regime in the source row.","display_order":21,"regimes":["eu","uk"]},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","explanation":"","evidence_rule":"Do not claim FCA, PRA, DORA, FFIEC, GLBA, NYDFS, SEC, OSFI, PCI DSS or SWIFT CSP alignment unless the source supports the precise wording. A SOC 2 report or ISO 27001 certificate is supporting evidence for the security columns, not proof for a regulatory column. Keep the regimes separate. A US bank case study does not evidence UK regulatory alignment, and a UK building society does not evidence NYDFS or FFIEC alignment. Record the regime in the source row.","display_order":22,"regimes":["us"]},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","explanation":"","evidence_rule":"Do not claim FCA, PRA, DORA, FFIEC, GLBA, NYDFS, SEC, OSFI, PCI DSS or SWIFT CSP alignment unless the source supports the precise wording. A SOC 2 report or ISO 27001 certificate is supporting evidence for the security columns, not proof for a regulatory column. Keep the regimes separate. A US bank case study does not evidence UK regulatory alignment, and a UK building society does not evidence NYDFS or FFIEC alignment. Record the regime in the source row.","display_order":23,"regimes":["canada"]},{"code":"pci_dss_alignment","label":"PCI DSS alignment","explanation":"","evidence_rule":"Do not claim FCA, PRA, DORA, FFIEC, GLBA, NYDFS, SEC, OSFI, PCI DSS or SWIFT CSP alignment unless the source supports the precise wording. A SOC 2 report or ISO 27001 certificate is supporting evidence for the security columns, not proof for a regulatory column. Keep the regimes separate. A US bank case study does not evidence UK regulatory alignment, and a UK building society does not evidence NYDFS or FFIEC alignment. Record the regime in the source row.","display_order":24,"regimes":"all"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","explanation":"","evidence_rule":"Do not claim FCA, PRA, DORA, FFIEC, GLBA, NYDFS, SEC, OSFI, PCI DSS or SWIFT CSP alignment unless the source supports the precise wording. A SOC 2 report or ISO 27001 certificate is supporting evidence for the security columns, not proof for a regulatory column. Keep the regimes separate. A US bank case study does not evidence UK regulatory alignment, and a UK building society does not evidence NYDFS or FFIEC alignment. Record the regime in the source row.","display_order":25,"regimes":"all"},{"code":"uk_delivery","label":"UK delivery","explanation":"","evidence_rule":"Keep the regimes separate. A US bank case study does not evidence UK regulatory alignment, and a UK building society does not evidence NYDFS or FFIEC alignment. Record the regime in the source row.","display_order":26,"regimes":["uk"]},{"code":"north_america_delivery","label":"North America delivery","explanation":"","evidence_rule":"Keep the regimes separate. A US bank case study does not evidence UK regulatory alignment, and a UK building society does not evidence NYDFS or FFIEC alignment. Record the regime in the source row.","display_order":27,"regimes":["us","canada"]},{"code":"global_delivery","label":"Global delivery","explanation":"","evidence_rule":"Keep the regimes separate. A US bank case study does not evidence UK regulatory alignment, and a UK building society does not evidence NYDFS or FFIEC alignment. Record the regime in the source row.","display_order":28,"regimes":"all"}],"providers":[{"slug":"cisco","name":"Cisco","marketplace_url":"https://netify.co.uk/marketplace/cisco/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Branch and office connectivity, Network segmentation and zoning, Identity and zero trust access, and Change control and configuration governance via a strong, live, quantified case study (BBVA Argentina - Cisco Catalyst SD-WAN, SDA and ISE, 75%+ reduction in release windows). This is a single-country case (Argentina); it does not evidence UK, EU, US or Canada regulatory alignment or delivery.","gaps_and_unknowns":"Do not extend the BBVA Argentina evidence to BBVA Group globally or to any other regime. Third-party access, data residency, and all six regulatory columns remain unevidenced.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":2,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_020"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"proven","evidence_source_ids":["src_financial_services_fs_020"],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"proven","evidence_source_ids":["src_financial_services_fs_020"],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"proven","evidence_source_ids":["src_financial_services_fs_020"],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_020","workbook_source_id":"FS-020","url":"https://www.cisco.com/site/us/en/about/case-studies-customer-stories/bbva.html","title":"BBVA Banks on Secure, Agile Operations (Cisco case study)","publisher":"cisco.com","publication_date":null,"checked_date":"2026-09-11","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["change_control_and_configuration_governance","network_segmentation_and_zoning","branch_and_office_connectivity","identity_and_zero_trust_access"],"named_customer":"BBVA Argentina","segment":"Retail banking","named_product_or_service":"Cisco Catalyst SD-WAN, Cisco Software-Defined Access (SDA), Cisco ISE, Cisco ACI","service_family":"SD-WAN","estate":null,"countries_or_regions":"Argentina","ot_or_production_environment":null,"measured_or_stated_outcome":"Zero-touch provisioning and automatic updates shrink release windows by over 75%; identity-based segmentation and access control across campus, branch and data centre","industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"\"Cisco Catalyst SD-WAN carries SDA tags and policies end-to-end, creating a unified, secure, and scalable experience between campuses, branches, and data centers.\" / \"...shrink release windows by over 75%.\"","reviewer_summary":"Re-verified live 2026-09-11 at cisco.com/site/us/en/about/case-studies-customer-stories/bbva.html (the 2026-09-04 recheck could not load this page; it is confirmed live and unchanged now). BBVA Argentina is named directly, with Cisco Catalyst SD-WAN, SDA and ISE explicitly connected to branch/campus/data-centre connectivity, identity-based segmentation, and a quantified 75%+ reduction in release windows from zero-touch provisioning.","limitation_and_notes":"This is BBVA Argentina specifically (a regional subsidiary), not BBVA Group globally - do not extend this as evidence for BBVA outside Argentina, or for any UK/EU/US/Canada regime. Upgraded from Rejected to Accepted on 2026-09-11 after live re-verification."},{"id":"src_financial_services_fs_019","workbook_source_id":"FS-019","url":"https://www.cisco.com/c/en/us/solutions/enterprise-networks/network-architecture-customer-success-stories.html","title":"Cisco Networking Customer Stories","publisher":"cisco.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Argentine bank establishes a new standard for software-defined networking across global locations.","reviewer_summary":"BBVA is a named customer carrying Cisco's own Financial Services industry label, with Cisco Catalyst SD-WAN explicitly in the deployed products list. Banco do Brasil, Fiserv and Jammu & Kashmir Bank are further published financial services customers, though SD-WAN was not confirmed in their product lists.","limitation_and_notes":"Supplier customer-story index listing named customers alongside the exact Cisco products deployed. Useful because it ties named organisations directly to Cisco Catalyst SD-WAN / Cisco Software-Defined Wide Area Network. | Not found on page"}]},{"slug":"bt","name":"BT","marketplace_url":"https://netify.co.uk/marketplace/bt/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Branch and office connectivity, Managed operations and SOC, and Global delivery via a detailed (though anonymised) SD-WAN case study spanning 100,000+ employees and 30+ countries with BT Managed Fortinet Firewall. No specific regime is confirmed - the fit is evidenced at a global level, not tied to UK/EU/US/Canada specifically.","gaps_and_unknowns":"The customer itself is never named, which weakens an otherwise strong case study. No regulatory, segmentation or data-residency evidence was found.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":2,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_012"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"proven","evidence_source_ids":["src_financial_services_fs_012"],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"proven","evidence_source_ids":["src_financial_services_fs_012"],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_011","workbook_source_id":"FS-011","url":"https://www.globalservices.bt.com/btfederal/digital-industries/financial-services","title":"Financial services | BT","publisher":"globalservices.bt.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"Unspecified","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"Helping a global financial services company migrate to SD-WAN","reviewer_summary":"Dedicated financial services industry page (#7) listing two network case studies, plus a full SD-WAN case study (#18) stating industry 'Financial services', size 'More than 100,000 employees' and operations in more than 30 countries, delivered with Agile Connect Nuage SD-WAN and BT Managed Fortinet Firewall. The case study title is independently corroborated on BT Ireland's listing (#30). The customer itself is not named, which is the one weakness.","limitation_and_notes":"Supplier's dedicated industry page listing two named network/SD-WAN case studies. | Confirmed - exact match"},{"id":"src_financial_services_fs_012","workbook_source_id":"FS-012","url":"https://www.globalservices.bt.com/btfederal/insights/case-studies/helping-a-global-financial-services-company-migrate-to-sd-wan","title":"Helping a global financial services company migrate to SD-WAN | BT","publisher":"globalservices.bt.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["branch_and_office_connectivity","managed_operations_and_soc","global_delivery"],"named_customer":null,"segment":"Unspecified","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Multiple","exact_supporting_wording":"Helping a global financial services company migrate to SD-WAN","reviewer_summary":"Dedicated financial services industry page (#7) listing two network case studies, plus a full SD-WAN case study (#18) stating industry 'Financial services', size 'More than 100,000 employees' and operations in more than 30 countries, delivered with Agile Connect Nuage SD-WAN and BT Managed Fortinet Firewall. The case study title is independently corroborated on BT Ireland's listing (#30). The customer itself is not named, which is the one weakness.","limitation_and_notes":"Anonymised SD-WAN case study. Customer not named, so weaker than a named reference. | Confirmed - exact match"},{"id":"src_financial_services_fs_013","workbook_source_id":"FS-013","url":"https://www.btireland.com/insights-resources/case-studies","title":"Case Studies - BT Ireland","publisher":"btireland.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Helping a global financial services company migrate to SD-WAN","reviewer_summary":"Dedicated financial services industry page (#7) listing two network case studies, plus a full SD-WAN case study (#18) stating industry 'Financial services', size 'More than 100,000 employees' and operations in more than 30 countries, delivered with Agile Connect Nuage SD-WAN and BT Managed Fortinet Firewall. The case study title is independently corroborated on BT Ireland's listing (#30). The customer itself is not named, which is the one weakness.","limitation_and_notes":"Supplier's Ireland property. Corroborates the SD-WAN financial services case study title and Ireland presence. | Not found on page"}]},{"slug":"hpe-aruba-edgeconnect","name":"HPE Aruba EdgeConnect","marketplace_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Branch and office connectivity, Resilience and tested recovery, and Data-centre, colocation and cloud connectivity via a named customer (First Bank) quoted directly on HPE's SASE page. The specific 'First Bank' entity and its country could not be confirmed with confidence, so no regime or delivery column is claimed.","gaps_and_unknowns":"Confirming which First Bank this is (several exist globally) would let this evidence support a specific regime. No regulatory or segmentation evidence was found.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":2,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_044"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_044"],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"proven","evidence_source_ids":["src_financial_services_fs_044"],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_044","workbook_source_id":"FS-044","url":"https://paths.ext.hpe.com/r/a00119883?cc=us&lang=en","title":"Unified SASE in financial services","publisher":"paths.ext.hpe.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["data_centre_colocation_and_cloud_connectivity","branch_and_office_connectivity","resilience_and_tested_recovery"],"named_customer":null,"segment":"Retail banking","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"Unified SASE in financial services","reviewer_summary":"Dedicated financial services SASE document, plus a named bank customer on the SASE page, quoted verbatim there as: \"First Bank deploys a secure, resilient, and high-performance SASE-based SD-WAN to reduce costs, boost application performance and support a cloud-smart technology strategy.\"","limitation_and_notes":"Tier 1 supplier industry document linked from the SASE page. Title verified in title tag and og:title. | Confirmed - exact match"},{"id":"src_financial_services_fs_043","workbook_source_id":"FS-043","url":"https://www.hpe.com/us/en/networking/sase.html","title":"HPE Aruba Networking SASE (solution page)","publisher":"hpe.com","publication_date":null,"checked_date":"2026-09-12","source_ownership":"provider_authored","decision":"superseded","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":null,"named_product_or_service":null,"service_family":null,"estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Unified SASE in financial services","reviewer_summary":"Dedicated financial services SASE document, plus a named bank customer on the SASE page, quoted verbatim there as: \"First Bank deploys a secure, resilient, and high-performance SASE-based SD-WAN to reduce costs, boost application performance and support a cloud-smart technology strategy.\"","limitation_and_notes":"Reverted from Accepted to Superseded 2026-09-12: this row's evidence (the First Bank quote) is identical to FS-044, which is the more specific source (a dedicated financial-services SASE document vs. this general SASE product page). Marking both Accepted would double-count a single piece of evidence as two sources, which Robert's rule 4 (\"do not add the same URL twice\") is intended to prevent even where the URLs technically differ. FS-044 remains Accepted and carries the Capabilities supported for HPE Aruba."}]},{"slug":"vodafone","name":"Vodafone Business","marketplace_url":"https://netify.co.uk/marketplace/vodafone/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Branch and office connectivity and UK delivery via a new, live-verified Vodafone document naming the customer only as 'a multinational bank in the UK' transforming its branch estate. Global delivery is Partial via a separate anonymised case (170+ sites, 'global reach').","gaps_and_unknowns":"A named UK institution (rather than 'a multinational bank') would convert this from a strong to an outstanding piece of evidence. No segmentation, data residency or SOC evidence was found.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":5,"accepted_source_count":2,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_100"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"proven","evidence_source_ids":["src_financial_services_fs_100"],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"partial","evidence_source_ids":["src_financial_services_fs_077"],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_077","workbook_source_id":"FS-077","url":"https://www.vodafone.com/business/news-and-insights/case-studies/a-network-adapted-to-your-needs-transforming-a-financial-services-business-with-sd-wan","title":"A network adapted to your needs: transforming a financial services business with SD-WAN","publisher":"vodafone.com","publication_date":null,"checked_date":"2026-09-11","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Existing source lead","requirement_codes":["global_delivery"],"named_customer":null,"segment":"Unspecified","named_product_or_service":"Vodafone Business SD-WAN","service_family":"SD-WAN","estate":"Over 170 sites","countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":"Greater network control; secure and flexible workflow; faster rollout of new functions; direct, secure access to cloud","industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"Vodafone Business SD-WAN has helped a leading financial services company introduce emerging cloud technologies to become more agile and customer centric.","reviewer_summary":"Re-verified live 2026-09-11 at vodafone.com/business/news-and-insights/case-studies/... (the 2026-09-04 recheck could not load this page; confirmed live and unchanged now). Customer is anonymised ('a Leading financial services company'), over 170 sites, described as having 'global reach' - graded Partial not Proven given the anonymisation.","limitation_and_notes":"Customer anonymised, which is why Global delivery is graded Partial rather than Proven from this source alone. Upgraded from Rejected to Accepted on 2026-09-11 after live re-verification."},{"id":"src_financial_services_fs_100","workbook_source_id":"FS-100","url":"https://downloads.vodafone.co.uk/69eepp2lubij/7tdtgGhaFENtzAtBQ94r6U/7fc7af407373b17ee02c47f9aa609806/How_SD-WAN_works.pdf","title":"How SD-WAN works: use case - How SD-WAN drives real business value for a multinational bank in the UK","publisher":"downloads.vodafone.co.uk","publication_date":null,"checked_date":"2026-09-11","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Named customer case study","requirement_codes":["branch_and_office_connectivity","uk_delivery"],"named_customer":"Not named (described only as \"a multinational bank in the UK\")","segment":"Retail banking","named_product_or_service":"Vodafone SD-WAN, Vodafone Cloud and Cloud Connect services","service_family":"SD-WAN","estate":"Not stated (branch estate, no specific count)","countries_or_regions":"United Kingdom","ot_or_production_environment":null,"measured_or_stated_outcome":"Faster, more reliable connectivity; achieved 'branch of the future' ambitions; enhanced data collection and storage via Vodafone Cloud and Cloud Connect","industrial_standard_or_regulation":"None stated","regulatory_regime":"UK","exact_supporting_wording":"\"How SD-WAN drives real business value for a multinational bank in the UK... This multinational bank wanted to transform its branch estate and legacy systems to create the 'branch of the future'... Using Vodafone SD-WAN, the bank gained faster, more reliable connectivity.\"","reviewer_summary":"Vodafone's own PDF use-case document, verified live 2026-09-11. Explicitly names the customer as 'a multinational bank in the UK' (not individually named) using Vodafone SD-WAN for its branch network, plus Vodafone Cloud/Cloud Connect for data. This is the clearest UK-regime financial services evidence found for Vodafone - directly supports Branch and office connectivity and UK delivery.","limitation_and_notes":"Customer is described only as \"a multinational bank in the UK\", not individually named - a named institution would be stronger evidence. Added 2026-09-11 to properly back Vodafone's Branch and office connectivity and UK delivery capability cells, which were previously Proven with no source."},{"id":"src_manufacturing_mfg_062","workbook_source_id":"FS-075","url":"https://www.vodafone.co.uk/business/sdn/sd-wan","title":"SD-WAN for Business | Vodafone UK","publisher":"vodafone.co.uk","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Vodafone Business SD-WAN has helped a leading financial services company introduce emerging cloud technologies to become more agile and customer centric.","reviewer_summary":"There is a published SD-WAN case study for the sector plus a dedicated Vodafone UK finance industry page that names SD-WAN directly (\"SD-WAN uses multiple access technologies to make sure your network is always ready to scale to business demands.\"). Weakness: the SD-WAN case study customer is anonymised (\"a leading financial services company\", over 170 sites), and the only named finance organisation on the UK page is Lloyds Banking Group in a digital inclusion partnership, not a networking deployment. The SD-WAN document also carries a Financial Services sector requirements section.","limitation_and_notes":"Tier 1 supplier product page. Carries the vendor's own SD-WAN partner line-up (Fortinet, Arista, Cisco), sector suitability lists, business-size tiers and the 192 country claim. No date published on the page. | Not found on page"},{"id":"src_manufacturing_mfg_063","workbook_source_id":"FS-076","url":"https://d3bql97l1ytoxn.cloudfront.net/app_resources/401786/documentation/1435542_1720420681871_en-US.pdf","title":"Vodafone Business SD-WAN (product document, PDF)","publisher":"d3bql97l1ytoxn.cloudfront.net","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Vodafone Business SD-WAN has helped a leading financial services company introduce emerging cloud technologies to become more agile and customer centric.","reviewer_summary":"There is a published SD-WAN case study for the sector plus a dedicated Vodafone UK finance industry page that names SD-WAN directly (\"SD-WAN uses multiple access technologies to make sure your network is always ready to scale to business demands.\"). Weakness: the SD-WAN case study customer is anonymised (\"a leading financial services company\", over 170 sites), and the only named finance organisation on the UK page is Lloyds Banking Group in a digital inclusion partnership, not a networking deployment. The SD-WAN document also carries a Financial Services sector requirements section.","limitation_and_notes":"Tier 1 Vodafone-authored SD-WAN document, but hosted on a third-party CDN (cloudfront) rather than a vodafone.com URL, so permanence is not guaranteed. Contains sector requirement sections, deal-size examples and the 192 country statement. | Not found on page"},{"id":"src_financial_services_fs_078","workbook_source_id":"FS-078","url":"https://www.vodafone.co.uk/business/our-industry-expertise/finance","title":"Finance | Industry Expertise | Vodafone UK","publisher":"vodafone.co.uk","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Vodafone Business SD-WAN has helped a leading financial services company introduce emerging cloud technologies to become more agile and customer centric.","reviewer_summary":"There is a published SD-WAN case study for the sector plus a dedicated Vodafone UK finance industry page that names SD-WAN directly (\"SD-WAN uses multiple access technologies to make sure your network is always ready to scale to business demands.\"). Weakness: the SD-WAN case study customer is anonymised (\"a leading financial services company\", over 170 sites), and the only named finance organisation on the UK page is Lloyds Banking Group in a digital inclusion partnership, not a networking deployment. The SD-WAN document also carries a Financial Services sector requirements section.","limitation_and_notes":"Tier 1 dedicated supplier finance page naming SD-WAN as a finance-sector service and referencing a Lloyds Banking Group collaboration (digital inclusion, not networking). | Not found on page"}]},{"slug":"fortinet-fortisase","name":"Fortinet FortiSASE","marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Branch and office connectivity and Global delivery via a named SD-WAN customer (Itau Unibanco, a major Brazilian bank, 3,000+ locations across 20 countries). This is outside the UK/EU/US/Canada regimes this workbook tracks, so no regulatory or UK/North America delivery column applies.","gaps_and_unknowns":"USI Insurance Services (US) is a further named customer with a supporting quote but no deployment detail. No segmentation, resilience or regulatory evidence was found.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":2,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_039"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"proven","evidence_source_ids":["src_financial_services_fs_039"],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_039","workbook_source_id":"FS-039","url":"https://www.fortinet.com/solutions/industries/financial-services","title":"Financial Services Cybersecurity | Fortinet","publisher":"fortinet.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["branch_and_office_connectivity","global_delivery"],"named_customer":null,"segment":"Retail banking","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"The financial services sector is a high-value target for cyberattacks and highly regulated by jurisdictions around the world.","reviewer_summary":"Dedicated financial services industry page. USI Insurance Services is named and quoted on that page saying \"Secure SD-WAN does what it is supposed to do.\" The SD-WAN customer stories ebook [9] names Itau Unibanco with 3,000+ locations across 20 countries, which is direct SD-WAN evidence. Other financial customers on the page are anonymised by descriptor (a Vietnamese bank, a US multinational institution).","limitation_and_notes":"Supplier's dedicated financial services industry page with customer testimonials. Vendor-authored. | Confirmed - exact match"},{"id":"src_manufacturing_mfg_031","workbook_source_id":"FS-040","url":"https://www.fortinet.com/content/dam/fortinet/assets/ebook/eb-sd-wan-customer-stories.pdf","title":"Secure SD-WAN Customer Success Stories (ebook PDF)","publisher":"fortinet.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"The financial services sector is a high-value target for cyberattacks and highly regulated by jurisdictions around the world.","reviewer_summary":"Dedicated financial services industry page. USI Insurance Services is named and quoted on that page saying \"Secure SD-WAN does what it is supposed to do.\" The SD-WAN customer stories ebook [9] names Itau Unibanco with 3,000+ locations across 20 countries, which is direct SD-WAN evidence. Other financial customers on the page are anonymised by descriptor (a Vietnamese bank, a US multinational institution).","limitation_and_notes":"Supplier's own SD-WAN case study ebook. Strongest SD-WAN-specific sector and scale evidence, though most customers are anonymised by descriptor rather than named. | Not found on page"}]},{"slug":"gtt","name":"GTT","marketplace_url":"https://netify.co.uk/marketplace/gtt/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Trading and low-latency connectivity and Global delivery via a strong, live, re-verified case study (Saxo Bank, a Danish EU-regulated bank, $11bn/day in trading volume, offices in 26 countries). Fit applies to the EU regime for the trading connectivity finding; the delivery finding is evidenced at a global level.","gaps_and_unknowns":"DORA and PCI DSS are referenced on GTT's general Finance and Insurance Solutions page, but not on the Saxo Bank case study itself - re-verified live 2026-09-11 and confirmed the case study page does not make that connection, so no regulatory column is claimed.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":2,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_042"],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"proven","evidence_source_ids":["src_financial_services_fs_042"],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_042","workbook_source_id":"FS-042","url":"https://www.gtt.net/industry-solutions/finance-insurance/","title":"GTT Finance and Insurance Solutions","publisher":"gtt.net","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["trading_and_low_latency_connectivity","global_delivery"],"named_customer":null,"segment":"Investment banking and trading","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":"26 countries","ot_or_production_environment":null,"measured_or_stated_outcome":"Saxo Bank platforms manage over $11 billion in transactions daily; offices in 26 countries covering major world financial centres","industrial_standard_or_regulation":null,"regulatory_regime":"EU","exact_supporting_wording":"Digital Operational Resilience Act (DORA)","reviewer_summary":"Dedicated industry page with a named customer, Saxo Bank, described as requiring a secure global network for digital trading platforms. Page heading is \"Finance and Insurance Solutions\" and it cites both DORA and PCI DSS alignment. Also one of the five verticals on GTT's Industry Solutions index. Re-verified live 2026-09-11 at gtt.net/us-en/resources/case-studies/saxo-bank-case-study: confirms Saxo Bank's multi-asset trading platform, $11bn/day transactions, and offices in 26 countries. This specific case study page does not itself mention DORA or PCI DSS (those references sit on the separate general industry page) - regulatory columns are correctly not claimed from this source.","limitation_and_notes":"Tier 1 dedicated industry page with a named customer (Saxo Bank) and named regulatory frameworks (DORA, PCI DSS). Strong for financial_services. | Confirmed - exact match"},{"id":"src_manufacturing_mfg_032","workbook_source_id":"FS-041","url":"https://www.gtt.net/industry-solutions/","title":"GTT Industry Solutions index","publisher":"gtt.net","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Digital Operational Resilience Act (DORA)","reviewer_summary":"Dedicated industry page with a named customer, Saxo Bank, described as requiring a secure global network for digital trading platforms. Page heading is \"Finance and Insurance Solutions\" and it cites both DORA and PCI DSS alignment. Also one of the five verticals on GTT's Industry Solutions index.","limitation_and_notes":"Tier 1 supplier page. Definitive list of the verticals GTT markets to: Finance & Insurance, Manufacturing, Retail & E-Commerce, Wholesale, Public Sector. Absence of a vertical here is meaningful negative evidence. | Not found on page"}]},{"slug":"lumen","name":"Lumen","marketplace_url":"https://netify.co.uk/marketplace/lumen/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Branch and office connectivity, Resilience and tested recovery, and North America delivery via a dedicated page naming four US financial customers (Certegy, Horizon Bank, Euromoney, SELCO Community Credit Union) plus CURE Auto Insurance on the SD-WAN product page.","gaps_and_unknowns":"No individual case study was opened beyond the industry page headline, so the specific outcome for each named customer is not independently confirmed.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":2,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_050"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"proven","evidence_source_ids":["src_financial_services_fs_050"],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"to_review","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_050","workbook_source_id":"FS-050","url":"https://www.lumen.com/en-us/industries/financial-services.html","title":"Financial Services and Banking IT Solutions | Lumen","publisher":"lumen.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["branch_and_office_connectivity","resilience_and_tested_recovery"],"named_customer":null,"segment":"Multiple","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"US","exact_supporting_wording":"Expanding connectivity and security to minimize downtime and reduce TCO","reviewer_summary":"Dedicated financial services industry page naming Certegy Payment Solutions, Horizon Bank, Euromoney and SELCO Community Credit Union, with explicit SASE and SD-WAN blocks. The quoted string is the Horizon Bank story headline. Separately, the SD-WAN product page features CURE Auto Insurance under 'Ensuring business continuity during digital transformation', giving a second insurance-side data point tied directly to SD-WAN.","limitation_and_notes":"Supplier's dedicated financial services industry page with four named customers (Certegy, Horizon Bank, Euromoney, SELCO Community Credit Union) and explicit SASE and SD-WAN product blocks. | Confirmed - exact match"},{"id":"src_financial_services_fs_049","workbook_source_id":"FS-049","url":"https://www.lumen.com/en-us/services/sd-wan.html","title":"Enterprise SD-WAN Solutions | Lumen Technologies","publisher":"lumen.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Expanding connectivity and security to minimize downtime and reduce TCO","reviewer_summary":"Dedicated financial services industry page naming Certegy Payment Solutions, Horizon Bank, Euromoney and SELCO Community Credit Union, with explicit SASE and SD-WAN blocks. The quoted string is the Horizon Bank story headline. Separately, the SD-WAN product page features CURE Auto Insurance under 'Ensuring business continuity during digital transformation', giving a second insurance-side data point tied directly to SD-WAN.","limitation_and_notes":"Supplier's own primary product page. Positions SD-WAN 'for enterprise', names CURE Auto Insurance, Accolade and SYNQ3 as featured stories, states per-vendor site minimums. No pricing. | Not found on page"}]},{"slug":"verizon","name":"Verizon Business","marketplace_url":"https://netify.co.uk/marketplace/verizon/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"Proven for Branch and office connectivity and Resilience and tested recovery via two distinct (anonymised) banking SD-WAN case studies, one explicitly citing 4G LTE failover. Both customers are anonymised, so no regime or delivery column is claimed.","gaps_and_unknowns":"Naming either customer would materially strengthen this provider's evidence and let a regime be assigned.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_070"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"proven","evidence_source_ids":["src_financial_services_fs_070"],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_070","workbook_source_id":"FS-070","url":"https://www.verizon.com/business/resources/customer-success-stories/retail-bank/","title":"Retail Banking Network Technology Case Study | Verizon Business","publisher":"verizon.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["branch_and_office_connectivity","resilience_and_tested_recovery"],"named_customer":null,"segment":"Retail banking","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"A slow and dated network kept this retail bank from moving its business into the future.","reviewer_summary":"Two distinct SD-WAN banking case studies exist. The retail bank story is quoted here. A second story on a leading bank states it Deployed SD WAN architecture and private IP circuits with 4G LTE backup. Both customers are anonymised, which is why this is vendor-claimed rather than independently verifiable, but the sector and the SD-WAN solution are explicit in both. Financial services also has a dedicated industry page.","limitation_and_notes":"Supplier's own case study. Customer anonymised, sector and SD-WAN outcome stated explicitly. | Confirmed - exact match"},{"id":"src_financial_services_fs_069","workbook_source_id":"FS-069","url":"https://www.verizon.com/business/resources/customer-success-stories/leading-bank/","title":"Financial Services Network Case Study (leading bank) | Verizon Business","publisher":"verizon.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"A slow and dated network kept this retail bank from moving its business into the future.","reviewer_summary":"Two distinct SD-WAN banking case studies exist. The retail bank story is quoted here. A second story on a leading bank states it Deployed SD WAN architecture and private IP circuits with 4G LTE backup. Both customers are anonymised, which is why this is vendor-claimed rather than independently verifiable, but the sector and the SD-WAN solution are explicit in both. Financial services also has a dedicated industry page.","limitation_and_notes":"Supplier's own case study. Customer anonymised but the sector and the SD-WAN solution are stated explicitly. | Not found on page"},{"id":"src_manufacturing_mfg_058","workbook_source_id":"FS-071","url":"https://www.verizon.com/business/solutions/industry/","title":"Industry Solutions and Services | Verizon","publisher":"verizon.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"A slow and dated network kept this retail bank from moving its business into the future.","reviewer_summary":"Two distinct SD-WAN banking case studies exist. The retail bank story is quoted here. A second story on a leading bank states it Deployed SD WAN architecture and private IP circuits with 4G LTE backup. Both customers are anonymised, which is why this is vendor-claimed rather than independently verifiable, but the sector and the SD-WAN solution are explicit in both. Financial services also has a dedicated industry page.","limitation_and_notes":"Supplier's own industry index. Establishes which sectors have a dedicated industry page. Does not itself evidence SD-WAN or SASE capability per sector. | Not found on page"}]},{"slug":"att","name":"AT&T Business","marketplace_url":"https://netify.co.uk/marketplace/att/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Branch and office connectivity and North America delivery via a named, sector-specific SD-WAN case study (COCC, serving 150+ US community banks and credit unions). Fit applies to the US regime only; no UK/EU/Canada evidence exists.","gaps_and_unknowns":"The underlying SD-WAN platform name and outcome figures in the COCC case study are supplier-authored and unverified by AT&T's own account. No regulatory, segmentation, resilience or SOC evidence was found.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_008"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"to_review","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_008","workbook_source_id":"FS-008","url":"https://www.business.att.com/learn/customer-stories/cocc.html","title":"Software Defined Wide Area Network (SD-WAN) Customer Story For COCC at AT&T","publisher":"business.att.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["branch_and_office_connectivity"],"named_customer":null,"segment":"Market infrastructure","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"US","exact_supporting_wording":"COCC today serves more than 150 community banks and credit unions and is the sixth largest core banking solutions provider in the U.S.","reviewer_summary":"Strongest sector evidence in the set. COCC is a named, sector specific SD-WAN case study on the supplier site, and AT&T also runs a dedicated financial services industry page. The case study names the underlying SD-WAN platform. Outcome figures in the case study are supplier authored and unverified.","limitation_and_notes":"Named SD-WAN case study in financial services with a named customer and a named underlying platform. Supplier authored so outcome figures are unverified, but the customer identity and sector are unambiguous. | Confirmed - exact match"},{"id":"src_manufacturing_mfg_007","workbook_source_id":"FS-009","url":"https://www.business.att.com/industries.html","title":"Digital Transformation Technology & Solutions at AT&T Business (Industries index)","publisher":"business.att.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"COCC today serves more than 150 community banks and credit unions and is the sixth largest core banking solutions provider in the U.S.","reviewer_summary":"Strongest sector evidence in the set. COCC is a named, sector specific SD-WAN case study on the supplier site, and AT&T also runs a dedicated financial services industry page. The case study names the underlying SD-WAN platform. Outcome figures in the case study are supplier authored and unverified.","limitation_and_notes":"Supplier index establishing which industries have dedicated pages. Definitive for scoping which sectors AT&T chooses to publish for, but says nothing about depth. | Not found on page"},{"id":"src_financial_services_fs_010","workbook_source_id":"FS-010","url":"https://www.business.att.com/industries/finance.html","title":"Financial Technology & Security Solutions at AT&T Business","publisher":"business.att.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"COCC today serves more than 150 community banks and credit unions and is the sixth largest core banking solutions provider in the U.S.","reviewer_summary":"Strongest sector evidence in the set. COCC is a named, sector specific SD-WAN case study on the supplier site, and AT&T also runs a dedicated financial services industry page. The case study names the underlying SD-WAN platform. Outcome figures in the case study are supplier authored and unverified.","limitation_and_notes":"Dedicated supplier sector page for financial services with a named customer reference. Vendor material. | Not found on page"}]},{"slug":"cato-networks","name":"Cato Networks","marketplace_url":"https://netify.co.uk/marketplace/cato-networks/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Branch and office connectivity and North America delivery via a named US credit union (Guardian Credit Union). Fit applies to the US regime; a further named bank (Bank Avera) and crypto payments firm (MoonPay) exist but were not independently opened.","gaps_and_unknowns":"No segmentation, third-party access or regulatory evidence was found. Cato's own site conflates a law firm (Fidal) under its Financial Services filter, which was noted but not used as evidence.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_016"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"to_review","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_016","workbook_source_id":"FS-016","url":"https://www.catonetworks.com/customers/guardian-credit-union-improves-network-control-security-with-cato/","title":"Guardian Credit Union Improves Network Control & Security with Cato","publisher":"catonetworks.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["branch_and_office_connectivity"],"named_customer":null,"segment":"Building society or credit union","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"US","exact_supporting_wording":"Guardian Credit Union is a regional business that faced big network challenges.","reviewer_summary":"Cato runs both a Financial Services and a separate Credit Union industry filter. Named customers found: Guardian Credit Union, Bank Avera and MoonPay, a crypto payments business. Conflict recorded and not resolved: the law firm Fidal is also filed under the Financial Services label on Cato's site, which inflates that filter, so the credit union and the bank are the cleaner evidence.","limitation_and_notes":"Supplier's own named-customer case study page. Named regulated financial institution, and a mid-market sized one. | Confirmed - exact match"},{"id":"src_financial_services_fs_014","workbook_source_id":"FS-014","url":"https://www.catonetworks.com/customers/?industry=financial-services","title":"Customers filtered by Financial Services","publisher":"catonetworks.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"superseded","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Guardian Credit Union is a regional business that faced big network challenges.","reviewer_summary":"Cato runs both a Financial Services and a separate Credit Union industry filter. Named customers found: Guardian Credit Union, Bank Avera and MoonPay, a crypto payments business. Conflict recorded and not resolved: the law firm Fidal is also filed under the Financial Services label on Cato's site, which inflates that filter, so the credit union and the bank are the cleaner evidence.","limitation_and_notes":"Supplier's own filtered case study listing. | New Source: https://www.catonetworks.com/customers/guardian-credit-union-improves-network-control-security-with-cato/"},{"id":"src_financial_services_fs_015","workbook_source_id":"FS-015","url":"https://www.catonetworks.com/customers/?industry=credit-union","title":"Customers filtered by Credit Union","publisher":"catonetworks.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"superseded","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Guardian Credit Union is a regional business that faced big network challenges.","reviewer_summary":"Cato runs both a Financial Services and a separate Credit Union industry filter. Named customers found: Guardian Credit Union, Bank Avera and MoonPay, a crypto payments business. Conflict recorded and not resolved: the law firm Fidal is also filed under the Financial Services label on Cato's site, which inflates that filter, so the credit union and the bank are the cleaner evidence.","limitation_and_notes":"Supplier's own filtered case study listing. | New Source: https://www.catonetworks.com/customers/guardian-credit-union-improves-network-control-security-with-cato/"}]},{"slug":"cloudflare-one","name":"Cloudflare One","marketplace_url":"https://netify.co.uk/marketplace/cloudflare-one/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"Only generic marketing language currently supports this provider - 'meeting data sovereignty requirements' and 'global reach' on Cloudflare's own financial services page - graded Partial, not Proven, under evidence rule 3. The SoFi and PacSun customer stories found are WAF/bot-management evidence, not Cloudflare One SD-WAN/SASE evidence, per evidence rule 4.","gaps_and_unknowns":"No named customer using Cloudflare One (the SASE/SD-WAN product) for a financial services deployment has been found. This is a material gap given Cloudflare's strong general web-security positioning in the sector.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":2,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"partial","evidence_source_ids":["src_financial_services_fs_022"],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"partial","evidence_source_ids":["src_financial_services_fs_022"],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_022","workbook_source_id":"FS-022","url":"https://www.cloudflare.com/solutions/financial-services/","title":"Cloudflare for Financial Services","publisher":"cloudflare.com","publication_date":null,"checked_date":"2026-09-11","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["data_residency_and_sovereignty","global_delivery"],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Cloudflare empowers over 1,700 financial services organizations to deliver secure digital experiences while meeting data sovereignty, regulatory, and resiliency requirements.","reviewer_summary":"Dedicated financial services industry page with a quantified customer count and named financial logos (Visa, SoFi, NCR Voyix, Stripe). The 1,700 figure is vendor self reported and unaudited. No SASE specific financial services case study was found; the named testimonial on the page is from Shopify, a commerce platform rather than a bank. Re-verified live 2026-09-11 at cloudflare.com/solutions/financial-services/: page confirmed live, stating Cloudflare 'meets data sovereignty, regulatory, and resiliency requirements' and offers 'global reach' - generic marketing language (evidence rule 3), which is why the two capabilities it supports are graded Partial rather than Proven.","limitation_and_notes":"Generic vendor marketing page, not a named deployment - graded Partial per evidence rule 3. Upgraded from Superseded to Accepted 2026-09-11 after live re-verification, to correctly back the Partial capability cells it supports."},{"id":"src_financial_services_fs_021","workbook_source_id":"FS-021","url":"https://www.cloudflare.com/sase/","title":"Cloudflare | The agile SASE platform (Cloudflare One SASE product page)","publisher":"cloudflare.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"superseded","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Cloudflare empowers over 1,700 financial services organizations to deliver secure digital experiences while meeting data sovereignty, regulatory, and resiliency requirements.","reviewer_summary":"Dedicated financial services industry page with a quantified customer count and named financial logos (Visa, SoFi, NCR Voyix, Stripe). The 1,700 figure is vendor self reported and unaudited. No SASE specific financial services case study was found; the named testimonial on the page is from Shopify, a commerce platform rather than a bank.","limitation_and_notes":"Tier 1 supplier page. Primary SASE positioning page named in the brief. Carries the 300+ cities SASE delivery claim, the single global per-seat pricing claim and a large customer logo wall. Logo wall carries no sector labels, so it supports named customers but not sector grading on its own. | New Source: https://www.cloudflare.com/solutions/financial-services"}]},{"slug":"colt","name":"Colt Technology Services","marketplace_url":"https://netify.co.uk/marketplace/colt/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Identity and zero trust access via a named EU customer (Byblos Bank Europe) replacing VPN access with Colt and Zscaler SSE. Fit applies to the EU regime for this one capability only.","gaps_and_unknowns":"Stuttgart Stock Exchange and RCI Bank and Services are further named customers on the same Capital Markets page but were not independently opened. The '18/25 top global banks' claim is vendor-stated and unverified.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"proven","evidence_source_ids":["src_financial_services_fs_024"],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_024","workbook_source_id":"FS-024","url":"https://www.colt.net/solutions/industries/capital-markets","title":"Capital Markets | Colt Technology Services","publisher":"colt.net","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["identity_and_zero_trust_access"],"named_customer":null,"segment":"Investment banking and trading","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"EU","exact_supporting_wording":"18/25 of the top global banks trust us with their critical infrastructure and connectivity","reviewer_summary":"Dedicated Capital Markets industry page with named customers Stuttgart Stock Exchange, Byblos Bank Europe and RCI Bank and Services. Byblos Bank Europe is quoted on a Colt and Zscaler SSE deployment: \"Compared to our previous VPN-based approach, the Colt and Zscaler solution is a real enhancement that delivers a faster and better user experience and helps increase productivity\" (Ramy Matar, Network Consultant, BBE). Note the focus is capital markets and trading connectivity rather than retail banking or insurance; the 18/25 top global banks figure is a vendor claim with no source cited on the page.","limitation_and_notes":"Supplier industry page. Named financial customers (Stuttgart Stock Exchange, Byblos Bank Europe, RCI Bank and Services) with attributed quotes plus a top-25-banks penetration claim. Strong but vendor-claimed. | Confirmed - exact match"},{"id":"src_financial_services_fs_025","workbook_source_id":"FS-025","url":"https://www.colt.net/resources/","title":"Networking News, Resources, Trends & Industry Insights - Colt","publisher":"colt.net","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"18/25 of the top global banks trust us with their critical infrastructure and connectivity","reviewer_summary":"Dedicated Capital Markets industry page with named customers Stuttgart Stock Exchange, Byblos Bank Europe and RCI Bank and Services. Byblos Bank Europe is quoted on a Colt and Zscaler SSE deployment: \"Compared to our previous VPN-based approach, the Colt and Zscaler solution is a real enhancement that delivers a faster and better user experience and helps increase productivity\" (Ramy Matar, Network Consultant, BBE). Note the focus is capital markets and trading connectivity rather than retail banking or insurance; the 18/25 top global banks figure is a vendor claim with no source cited on the page.","limitation_and_notes":"Supplier resource library. Its industry filter taxonomy (Capital Markets, Defence, Manufacturing, Media & Entertainment, Pharma, Professional services, Retail, Transport & Logistics) is the fullest statement of the sectors Colt indexes content against. | Not found on page"},{"id":"src_financial_services_fs_023","workbook_source_id":"FS-023","url":"https://www.colt.net/solutions/","title":"Solutions - Colt Technology Services (industries hub)","publisher":"colt.net","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"superseded","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"18/25 of the top global banks trust us with their critical infrastructure and connectivity","reviewer_summary":"Dedicated Capital Markets industry page with named customers Stuttgart Stock Exchange, Byblos Bank Europe and RCI Bank and Services. Byblos Bank Europe is quoted on a Colt and Zscaler SSE deployment: \"Compared to our previous VPN-based approach, the Colt and Zscaler solution is a real enhancement that delivers a faster and better user experience and helps increase productivity\" (Ramy Matar, Network Consultant, BBE). Note the focus is capital markets and trading connectivity rather than retail banking or insurance; the 18/25 top global banks figure is a vendor claim with no source cited on the page.","limitation_and_notes":"Supplier navigation hub. Definitive list of the only six industry pages Colt publishes: Capital Markets, Manufacturing, Pharma, Retail, Transport & Logistics, Defence. Used to establish absence of sector pages. | New Source: https://www.colt.net/solutions/capital-markets"}]},{"slug":"comcastbusiness","name":"Comcast Business","marketplace_url":"https://netify.co.uk/marketplace/comcastbusiness/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Branch and office connectivity and North America delivery via a dated (30 April 2025), live, named press release (American Heritage Credit Union, 37 locations). Fit applies to the US regime.","gaps_and_unknowns":"The release names 'Comcast Business Global Secure Networking' but doesn't use the words SD-WAN or SASE explicitly, so this is graded cautiously. STAR Financial Bank (an independent media report) is a further US lead not used as primary evidence here.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_101"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"to_review","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_101","workbook_source_id":"FS-101","url":"https://business.comcast.com/about-us/press-releases/2025/cb-american-heritage-credit-union","title":"American Heritage Credit Union 'Banks' on Comcast Business to Drive Innovation and Strategic Expansion","publisher":"business.comcast.com","publication_date":"2025-04-30","checked_date":"2026-09-11","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Contract award","requirement_codes":["branch_and_office_connectivity"],"named_customer":"American Heritage Credit Union","segment":"Building society or credit union","named_product_or_service":"Comcast Business Ethernet Network Services, Dedicated Internet, Comcast Business Global Secure Networking","service_family":"Supporting only","estate":"37 locations; serves 300,000+ members","countries_or_regions":"United States (Pennsylvania and New Jersey)","ot_or_production_environment":null,"measured_or_stated_outcome":"Reliable connectivity powering automated branches, 24/7 virtual ATMs and cloud-based systems across 37 locations","industrial_standard_or_regulation":"None stated","regulatory_regime":"US","exact_supporting_wording":"\"Comcast Business is providing American Heritage Credit Union with advanced connectivity solutions including Comcast Business Ethernet Network Services, Dedicated Internet, and Comcast Business Global Secure Networking and Voice services across 37 locations.\"","reviewer_summary":"Comcast Business's own dated press release (30 April 2025), verified live 2026-09-11, naming a real US credit union (American Heritage, 300,000+ members) and Comcast's Global Secure Networking product across 37 locations including two new branches. 'Global Secure Networking' is Comcast's SD-WAN/SASE-class product line (successor branding to the Masergy Global SD-WAN acquisition) rather than a plain connectivity product, but the release doesn't use the words SD-WAN or SASE directly, so it's graded Supporting only on that field rather than a firm SD-WAN/SASE classification.","limitation_and_notes":"Added 2026-09-11 to properly back Comcast's Branch and office connectivity capability cell, which was previously Proven with no source. Ethernet/Dedicated Internet on their own would not qualify as SD-WAN evidence under rule 4; Global Secure Networking is the qualifying element here, treated cautiously as Supporting rather than a confirmed SD-WAN/SASE product name."},{"id":"src_financial_services_fs_026","workbook_source_id":"FS-026","url":"https://business.comcast.com/enterprise","title":"Enterprise Services & Solutions | Comcast Business","publisher":"business.comcast.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"STAR Financial Bank powers new technology","reviewer_summary":"Dedicated financial services page with a named bank case study, a named CIO quote from Philadelphia Federal Credit Union and a US Bank feature. Three named customers in the sector.","limitation_and_notes":"Supplier's own enterprise landing page. Carries the Fortune 500 and small business scale statement plus customer logos (HCA Healthcare, Brigham and Women's Hospital, Choice Hotels International, US Bank, Citizen M, RaceTrac, Morningstar, Goodwill, Oak Valley Bank). | Not found on page"},{"id":"src_financial_services_fs_027","workbook_source_id":"FS-027","url":"https://business.comcast.com/enterprise/industry-solutions/financial-services","title":"Financial Services Solutions | Comcast Business","publisher":"business.comcast.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"superseded","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"STAR Financial Bank powers new technology","reviewer_summary":"Dedicated financial services page with a named bank case study, a named CIO quote from Philadelphia Federal Credit Union and a US Bank feature. Three named customers in the sector.","limitation_and_notes":"Supplier's dedicated financial services page with named case study (STAR Financial Bank), named customer quote (Philadelphia Federal Credit Union) and US Bank video. | New Source: https://business.comcast.com/financial-services"}]},{"slug":"ntt-data","name":"NTT DATA","marketplace_url":"https://netify.co.uk/marketplace/ntt-data/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"Proven for Branch and office connectivity via a named-sector, product-specific SD-WAN newsroom story for an anonymised 'leading Asian bank in Indonesia'. This is outside the UK/EU/US/Canada regimes, so no regulatory or delivery column applies.","gaps_and_unknowns":"BBVA is named on a separate industry page with a '320+ clients, 8 of top 15 global banks' claim, but that page 'carries no networking content' per Harry's own note, so it isn't used as capability evidence here.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":2,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_055"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_055","workbook_source_id":"FS-055","url":"https://services.global.ntt/en-us/newsroom/indonesia-bank-creates-high-visibility-network-using-sd-wan-with-ntt","title":"NTT builds network using SD-WAN for leading Indonesian bank | NTT","publisher":"services.global.ntt","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["branch_and_office_connectivity"],"named_customer":null,"segment":"Retail banking","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"a leading Asian bank in Indonesia","reviewer_summary":"Two independent supplier sources. The newsroom item (evidence 15) is SD-WAN specific but the bank is not named. The dedicated Banking and Financial Services industry page (evidence 9) names BBVA and states 320+ clients in this sector globally and 8 of top 15 global banks have been clients, but carries no networking content. Insurance also has its own industry page in the supplier's industry index.","limitation_and_notes":"Supplier newsroom item. SD-WAN specific and sector specific, but the bank is not named, which weakens it. | Confirmed - exact match"},{"id":"src_financial_services_fs_054","workbook_source_id":"FS-054","url":"https://services.global.ntt/en-us/industries/banking","title":"Banking and Financial Services | NTT DATA","publisher":"services.global.ntt","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"a leading Asian bank in Indonesia","reviewer_summary":"Two independent supplier sources. The newsroom item (evidence 15) is SD-WAN specific but the bank is not named. The dedicated Banking and Financial Services industry page (evidence 9) names BBVA and states 320+ clients in this sector globally and 8 of top 15 global banks have been clients, but carries no networking content. Insurance also has its own industry page in the supplier's industry index.","limitation_and_notes":"Supplier's dedicated banking industry page with named client BBVA and client-count metrics. Contains no SD-WAN or SASE content. | Not found on page"}]},{"slug":"orangebusiness","name":"Orange Business","marketplace_url":"https://netify.co.uk/marketplace/orangebusiness/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for Branch and office connectivity via the strongest single case study in this workbook: a dated press release naming BNP Paribas (a major French bank) and an explicit SD-WAN deployment across 1,800 branches. Fit applies to the EU regime; this is a single-country (France) deployment, so no Global delivery claim is made from it.","gaps_and_unknowns":"Sto (BankID/BankAxept, Norway) and Banqsoft (financial software, Norway) are further corroborating leads tagged 'Bank & insurance' but not independently opened this pass.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["src_financial_services_fs_058"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_058","workbook_source_id":"FS-058","url":"https://www.orange-business.com/en/press/bnp-paribas-joins-forces-orange-business-services-deploy-sd-wan-1800-retail-sites-france","title":"BNP Paribas joins forces with Orange Business to deploy SD-WAN for 1,800 retail sites in France","publisher":"orange-business.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["branch_and_office_connectivity"],"named_customer":null,"segment":"Retail banking","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"EU","exact_supporting_wording":"BNP Paribas has chosen Orange Business to deploy an SD-WAN solution in more than 1,800 bank branches across France.","reviewer_summary":"Best-evidenced sector. A dated press release names a tier one bank and an explicit SD-WAN deployment with site counts, which is directly on point for this comparison. Corroborated by two further case studies tagged 'Bank & insurance': Sto, which operates BankID and BankAxept in Norway, and Banqsoft, a financial software supplier. A dedicated financial services industry page appears to exist but would not render, so it is recorded as Tier 4.","limitation_and_notes":"Dated supplier press release naming a tier one bank and an explicit SD-WAN deployment with site counts. Strongest financial services and European SD-WAN evidence found. | Confirmed - exact match"},{"id":"src_financial_services_fs_056","workbook_source_id":"FS-056","url":"https://www.orange-business.com/en/about-us/customer-stories/sto-sovereign-services-banking-finance","title":"Sto: Sovereign services for banking and finance","publisher":"orange-business.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"BNP Paribas has chosen Orange Business to deploy an SD-WAN solution in more than 1,800 bank branches across France.","reviewer_summary":"Best-evidenced sector. A dated press release names a tier one bank and an explicit SD-WAN deployment with site counts, which is directly on point for this comparison. Corroborated by two further case studies tagged 'Bank & insurance': Sto, which operates BankID and BankAxept in Norway, and Banqsoft, a financial software supplier. A dedicated financial services industry page appears to exist but would not render, so it is recorded as Tier 4.","limitation_and_notes":"Supplier case study tagged Bank & insurance, named Norwegian customer operating BankID and BankAxept. Cloud rather than network scope. | Not found on page"},{"id":"src_financial_services_fs_057","workbook_source_id":"FS-057","url":"https://www.orange-business.com/en/about-us/customer-stories/foundation-innovation-how-banqsoft-builds-european-cloud-platform","title":"From foundation to innovation: how Banqsoft builds on a European cloud platform","publisher":"orange-business.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"BNP Paribas has chosen Orange Business to deploy an SD-WAN solution in more than 1,800 bank branches across France.","reviewer_summary":"Best-evidenced sector. A dated press release names a tier one bank and an explicit SD-WAN deployment with site counts, which is directly on point for this comparison. Corroborated by two further case studies tagged 'Bank & insurance': Sto, which operates BankID and BankAxept in Norway, and Banqsoft, a financial software supplier. A dedicated financial services industry page appears to exist but would not render, so it is recorded as Tier 4.","limitation_and_notes":"Supplier case study tagged Bank & insurance, named financial software customer. Corroborates financial services but is a cloud engagement. | Not found on page"}]},{"slug":"versa-networks","name":"Versa Networks","marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"Proven for Branch and office connectivity only, via an anonymised 'Fortune 500 financial services company' transformation story plus a Gartner Peer Insights review attributed to a banking network engineer. Customer anonymised throughout, so no regime or delivery column is claimed.","gaps_and_unknowns":"Versa's dedicated financial services page (/solutions/industries/financial-services/) could not be loaded on the original pass and was not re-attempted this round.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"proven","evidence_source_ids":["evidence:versa-networks:7"],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"evidence:versa-networks:7","workbook_source_id":"FS-073","url":"https://versa-networks.com/","title":"Versa Networks - homepage (named customer quotes, VersaONE positioning)","publisher":"","publication_date":"2026-03-16","checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":["branch_and_office_connectivity"],"named_customer":null,"segment":"Unspecified","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"A Fortune 500 financial services company chooses software defined WAN (SD-WAN) to transform their legacy architecture","reviewer_summary":"Strongest sector evidence for this supplier. Two independent strands on the vendor's own site: a Fortune 500 financial services customer story on the homepage, and a Gartner Peer Insights review published on the customers page attributed to 'Network Engineer – Banking'. A dedicated page is also listed at https://versa-networks.com/solutions/industries/financial-services/ but could not be loaded. Neither customer is named.","limitation_and_notes":"Tier 1 supplier material. Read via https://r.jina.ai/https://versa-networks.com/ because of the same bot wall. Quotes re-extracted on three separate passes and matched each time. Customer stories are anonymised apart from Adobe. | Confirmed - exact match"},{"id":"src_financial_services_fs_072","workbook_source_id":"FS-072","url":"https://versa-networks.com/customers/","title":"Our Customers | Versa Networks","publisher":"versa-networks.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"A Fortune 500 financial services company chooses software defined WAN (SD-WAN) to transform their legacy architecture","reviewer_summary":"Strongest sector evidence for this supplier. Two independent strands on the vendor's own site: a Fortune 500 financial services customer story on the homepage, and a Gartner Peer Insights review published on the customers page attributed to 'Network Engineer – Banking'. A dedicated page is also listed at https://versa-networks.com/solutions/industries/financial-services/ but could not be loaded. Neither customer is named.","limitation_and_notes":"Tier 1 supplier material. versa-networks.com sits behind an Imperva JavaScript bot wall returning only 'Javascript is required' to non-browser clients, so this was read via the text proxy https://r.jina.ai/https://versa-networks.com/customers/ where every quoted string reproduces. Attributions are anonymised Gartner Peer Insights reviewers labelled by industry, not named customers. | Not found on page"},{"id":"src_manufacturing_mfg_060","workbook_source_id":"FS-074","url":"https://versa-networks.com/company/","title":"Versa Networks site navigation, Industry Solutions menu, rendered on the /company/ 404 page","publisher":"versa-networks.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"A Fortune 500 financial services company chooses software defined WAN (SD-WAN) to transform their legacy architecture","reviewer_summary":"Strongest sector evidence for this supplier. Two independent strands on the vendor's own site: a Fortune 500 financial services customer story on the homepage, and a Gartner Peer Insights review published on the customers page attributed to 'Network Engineer – Banking'. A dedicated page is also listed at https://versa-networks.com/solutions/industries/financial-services/ but could not be loaded. Neither customer is named.","limitation_and_notes":"Tier 1 but weaker than a live page. This URL 404s; its 'Looking for something?' block renders the full site navigation including an Industry Solutions menu of dedicated industry page URLs. Read via https://r.jina.ai/https://versa-networks.com/company/. The individual industry pages could NOT be loaded: reader attempts returned HTTP 429 and direct attempts hit the bot wall. Verified navigation entries, not verified page content, so possibly stale. | Not found on page"}]},{"slug":"aryaka","name":"Aryaka","marketplace_url":"https://netify.co.uk/marketplace/aryaka/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"No defensible financial services capability was found - the only evidence is a single named customer (Calypso, a capital markets software firm) in an undated video testimonial, with no deployment detail. Not fit-for-purpose to recommend for FS buyers on current evidence.","gaps_and_unknowns":"Calypso confirms Aryaka indexes 'Banking/Financial Services' as a served sector, but there is no written case study, no regulatory framework, and no regime the fit could be said to apply to.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":2,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_005","workbook_source_id":"FS-005","url":"https://www.aryaka.com/resources/","title":"Resources | Aryaka SD-WAN & SASE","publisher":"aryaka.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"Investment banking and trading","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"Financial Services Company Calypso","reviewer_summary":"Graded yes on a named customer (Calypso, a capital markets software firm) presented by Aryaka explicitly as a financial services company, plus 'Banking/Financial Services' being one of only six labels in Aryaka's own published industry filter. Confidence is medium not high because the evidence is an undated video testimonial rather than a written case study, there is no dedicated financial services industry page to sit alongside manufacturing, transport and professional services, and no banking accreditation or regulatory framework was found.","limitation_and_notes":"Supplier's own resource library. Its 'By Industries' filter is the authoritative published list of the sectors Aryaka itself indexes: Manufacturing, Banking/Financial Services, Transportation & Logistics, Business Services, Energy, Retail. Useful as a negative check for the four sectors absent from it. | Confirmed - exact match"},{"id":"src_financial_services_fs_007","workbook_source_id":"FS-007","url":"https://www.aryaka.com/videos/financial-services-company-calypso-on-aryakas-customer-support/","title":"Financial Services Company Calypso On Aryaka's Customer Support","publisher":"aryaka.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"Investment banking and trading","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"Financial Services Company Calypso","reviewer_summary":"Graded yes on a named customer (Calypso, a capital markets software firm) presented by Aryaka explicitly as a financial services company, plus 'Banking/Financial Services' being one of only six labels in Aryaka's own published industry filter. Confidence is medium not high because the evidence is an undated video testimonial rather than a written case study, there is no dedicated financial services industry page to sit alongside manufacturing, transport and professional services, and no banking accreditation or regulatory framework was found.","limitation_and_notes":"Supplier's own customer video page. The only named financial services customer found. Undated video testimonial rather than a written case study, hence medium confidence. | Confirmed - exact match"},{"id":"src_financial_services_fs_006","workbook_source_id":"FS-006","url":"https://www.aryaka.com/sase-reviews/","title":"See Why Customers Rank Aryaka #1 In SD-WAN On G2 Summer 2026","publisher":"aryaka.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"superseded","reviewer_confidence":"medium","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Financial Services Company Calypso","reviewer_summary":"Graded yes on a named customer (Calypso, a capital markets software firm) presented by Aryaka explicitly as a financial services company, plus 'Banking/Financial Services' being one of only six labels in Aryaka's own published industry filter. Confidence is medium not high because the evidence is an undated video testimonial rather than a written case study, there is no dedicated financial services industry page to sit alongside manufacturing, transport and professional services, and no banking accreditation or regulatory framework was found.","limitation_and_notes":"Supplier's own review round-up page. Names Cathay, World Kinect, Hubbell, NVIDIA, Makino and Pilot, and states the industries customers span. Vendor-curated selection of third-party reviews, so treat the review scores as promotional. | New Source: https://www.aryaka.com/videos/financial-services-company-calypso-on-aryakas-customer-support/"}]},{"slug":"zscaler","name":"Zscaler","marketplace_url":"https://netify.co.uk/marketplace/zscaler/","research_status":"in_progress","overall_confidence":"medium","fit_conclusion":"Proven for UK delivery and North America delivery via two named customers on Zscaler's own dedicated financial services page: Hastings Direct (UK insurer) and Fannie Mae (US). No specific technical capability is described precisely enough to tag beyond delivery geography.","gaps_and_unknowns":"PCI DSS, SOX, NIST CSF and ISO 27001 are named on the page, but generically, not connected to a specific customer's compliance statement, so no regulatory column is claimed. Capitec (South Africa) and L&T Financial Services (India) are further named customers outside the tracked regimes.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":2,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"to_review","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"to_review","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_080","workbook_source_id":"FS-080","url":"https://www.zscaler.com/industries/financial-services","title":"Zscaler for Financial Services","publisher":"zscaler.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"Multiple","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Multiple","exact_supporting_wording":"We embraced security as a journey that ran in parallel with our exploration of our applications, data, and transaction processing.","reviewer_summary":"Quote is attributed to Fannie Mae on the dedicated financial services page. Four named customers across three continents: Fannie Mae (US), Hastings Direct (UK insurance), Capitec (South Africa) and L&T Financial Services (India). A second banking landing page corroborates the same set. Regulatory frameworks named on the page include PCI DSS, SOX, NIST CSF and ISO 27001.","limitation_and_notes":"Supplier's own dedicated financial services page with four named customers and attributed quotes. Strong for sector grading, vendor-claimed. | Confirmed - exact match"},{"id":"src_financial_services_fs_081","workbook_source_id":"FS-081","url":"https://www.zscaler.com/digital-transformation-for-banking-sector","title":"Zscaler digital transformation for the banking sector","publisher":"zscaler.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"Multiple","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Multiple","exact_supporting_wording":"We embraced security as a journey that ran in parallel with our exploration of our applications, data, and transaction processing.","reviewer_summary":"Quote is attributed to Fannie Mae on the dedicated financial services page. Four named customers across three continents: Fannie Mae (US), Hastings Direct (UK insurance), Capitec (South Africa) and L&T Financial Services (India). A second banking landing page corroborates the same set. Regulatory frameworks named on the page include PCI DSS, SOX, NIST CSF and ISO 27001.","limitation_and_notes":"Supplier's own banking landing page, linked from the industries index. Corroborates the same four named financial services customers as source 4. | Confirmed - exact match"},{"id":"src_manufacturing_mfg_066","workbook_source_id":"FS-079","url":"https://www.zscaler.com/industries","title":"Zscaler Industries index","publisher":"zscaler.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"We embraced security as a journey that ran in parallel with our exploration of our applications, data, and transaction processing.","reviewer_summary":"Quote is attributed to Fannie Mae on the dedicated financial services page. Four named customers across three continents: Fannie Mae (US), Hastings Direct (UK insurance), Capitec (South Africa) and L&T Financial Services (India). A second banking landing page corroborates the same set. Regulatory frameworks named on the page include PCI DSS, SOX, NIST CSF and ISO 27001.","limitation_and_notes":"Supplier's own industries hub. Used to establish which industries Zscaler actually publishes dedicated pages for: banking and financial services, healthcare, US public sector (federal, state and local), Australian government, China, education, manufacturing. Absence of retail, energy, transport, professional services and hospitality pages is itself informative. | Not found on page"}]},{"slug":"ericsson-cradlepoint","name":"Ericsson Cradlepoint","marketplace_url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"No financial services evidence exists. Harry's 4 September research explicitly confirmed no bank, credit union, insurer or payments customer anywhere on the site, including a check of all 198 press release titles. Cannot currently be recommended for FS buyers.","gaps_and_unknowns":"The nearest mention found was 'tax prep offices' in a list of pop-up location types, which is not sector evidence.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":5,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_029","workbook_source_id":"FS-029","url":"https://cradlepoint.com/products/branch/","title":"Branch - Ericsson Enterprise Wireless Solutions","publisher":"cradlepoint.com","publication_date":null,"checked_date":null,"source_ownership":"to_review","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"Unspecified","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"For pop-up locations such as seasonal stores, tax prep offices, and election polling places, wired connectivity often either isn't available or is too expensive.","reviewer_summary":"Checked the UK industries page, the branch and branch continuity product pages, the retail collateral, the resource library, the full page sitemap and all 198 press release titles in the press release sitemap. No bank, credit union, insurer, payments firm or financial services customer is named anywhere, and there is no financial services landing page. The nearest mention is tax prep offices in a list of pop-up location types, which is not sector evidence. Graded unknown.","limitation_and_notes":"Supplier product page naming Valvoline Instant Oil Change franchisee Henley Enterprises as a customer. | Confirmed - exact match"},{"id":"src_manufacturing_mfg_023","workbook_source_id":"FS-028","url":"https://cradlepoint.com/gb/industries/","title":"Industries (UK site) - Ericsson Enterprise Wireless Solutions","publisher":"cradlepoint.com","publication_date":null,"checked_date":null,"source_ownership":"to_review","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"For pop-up locations such as seasonal stores, tax prep offices, and election polling places, wired connectivity often either isn't available or is too expensive.","reviewer_summary":"Checked the UK industries page, the branch and branch continuity product pages, the retail collateral, the resource library, the full page sitemap and all 198 press release titles in the press release sitemap. No bank, credit union, insurer, payments firm or financial services customer is named anywhere, and there is no financial services landing page. The nearest mention is tax prep offices in a list of pop-up location types, which is not sector evidence. Graded unknown.","limitation_and_notes":"Supplier's own UK industries landing page. Names exactly four industries (retail, public safety, manufacturing, construction) with descriptive copy but no named customers on the page itself. | Not found on page"},{"id":"src_financial_services_fs_030","workbook_source_id":"FS-030","url":"https://cradlepoint.ericsson.com/resources","title":"Resources library - Ericsson Enterprise Wireless Solutions","publisher":"cradlepoint.ericsson.com","publication_date":null,"checked_date":null,"source_ownership":"to_review","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"For pop-up locations such as seasonal stores, tax prep offices, and election polling places, wired connectivity often either isn't available or is too expensive.","reviewer_summary":"Checked the UK industries page, the branch and branch continuity product pages, the retail collateral, the resource library, the full page sitemap and all 198 press release titles in the press release sitemap. No bank, credit union, insurer, payments firm or financial services customer is named anywhere, and there is no financial services landing page. The nearest mention is tax prep offices in a list of pop-up location types, which is not sector evidence. Graded unknown.","limitation_and_notes":"Supplier resource library. Only four success stories are currently surfaced: City of Cheyenne, Valvoline, a Seattle transit agency and a dozer operations story. Filters are by technology (Private 5G, Wireless WAN, 5G, Security), not by industry. | Not found on page"},{"id":"src_financial_services_fs_031","workbook_source_id":"FS-031","url":"https://cradlepoint.com/press_release-sitemap.xml","title":"Press release sitemap","publisher":"cradlepoint.com","publication_date":null,"checked_date":null,"source_ownership":"to_review","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"For pop-up locations such as seasonal stores, tax prep offices, and election polling places, wired connectivity often either isn't available or is too expensive.","reviewer_summary":"Checked the UK industries page, the branch and branch continuity product pages, the retail collateral, the resource library, the full page sitemap and all 198 press release titles in the press release sitemap. No bank, credit union, insurer, payments firm or financial services customer is named anywhere, and there is no financial services landing page. The nearest mention is tax prep offices in a list of pop-up location types, which is not sector evidence. Graded unknown.","limitation_and_notes":"Supplier XML sitemap listing 198 press release URLs. Used as an index to locate sector and region evidence and to confirm which sectors are absent. | Not found on page"},{"id":"src_financial_services_fs_032","workbook_source_id":"FS-032","url":"https://cradlepoint.com/page-sitemap.xml","title":"Page sitemap","publisher":"cradlepoint.com","publication_date":null,"checked_date":null,"source_ownership":"to_review","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"For pop-up locations such as seasonal stores, tax prep offices, and election polling places, wired connectivity often either isn't available or is too expensive.","reviewer_summary":"Checked the UK industries page, the branch and branch continuity product pages, the retail collateral, the resource library, the full page sitemap and all 198 press release titles in the press release sitemap. No bank, credit union, insurer, payments firm or financial services customer is named anywhere, and there is no financial services landing page. The nearest mention is tax prep offices in a list of pop-up location types, which is not sector evidence. Graded unknown.","limitation_and_notes":"Supplier XML sitemap listing all site pages. Used to confirm there is no financial services, healthcare, education or hospitality landing page. | Not found on page"}]},{"slug":"forcepoint","name":"Forcepoint","marketplace_url":"https://netify.co.uk/marketplace/forcepoint/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"Three named financial customers exist (Fedbank Financial Services Ltd, UCI, Vakifbank), but the evidence is explicitly data-security/NGFW deployment, not Secure SD-WAN, so per evidence rule 4 it cannot support any of the network capability columns. Cannot currently be recommended on SD-WAN/SASE grounds specifically.","gaps_and_unknowns":"A specific SD-WAN or SASE deployment for a named financial institution is the key missing piece here.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_037","workbook_source_id":"FS-037","url":"https://www.forcepoint.com/solutions/industry/financial-services","title":"Forcepoint cybersecurity solutions for banks (Financial Services industry page)","publisher":"forcepoint.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"Multiple","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"With a single hybrid agent Forcepoint offered ease of manageability, which was our key selection criterion.","reviewer_summary":"Strongest sector evidence found. Dedicated industry page with three named customers: Fedbank Financial Services Ltd (source of the quote), UCI and Vakifbank. The customer index separately tags Middle East Bank, FBD Insurance and HDI Seguros as Financial Services, and Emirates NBD is featured. Caveat: the named references are data security and NGFW deployments, not Secure SD-WAN deployments. Note also that the page H1 narrows to banks specifically, 'Forcepoint AI-powered Cybersecurity Solutions for Banks', while the navigation label is the broader 'Financial Services'.","limitation_and_notes":"Tier 1 supplier material. Dedicated financial services page carrying three named bank and lender testimonials. Read twice; the Fedbank testimonial opening reproduced identically on both passes, the second pass returning the fuller sentence. | Confirmed - exact match"},{"id":"src_manufacturing_mfg_028","workbook_source_id":"FS-036","url":"https://www.forcepoint.com/company/customers","title":"Forcepoint Customer Stories index","publisher":"forcepoint.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"With a single hybrid agent Forcepoint offered ease of manageability, which was our key selection criterion.","reviewer_summary":"Strongest sector evidence found. Dedicated industry page with three named customers: Fedbank Financial Services Ltd (source of the quote), UCI and Vakifbank. The customer index separately tags Middle East Bank, FBD Insurance and HDI Seguros as Financial Services, and Emirates NBD is featured. Caveat: the named references are data security and NGFW deployments, not Secure SD-WAN deployments. Note also that the page H1 narrows to banks specifically, 'Forcepoint AI-powered Cybersecurity Solutions for Banks', while the navigation label is the broader 'Financial Services'.","limitation_and_notes":"Tier 1 supplier material. Carries Forcepoint's own industry tags against each customer story, which is the single most useful sector artefact found. Read three times; the tag set (Healthcare, Education, Aerospace, Entertainment, Financial Services, Manufacturing, Energy, Information Technology) reproduced consistently. | Not found on page"},{"id":"src_financial_services_fs_038","workbook_source_id":"FS-038","url":"https://www.forcepoint.com/customer-stories/hdi-seguros","title":"HDI Seguros customer story","publisher":"forcepoint.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"With a single hybrid agent Forcepoint offered ease of manageability, which was our key selection criterion.","reviewer_summary":"Strongest sector evidence found. Dedicated industry page with three named customers: Fedbank Financial Services Ltd (source of the quote), UCI and Vakifbank. The customer index separately tags Middle East Bank, FBD Insurance and HDI Seguros as Financial Services, and Emirates NBD is featured. Caveat: the named references are data security and NGFW deployments, not Secure SD-WAN deployments. Note also that the page H1 narrows to banks specifically, 'Forcepoint AI-powered Cybersecurity Solutions for Banks', while the navigation label is the broader 'Financial Services'.","limitation_and_notes":"Tier 1 supplier material. Named insurance customer, tagged Financial Services on the customer index. Used as supporting evidence for Latin America. Single read; the page heading is generic and does not name the customer, which weakens it. | Not found on page"}]},{"slug":"juniper","name":"Juniper Networks","marketplace_url":"https://netify.co.uk/marketplace/juniper/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"No named financial customer, case study or compliance claim was found - only a dedicated industry page. Cannot currently be recommended for FS buyers on the evidence available.","gaps_and_unknowns":"The original financial-services-specific URLs (/solutions/financial-services.html, /solutions/finance.html) now 404; the live page sits under a general /solutions/industries/ path.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":2,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_048","workbook_source_id":"FS-048","url":"https://www.juniper.net/us/en/solutions/industries/financial-services.html","title":"Financial Services Solutions | Juniper Networks","publisher":"juniper.net","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"Unspecified","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"The dynamic, high-stakes financial services sector demands reliable, secure connectivity to serve customers and ensure exceptional commerce experiences.","reviewer_summary":"Graded yes on the dedicated industry page test. Financial services appears in Juniper's published industry list [3] and has its own page. No named bank, insurer or financial institution customer, no case study and no sector compliance claim (PCI DSS, DORA, FCA) was found. Note the original /solutions/financial-services.html and /solutions/finance.html URLs now 404 [25]; the live page sits under /solutions/industries/.","limitation_and_notes":"Supplier's own dedicated financial services industry page. Sector-specific framing, no named customers and no financial-sector compliance claims. Undated. | Confirmed - exact match"},{"id":"src_manufacturing_mfg_039","workbook_source_id":"FS-047","url":"https://www.juniper.net/us/en/solutions.html","title":"Solutions & Technologies | Juniper Networks","publisher":"juniper.net","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"medium","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"The dynamic, high-stakes financial services sector demands reliable, secure connectivity to serve customers and ensure exceptional commerce experiences.","reviewer_summary":"Graded yes on the dedicated industry page test. Financial services appears in Juniper's published industry list [3] and has its own page. No named bank, insurer or financial institution customer, no case study and no sector compliance claim (PCI DSS, DORA, FCA) was found. Note the original /solutions/financial-services.html and /solutions/finance.html URLs now 404 [25]; the live page sits under /solutions/industries/.","limitation_and_notes":"Supplier's own solutions index. Source for the definitive list of industries Juniper publishes dedicated pages for, and for the industry page URLs. Undated. | Not found on page"}]},{"slug":"netskope","name":"Netskope","marketplace_url":"https://netify.co.uk/marketplace/netskope/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"The best-evidenced sector page on Netskope's own site by volume (four named customer stories, DORA/GDPR/NIS2/PCI referenced), but none of that evidence is specific enough to tie to one of the 28 capability columns with confidence, so no cell is marked Proven under the strict evidence rules.","gaps_and_unknowns":"Individually opening the four named case studies (Apex Group, JLL, RSM Australia, Ascensus) is the clearest next step - the current level of detail only supports general sector relevance, not a specific technical or regulatory claim.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":3,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_052","workbook_source_id":"FS-052","url":"https://www.netskope.com/solutions/financial-services-and-insurance","title":"Securing Financial Services in the Cloud and AI Era","publisher":"netskope.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"Multiple","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"Not stated","exact_supporting_wording":"More than 4,000 customers, including three of the five largest financial services companies on the Fortune 100, trust our unified secure access service edge (SASE) platform, Netskope One.","reviewer_summary":"The best evidenced sector by a clear margin. Four named customer stories on the industry page (Apex Group, JLL, RSM Australia, Ascensus), plus BMO and The Auto Club Group as logos, plus explicit DORA, GDPR, NIS 2 and PCI references. The Fortune 100 claim is a vendor claim and is not independently verified here.","limitation_and_notes":"Dedicated supplier industry page carrying four named customer stories (Apex Group, JLL, RSM Australia, Ascensus) and a quantified Fortune 100 claim. Strongest sector page on the site. | Confirmed - exact match"},{"id":"src_manufacturing_mfg_042","workbook_source_id":"FS-051","url":"https://www.netskope.com/customers","title":"Netskope Customers","publisher":"netskope.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"More than 4,000 customers, including three of the five largest financial services companies on the Fortune 100, trust our unified secure access service edge (SASE) platform, Netskope One.","reviewer_summary":"The best evidenced sector by a clear margin. Four named customer stories on the industry page (Apex Group, JLL, RSM Australia, Ascensus), plus BMO and The Auto Club Group as logos, plus explicit DORA, GDPR, NIS 2 and PCI references. The Fortune 100 claim is a vendor claim and is not independently verified here.","limitation_and_notes":"Supplier's own customer index. Carries named customer logos (Airbus, BMO, Colgate Palmolive, ManTech, Prologis, JLL, Orbia, Republic Services, BLG, Culture Amp, GBfoods, The Auto Club Group, Elevance Health, Ross Stores, Sainsburys Supermarkets Ltd, Yamaha Motor Corporation, AVX Corporation) but only one linked case study. Logos alone are used as supporting, not sole, evidence. | Not found on page"},{"id":"src_financial_services_fs_053","workbook_source_id":"FS-053","url":"https://investors.netskope.com/","title":"Netskope Investor Relations","publisher":"investors.netskope.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"More than 4,000 customers, including three of the five largest financial services companies on the Fortune 100, trust our unified secure access service edge (SASE) platform, Netskope One.","reviewer_summary":"The best evidenced sector by a clear margin. Four named customer stories on the industry page (Apex Group, JLL, RSM Australia, Ascensus), plus BMO and The Auto Club Group as logos, plus explicit DORA, GDPR, NIS 2 and PCI references. The Fortune 100 claim is a vendor claim and is not independently verified here.","limitation_and_notes":"Investor relations site of a NASDAQ listed company (NTSK). Statements here carry securities law accountability, so the Fortune 100 customer claim is more reliable than ordinary marketing copy. | Not found on page"}]},{"slug":"palo-alto-prisma-sase","name":"Palo Alto Networks Prisma SASE","marketplace_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"Proven for North America delivery only, via a named US customer (Better, a mortgage lender) with an attributed CISO quote, though no specific technical capability is described precisely enough to tag. No SD-WAN/SASE case study naming a specific deployment detail was found for any financial customer.","gaps_and_unknowns":"The '8 of 10 Largest U.S. banks' claim is vendor-stated (About Us page) and not tied to a named case study, so it isn't used as evidence.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":2,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"to_review","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_059","workbook_source_id":"FS-059","url":"https://www.paloaltonetworks.com/industry/financial-services","title":"Financial services industry page","publisher":"paloaltonetworks.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"Payments and fintech","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"US","exact_supporting_wording":"Empowering financial institutions to securely deliver a modern customer experience.","reviewer_summary":"Dedicated financial services industry page with one named customer, Better, and an attributed quote from Ali Khan, Chief Information Security Officer. The about us page claims '8 of 10 Largest U.S. banks'. Financial services is also named as a target vertical in the dated Deutsche Telekom sovereignty release [30]. No named financial services Prisma SASE or SD-WAN case study was found.","limitation_and_notes":"Dedicated supplier page with one named customer (Better) and an attributed CISO quote. | Confirmed - exact match"},{"id":"src_financial_services_fs_060","workbook_source_id":"FS-060","url":"https://www.paloaltonetworks.com/company/about-us","title":"About us / company page","publisher":"paloaltonetworks.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Empowering financial institutions to securely deliver a modern customer experience.","reviewer_summary":"Dedicated financial services industry page with one named customer, Better, and an attributed quote from Ali Khan, Chief Information Security Officer. The about us page claims '8 of 10 Largest U.S. banks'. Financial services is also named as a target vertical in the dated Deutsche Telekom sovereignty release [30]. No named financial services Prisma SASE or SD-WAN case study was found.","limitation_and_notes":"Supplier's own corporate stat block. Unaudited marketing figures, but the organisation-size and sector penetration claims are explicit and attributable. | Not found on page"}]},{"slug":"sonicwall-cse","name":"SonicWall Cloud Secure Edge","marketplace_url":"https://netify.co.uk/marketplace/sonicwall-cse/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"Proven for North America delivery only, via a named US insurer (Lemonade, with a named CISO) appearing specifically on the Cloud Secure Edge page - the product this workbook tracks. No specific technical capability is described precisely enough to tag beyond delivery.","gaps_and_unknowns":"The '6,000 financial services organizations' claim is a self-reported, unaudited vendor figure. Apple Federal Credit Union and Delta Insurance are further named customers in the case study library, not independently opened.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":2,"accepted_source_count":1,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"to_review","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_064","workbook_source_id":"FS-064","url":"https://www.sonicwall.com/solutions/industry/financial-services","title":"SonicWall - Cyber Security for Financial Services","publisher":"sonicwall.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"Insurance","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":"US","exact_supporting_wording":"Trusted by more than 6,000 financial services organizations worldwide, SonicWall delivers robust, manageable network information security in financial services, with solutions that extend protection of network resources down to the branch level.","reviewer_summary":"Dedicated financial services industry page, which alone meets the yes bar. The 6,000 figure is an unaudited vendor claim with no third-party corroboration found. The industry page itself names no customer, but the case study library contains Apple Federal Credit Union, Delta Insurance, a savings and loan company and a health insurance company, and the Cloud Secure Edge page carries insurer Lemonade with a named CISO, Jonathan Jaffe.","limitation_and_notes":"Supplier's own dedicated financial services industry page. The 6,000 customer figure is a self-reported vendor claim, unverified by any third party. Quote confirmed on a second fetch. | Confirmed - exact match"},{"id":"src_financial_services_fs_065","workbook_source_id":"FS-065","url":"https://www.sonicwall.com/products/cloud-secure-edge","title":"SonicWall - Cloud Secure Edge product page","publisher":"sonicwall.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Trusted by more than 6,000 financial services organizations worldwide, SonicWall delivers robust, manageable network information security in financial services, with solutions that extend protection of network resources down to the branch level.","reviewer_summary":"Dedicated financial services industry page, which alone meets the yes bar. The 6,000 figure is an unaudited vendor claim with no third-party corroboration found. The industry page itself names no customer, but the case study library contains Apple Federal Credit Union, Delta Insurance, a savings and loan company and a health insurance company, and the Cloud Secure Edge page carries insurer Lemonade with a named CISO, Jonathan Jaffe.","limitation_and_notes":"Supplier's own SSE product page. Carries three named customer case studies with attributed testimonials (ShowTech Solutions, Stronghold Data, Lemonade). Contains no geographic coverage or pricing information. | Not found on page"}]},{"slug":"barracuda-secureedge","name":"Barracuda SecureEdge","marketplace_url":"https://netify.co.uk/marketplace/barracuda-secureedge/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"No financial services evidence was found despite two rounds of searching. Cannot currently be recommended for FS buyers on the evidence available.","gaps_and_unknowns":"One old (2019) blog post exists about Barracuda's CloudGen Firewall for Azure banking customers, but it names no customer and predates the SecureEdge SASE product this workbook tracks.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":0,"accepted_source_count":0,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[]},{"slug":"checkpoint","name":"Check Point","marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"No accepted source currently backs any capability - the dedicated financial services page and customer story cards (Aegean Baltic Bank, Covinoc, BBVA, Miller Insurance) could not be re-confirmed live on re-check. Cannot currently be recommended for FS buyers on the evidence available.","gaps_and_unknowns":"BASEL, SOX, NIST and GDPR are referenced on the page per the 4 September note, but this could not be re-verified this pass and, even if confirmed, a page reference alone would not meet the bar for a regulatory column under evidence rule 6.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":2,"accepted_source_count":0,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_018","workbook_source_id":"FS-018","url":"https://www.checkpoint.com/industry/financial-services/","title":"Check Point Cyber Security for Financial Institutions","publisher":"checkpoint.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"How Insurance Giant Athora Enhanced Hybrid Cloud Security","reviewer_summary":"Three qualifying items: customer story cards for Athora and NCACPA both labelled Industry: Financial Services, a further card headlined From Dashboard Chaos to a Single Risk Score under the same label, and a dedicated financial services industry page naming Aegean Baltic Bank, Covinoc, Emaar, BBVA and Miller Insurance with BASEL, SOX, NIST and GDPR referenced. Not SASE-specific: Athora is a hybrid cloud story. SASE appears on the financial services page only as a product navigation category.","limitation_and_notes":"Supplier's dedicated financial services industry page. Names Aegean Baltic Bank, Covinoc, Emaar, BBVA and Miller Insurance, and references BASEL, SOX, NIST and GDPR. Vendor claim. | Not found on page"},{"id":"src_manufacturing_mfg_014","workbook_source_id":"FS-017","url":"https://www.checkpoint.com/customer-stories/","title":"Check Point Customer Stories index (industry filter and story cards)","publisher":"checkpoint.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"superseded","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"How Insurance Giant Athora Enhanced Hybrid Cloud Security","reviewer_summary":"Three qualifying items: customer story cards for Athora and NCACPA both labelled Industry: Financial Services, a further card headlined From Dashboard Chaos to a Single Risk Score under the same label, and a dedicated financial services industry page naming Aegean Baltic Bank, Covinoc, Emaar, BBVA and Miller Insurance with BASEL, SOX, NIST and GDPR referenced. Not SASE-specific: Athora is a hybrid cloud story. SASE appears on the financial services page only as a product navigation category.","limitation_and_notes":"Supplier's own case study index. Strongest sector source in this task: each card carries a named customer, an industry label and a headline, and the page exposes a full industry filter list. Individual story pages behind these cards would not render for fetching, so grading rests on the index card text. | New Source: https://www.checkpoint.com/downloads/customer-stories/athora-case-study.pdf"}]},{"slug":"expereo","name":"Expereo","marketplace_url":"https://netify.co.uk/marketplace/expereo/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"No financial services evidence was found despite searching. Cannot currently be recommended for FS buyers on the evidence available.","gaps_and_unknowns":"Expereo's own marketplace material confirms UK presence (via the 2022 Breeze Networks acquisition) and global reach (190+ countries), but no named financial customer or case study exists.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":0,"accepted_source_count":0,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[]},{"slug":"opensystems","name":"Open Systems","marketplace_url":"https://netify.co.uk/marketplace/opensystems/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"No named financial services customer was found despite searching Open Systems' full 24-entry case study library - all named customers are manufacturing, chemicals or consumer companies. A third-party company profile (CB Insights) lists 'financial services' among served industries, which is too generic to use as evidence.","gaps_and_unknowns":"Open Systems' own case studies show strong quantified outcomes for other sectors (e.g. CLAAS, GEA) - the same rigour applied to a financial customer, if one is found, would likely produce strong evidence.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":0,"accepted_source_count":0,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[]},{"slug":"velocloud","name":"VeloCloud","marketplace_url":"https://netify.co.uk/marketplace/velocloud/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"4 Sep draft: Viable as underlying tech via a managed reseller; weak direct FS evidence from Arista itself","gaps_and_unknowns":"4 Sep draft: No DORA/FCA/PCI statements found; fit depends heavily on which carrier resells it","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":4,"accepted_source_count":0,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[{"id":"src_financial_services_fs_002","workbook_source_id":"FS-002","url":"https://www.arista.com/assets/data/pdf/VeloCloud-SD-WAN-Financial-Services-Solution-Brief.pdf","title":"VeloCloud SD-WAN for Financial Services - Solution Brief (PDF)","publisher":"arista.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"From the exchange edge to the back office, Arista offers a range of products optimized for demanding finance and trading environments.","reviewer_summary":"Strongest sector evidence found. There is a dedicated Electronic Trading industry page with named customer stories (Deutsche Boerse Group, ING Romania), named banking customers Odeabank and FIBI Bank under a 'Finance' label in the customer story library, and a VeloCloud SD-WAN for Financial Services solution brief. Caveat worth carrying: the named customers are Arista switching, CloudVision and data centre deployments, while the VeloCloud-specific financial brief keeps its deployments anonymous ('an international banking institution', 'a large insurance company').","limitation_and_notes":"Supplier marketing collateral, financial services specific. Describes anonymised deployments (an international banking institution, a large insurance company) rather than named customers. | Not found on page"},{"id":"src_financial_services_fs_003","workbook_source_id":"FS-003","url":"https://www.arista.com/en/company/customer-testimonials","title":"Arista Networks - Customer Testimonials / Customer Success Stories","publisher":"arista.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"From the exchange edge to the back office, Arista offers a range of products optimized for demanding finance and trading environments.","reviewer_summary":"Strongest sector evidence found. There is a dedicated Electronic Trading industry page with named customer stories (Deutsche Boerse Group, ING Romania), named banking customers Odeabank and FIBI Bank under a 'Finance' label in the customer story library, and a VeloCloud SD-WAN for Financial Services solution brief. Caveat worth carrying: the named customers are Arista switching, CloudVision and data centre deployments, while the VeloCloud-specific financial brief keeps its deployments anonymous ('an international banking institution', 'a large insurance company').","limitation_and_notes":"Supplier's named-customer library with an explicit industry filter taxonomy. Strongest source for which sectors Arista can actually name customers in. Caveat: the visible stories are campus, Wi-Fi, CloudVision and data centre deployments, not VeloCloud SD-WAN. | Not found on page"},{"id":"src_financial_services_fs_004","workbook_source_id":"FS-004","url":"https://www.arista.com/en/solutions/electronic-trading","title":"Arista Networks - Electronic Trading solutions","publisher":"arista.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"From the exchange edge to the back office, Arista offers a range of products optimized for demanding finance and trading environments.","reviewer_summary":"Strongest sector evidence found. There is a dedicated Electronic Trading industry page with named customer stories (Deutsche Boerse Group, ING Romania), named banking customers Odeabank and FIBI Bank under a 'Finance' label in the customer story library, and a VeloCloud SD-WAN for Financial Services solution brief. Caveat worth carrying: the named customers are Arista switching, CloudVision and data centre deployments, while the VeloCloud-specific financial brief keeps its deployments anonymous ('an international banking institution', 'a large insurance company').","limitation_and_notes":"Supplier's dedicated financial-sector page with named customer stories (Deutsche Boerse Group, ING Romania). Strongest sector evidence found, though it is Arista switching/monitoring rather than VeloCloud SD-WAN. | Not found on page"},{"id":"src_financial_services_fs_001","workbook_source_id":"FS-001","url":"https://www.arista.com/en/solutions/sd-wan","title":"Arista Networks - SD-WAN & Edge Routing (VeloCloud SD-WAN solution page)","publisher":"arista.com","publication_date":null,"checked_date":null,"source_ownership":"provider_authored","decision":"superseded","reviewer_confidence":"high","record_type":"Existing source lead","requirement_codes":[],"named_customer":null,"segment":"To review","named_product_or_service":null,"service_family":"To review","estate":null,"countries_or_regions":null,"ot_or_production_environment":null,"measured_or_stated_outcome":null,"industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"From the exchange edge to the back office, Arista offers a range of products optimized for demanding finance and trading environments.","reviewer_summary":"Strongest sector evidence found. There is a dedicated Electronic Trading industry page with named customer stories (Deutsche Boerse Group, ING Romania), named banking customers Odeabank and FIBI Bank under a 'Finance' label in the customer story library, and a VeloCloud SD-WAN for Financial Services solution brief. Caveat worth carrying: the named customers are Arista switching, CloudVision and data centre deployments, while the VeloCloud-specific financial brief keeps its deployments anonymous ('an international banking institution', 'a large insurance company').","limitation_and_notes":"Supplier's own primary solution page for VeloCloud SD-WAN. Carries the global gateway/PoP claim and links every vertical solution brief. Highest-value single page for this assessment. | New Source: https://www.arista.com/en/solutions/electronic-trading"}]},{"slug":"virgin-media-o2","name":"Virgin Media O2 Business","marketplace_url":"https://netify.co.uk/marketplace/virgin-media-o2/","research_status":"in_progress","overall_confidence":"low","fit_conclusion":"No named financial services customer or case study was found. Cannot currently be recommended for FS buyers on the evidence available - this is a new-to-workbook provider with no prior research to build on.","gaps_and_unknowns":"Virgin Media O2 Business's own product material confirms it is UK-focused (330 Ethernet PoPs, Reading HQ) with Versa Networks as its default SD-WAN platform and Zscaler for SASE overlay, which is useful context but not evidence of a financial services deployment.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-11","source_count":0,"accepted_source_count":0,"requirements":[{"code":"branch_and_office_connectivity","label":"Branch and office connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"trading_and_low_latency_connectivity","label":"Trading and low-latency connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_centre_colocation_and_cloud_connectivity","label":"Data-centre, colocation and cloud connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"resilience_and_tested_recovery","label":"Resilience and tested recovery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_segmentation_and_zoning","label":"Network segmentation and zoning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"payment_and_cardholder_data_segmentation","label":"Payment and cardholder data segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"third_party_and_outsourced_access","label":"Third-party and outsourced access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"remote_and_hybrid_workforce","label":"Remote and hybrid workforce","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"data_residency_and_sovereignty","label":"Data residency and sovereignty","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"encryption_and_key_management","label":"Encryption and key management","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"logging_audit_and_evidence_retention","label":"Logging, audit and evidence retention","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"identity_and_zero_trust_access","label":"Identity and zero trust access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"cloud_and_saas_data_controls","label":"Cloud and SaaS data controls","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"managed_operations_and_soc","label":"Managed operations and SOC","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"network_visibility_and_reporting","label":"Network visibility and reporting","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"change_control_and_configuration_governance","label":"Change control and configuration governance","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"incident_notification_support","label":"Incident notification support","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"concentration_risk_and_subcontractor_transparency","label":"Concentration risk and subcontractor transparency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"exit_and_portability","label":"Exit and portability","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_regulatory_alignment_fca_and_pra","label":"UK regulatory alignment (FCA and PRA)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"eu_dora_alignment","label":"EU DORA alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"us_regulatory_alignment_ffiec_glba_nydfs_sec","label":"US regulatory alignment (FFIEC, GLBA, NYDFS, SEC)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"canada_regulatory_alignment_osfi","label":"Canada regulatory alignment (OSFI)","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"pci_dss_alignment","label":"PCI DSS alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"swift_csp_alignment","label":"SWIFT CSP alignment","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"uk_delivery","label":"UK delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"north_america_delivery","label":"North America delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"},{"code":"global_delivery","label":"Global delivery","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-11"}],"sources":[]}]},"live_ranking_source":"https://netify.co.uk/sase/best/sd-wan-sase-providers-for-financial-services/data.json","live_ranking":{"page":"https://netify.co.uk/sase/best/sd-wan-sase-providers-for-financial-services","title":"Best SD-WAN and SASE providers for Financial services","description":"Ranked 2026 shortlist of SD-WAN and SASE providers with financial services sector evidence, scored across 40 capability features by Netify.","publisher":"Netify Group Limited","last_reviewed":"2026-07-29","criteria":{"sector":"financial_services","shortlist_size":10},"interactive_equivalent":"https://netify.co.uk/sase/shortlist/?n=10&s=financial_services","result":{"input":{"service_model":"any","required_features":[],"preferred_features":[],"required_regions":[],"preferred_regions":[],"required_clouds":[],"ai_requirements":[],"disaster_recovery_required":false,"max_deployment_speed":"any","weight_preset":"balanced","shortlist_size":10,"uk_provider_only":false,"sector":"financial_services","organisation_size":"any","intent":"none"},"criteria_summary":"Sector: Financial services. Scoring profile: balanced.","considered":30,"excluded":5,"shortlist":[{"slug":"cato-networks","name":"Cato Networks","rank":1,"score":89.2,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Cato Networks meets every stated requirement with a weighted capability score of 89.2. Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","category":"Cloud-native SASE / SD-WAN platform","deployment_speed":"hours","cost_model":"Quote-based subscription; typically site/user/bandwidth/security bundle based.","key_differentiators":["Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","100+ PoP global private backbone reduces internet variability and provides predictable performance for SaaS-heavy traffic.","Strong story for organisations consolidating multiple point solutions onto one operational platform."],"best_fit_for":["Mid-market and enterprise buyers consolidating SD-WAN and SASE on one platform from a single vendor.","Global organisations with SaaS-heavy traffic patterns that benefit from a private backbone.","Teams without dedicated security operations capacity who want a managed SASE experience."],"watch_outs":["Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.","Customer does not own the underlay; circuits sourced separately, so multi-supplier coordination remains.","Less mature than incumbents for very large multinational deployments with heavy legacy MPLS estates."],"evidence_coverage_pct":0.4925373134328358,"evidence_source_count":40,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.catonetworks.com","marketplace_url":"https://netify.co.uk/marketplace/cato-networks/","shortlist_summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round. If you’re looking to collapse a fragmented maze of legacy firewalls, MPLS circuits, and point-product security tools into a single, cloud-native operational plane, Cato is one of the more compelling single-vendor SASE offerings on the market, though its middle-mile-centric architecture and fairly opaque licensing model mean it requires ca...","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (Israel and US). Delivers in the UK from London and Manchester PoPs; contract direct or through UK partners including Netify routes."},{"slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","rank":2,"score":86.1,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Palo Alto Networks Prisma SASE meets every stated requirement with a weighted capability score of 86.1. Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","category":"SD-WAN / SASE technology vendor","deployment_speed":"weeks","cost_model":"Quote-based subscriptions; appliance/ION and Prisma Access/SASE licensing typically priced by users, bandwidth, locations and term.","key_differentiators":["Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","Strong threat intelligence and security capability inheritance from the wider Palo Alto Networks portfolio.","Often selected by buyers consolidating from multiple security vendors onto a single SASE platform."],"best_fit_for":["Enterprises with mature security operations that want SASE built around a leading security platform rather than a security layer on top of an SD-WAN platform.","Buyers consolidating CASB, SWG, ZTNA and FWaaS onto one vendor for unified policy.","Organisations with global SaaS-heavy traffic patterns that benefit from Prisma Access PoP coverage."],"watch_outs":["Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.","Managed delivery is via partners (Orange Business, NTT, others); first-party managed service is not the primary model.","Private global backbone is not vendor-owned; cloud transport uses internet and Prisma Access PoPs."],"evidence_coverage_pct":0.43283582089552236,"evidence_source_count":41,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.paloaltonetworks.com/sase","marketplace_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","shortlist_summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts.","value_tier":"premium","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). UK Prisma Access presence; delivered direct or via UK partners and carriers."},{"slug":"netskope","name":"Netskope","rank":3,"score":82.5,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Netskope meets every stated requirement with a weighted capability score of 82.5. Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","category":"SSE / SASE platform","deployment_speed":"days","cost_model":"Quote-based subscription; modules commonly priced by users, sites, traffic and security functions.","key_differentiators":["Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","Borderless WAN (from the Infiot acquisition) extends Netskope into single-vendor SASE for buyers wanting both layers from one platform.","Detailed SaaS application visibility and policy controls."],"best_fit_for":["Enterprises with deep SaaS adoption where CASB and DLP are top procurement priorities.","Buyers comparing single-vendor SASE platforms after starting with SSE.","Organisations selecting Netskope SSE alongside a separate SD-WAN platform via partner integration."],"watch_outs":["Native SD-WAN (Borderless WAN) is newer than dedicated SD-WAN platforms; validate path selection and QoS depth in RFP.","Managed delivery is partner-led; first-party managed service is limited.","Premium pricing with modular structure; full SASE bundle costs can scale meaningfully with users and traffic."],"evidence_coverage_pct":0.3582089552238806,"evidence_source_count":45,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.netskope.com","marketplace_url":"https://netify.co.uk/marketplace/netskope/","shortlist_summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone. Where Netskope stands out is data-centric SSE - its Cloud Confidence Index covers 85,000+ SaaS and GenAI apps, its DLP heritage runs deep (it was arguably the original CASB/DLP-first vendor...","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). UK NewEdge presence; delivered direct or via UK security MSPs."},{"slug":"cisco","name":"Cisco","rank":4,"score":79.4,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Cisco meets every stated requirement with a weighted capability score of 79.4. Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","category":"SD-WAN / SASE technology vendor","deployment_speed":"weeks","cost_model":"Quote-based subscription/licence + appliance/support; Meraki public SKUs via partners, enterprise pricing varies by platform and term.","key_differentiators":["Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","Cloud OnRamp provides automated optimisation paths for Microsoft 365, Salesforce, and major cloud providers, with native integration into the Cisco security stack.","Large global partner and integrator ecosystem reduces delivery risk for buyers wanting managed or co-managed delivery."],"best_fit_for":["Enterprises already standardised on Cisco networking who want platform consistency from LAN through WAN to security.","Multinational organisations needing strong vendor presence across regions and a deep partner channel.","Buyers prioritising single-vendor risk consolidation across networking and security."],"watch_outs":["Two distinct SD-WAN product lines (Catalyst and Meraki) means buyers should confirm which fits the target deployment profile and the longer-term roadmap.","Managed delivery is partner-led rather than first-party, so service quality varies meaningfully by integrator.","Private global backbone is not part of the platform; cloud transport relies on internet and partner gateways."],"evidence_coverage_pct":0.44776119402985076,"evidence_source_count":49,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.cisco.com/site/us/en/solutions/networking/sdwan/index.html","marketplace_url":"https://netify.co.uk/marketplace/cisco/","shortlist_summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically).","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). Extensive UK channel; Catalyst and Meraki widely delivered as UK managed services."},{"slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","rank":5,"score":75.6,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"HPE Aruba EdgeConnect meets every stated requirement with a weighted capability score of 75.6. EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","category":"SD-WAN / SSE / branch technology vendor","deployment_speed":"days","cost_model":"Quote-based subscription/appliance/support; MSP-managed options available through partners/providers.","key_differentiators":["EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","Strong heritage in WAN optimisation and packet-level performance engineering.","Tight integration with the broader Aruba campus and branch portfolio (LAN, Wi-Fi, NAC) for buyers consolidating end-to-end networking."],"best_fit_for":["Enterprises already running Aruba LAN/Wi-Fi who want WAN and SASE under the same operational tooling.","Buyers prioritising application performance and WAN optimisation in addition to standard SD-WAN routing.","Distributed organisations with branch-heavy footprints where Aruba campus presence is already established."],"watch_outs":["Aruba SSE is newer than the SSE leaders (Zscaler, Netskope); buyers wanting best-of-breed SASE should evaluate the SSE capability set carefully.","Managed delivery is partner-led rather than from HPE directly.","Private global backbone is not vendor-owned; SASE transport uses public cloud gateways."],"evidence_coverage_pct":0.1791044776119403,"evidence_source_count":37,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.hpe.com/us/en/aruba-edgeconnect-sd-wan.html","marketplace_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","shortlist_summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020.","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). EdgeConnect delivered in the UK via HPE partners and MSPs."},{"slug":"versa-networks","name":"Versa Networks","rank":6,"score":74.4,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Versa Networks meets every stated requirement with a weighted capability score of 74.4. Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","category":"SD-WAN / SASE technology vendor","deployment_speed":"weeks","cost_model":"Quote-based subscription; MSP/carrier pricing depends on tenant scale, bandwidth, security package and delivery model.","key_differentiators":["Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","Versa Operating System (VOS) provides a converged networking and security software stack across cloud and on-premises delivery.","Often the underlying platform when buyers select a managed SD-WAN service from a carrier or MSP."],"best_fit_for":["Service providers, carriers and MSPs building white-label managed SD-WAN or SASE services.","Enterprises consuming Versa indirectly through a managed provider (e.g. Verizon, Orange).","Buyers who want platform flexibility across cloud-delivered, on-premises and hybrid delivery models."],"watch_outs":["Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.","Buyers should confirm exactly which managed provider is delivering the platform and what the operational RACI looks like.","Brand recognition trails Cisco, Palo Alto and Fortinet in enterprise procurement processes."],"evidence_coverage_pct":0.22388059701492538,"evidence_source_count":29,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://versa-networks.com","marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","shortlist_summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). Delivered in the UK through carrier and MSP partners building managed services on Versa."},{"slug":"fortinet","name":"Fortinet FortiSASE","rank":7,"score":72.1,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Fortinet FortiSASE meets every stated requirement with a weighted capability score of 72.1. Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","category":"Secure SD-WAN / SASE technology vendor","deployment_speed":"days","cost_model":"Quote-based appliances/subscriptions/support; public reseller pricing exists for hardware but enterprise managed/SASE bundles require quote.","key_differentiators":["Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","Strong story for buyers who want secure SD-WAN and SASE delivered from one vendor platform rather than assembled from partner integrations.","Wide appliance range covering everything from small branch to large data centre, with public hardware pricing visible through resellers."],"best_fit_for":["Security-first buyers who want SD-WAN and SASE under a single policy and log domain.","Mid-market and enterprise organisations that already run FortiGate firewalls and want to extend into SD-WAN and cloud-delivered security.","Buyers comparing single-vendor SASE platforms (alongside Cato, Palo Alto, Cisco) for converged operations."],"watch_outs":["Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.","Buyers wanting a private global backbone will need to validate FortiSASE PoP coverage against their geographic footprint.","Best-of-breed buyers may prefer integrating FortiGate SD-WAN with a separate SSE platform (Zscaler, Netskope) rather than adopting full FortiSASE."],"evidence_coverage_pct":0.19402985074626866,"evidence_source_count":35,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.fortinet.com/products/sd-wan","marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","shortlist_summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","value_tier":"value","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). Strong UK channel and FortiSASE PoPs; widely delivered as a UK managed service by BT, Vodafone and UK MSPs."},{"slug":"zscaler","name":"Zscaler","rank":8,"score":64.4,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Zscaler meets every stated requirement with a weighted capability score of 64.4. Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","category":"SSE / SASE platform","deployment_speed":"days","cost_model":"Quote-based subscription; typically per-user/workload/location modules; SD-WAN integrations may add partner/vendor cost.","key_differentiators":["Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","Strong ecosystem of SD-WAN partners (Cisco, others) for buyers wanting Zscaler security with a separate SD-WAN platform.","Mature Zero Trust platform with substantial enterprise deployment history."],"best_fit_for":["Enterprises selecting best-of-breed SSE alongside a separate SD-WAN platform.","Security-driven SASE strategies where the SSE layer is the primary architectural decision.","Buyers consolidating multiple security point solutions onto a single SSE vendor."],"watch_outs":["Historically SSE-led; native SD-WAN capability is less mature than dedicated SD-WAN platforms (validate path selection, QoS and packet loss in RFP).","Premium pricing; typically per-user/workload/location with security modules adding cost.","Buyers needing one vendor for both SD-WAN and security may prefer a converged platform (Cato, FortiSASE, Prisma)."],"evidence_coverage_pct":0.373134328358209,"evidence_source_count":59,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.zscaler.com","marketplace_url":"https://netify.co.uk/marketplace/zscaler/","shortlist_summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","value_tier":"premium","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). UK PoPs in the Zero Trust Exchange; delivered direct or via UK partners and carriers."},{"slug":"arista-velocloud","name":"VeloCloud","rank":9,"score":64.3,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"VeloCloud meets every stated requirement with a weighted capability score of 64.3. VeloCloud was an early SD-WAN platform with strong cloud-delivered gateway architecture; now under Arista following the 2025 acquisition.","category":"SD-WAN technology vendor","deployment_speed":"days","cost_model":"Quote-based edge subscriptions/appliances/support; managed services commonly delivered by carriers/MSPs.","key_differentiators":["VeloCloud was an early SD-WAN platform with strong cloud-delivered gateway architecture; now under Arista following the 2025 acquisition.","Multi-tenant design has made VeloCloud common in carrier and MSP managed services.","Application-aware routing and dynamic path selection are mature capabilities with substantial deployment history."],"best_fit_for":["Enterprises consuming VeloCloud through a managed service provider (Vodafone UK, others).","Service providers running multi-tenant SD-WAN at scale.","Buyers comfortable with a platform in transition under new ownership."],"watch_outs":["Platform is mid-transition from VMware/Broadcom to Arista; product roadmap, naming and integration story will evolve.","Security and SASE capabilities are largely partner-integrated rather than native.","Direct enterprise sales motion is less established than legacy vendors; most consumption is via managed providers."],"evidence_coverage_pct":0.11940298507462686,"evidence_source_count":24,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.arista.com","marketplace_url":"https://netify.co.uk/marketplace/velocloud/","shortlist_summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). VeloCloud delivered in the UK through carriers including BT and Vodafone."},{"slug":"aryaka","name":"Aryaka","rank":10,"score":63.5,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Aryaka meets every stated requirement with a weighted capability score of 63.5. Unified SASE delivered as a managed service from end to end, including the private global core network and WAN optimisation.","category":"Managed SD-WAN / SASE provider","deployment_speed":"days","cost_model":"Quote-based managed service; pricing normally depends on sites, bandwidth, regions, security stack and optimisation.","key_differentiators":["Unified SASE delivered as a managed service from end to end, including the private global core network and WAN optimisation.","Strong story for global organisations needing predictable performance between regions without internet variability.","Embedded WAN optimisation differentiates from pure cloud-delivered SASE platforms."],"best_fit_for":["Global enterprises wanting SASE delivered as a fully managed service rather than as DIY platform plus tools.","Buyers who need consistent inter-regional performance for chatty applications.","Organisations preferring a vendor that owns the platform and the managed service rather than coordinating multiple parties."],"watch_outs":["Smaller PoP footprint and partner ecosystem than the hyperscale SASE vendors; coverage must match your geographic profile.","DIY/self-managed model has limited evidence; this is a managed-service-first proposition.","CASB and DLP capabilities have partial public evidence; depth should be confirmed in RFP."],"evidence_coverage_pct":0.11940298507462686,"evidence_source_count":26,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.aryaka.com","marketplace_url":"https://netify.co.uk/marketplace/aryaka/","shortlist_summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents.","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). UK PoP on the private core; managed-service delivery into the UK."}],"near_misses":[{"slug":"check-point","name":"Check Point","rank":0,"score":62.7,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Check Point meets every stated requirement with a weighted capability score of 62.7. Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","category":"SASE / security vendor","deployment_speed":"days","cost_model":"Quote-based subscription; Microsoft marketplace listing exists but enterprise deployments normally require quote.","key_differentiators":["Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","Strong story for organisations already running Check Point firewalls who want to extend into SASE.","Available via Microsoft Azure marketplace for buyers wanting consolidated cloud procurement."],"best_fit_for":["Existing Check Point customers extending firewall investment into SD-WAN and SASE.","Mid-market enterprises consolidating security and SD-WAN under one vendor.","Buyers prioritising security maturity over network-platform maturity."],"watch_outs":["Native SD-WAN capabilities (path selection, QoS, packet loss remediation) have limited public evidence relative to SD-WAN-led vendors.","Smaller SD-WAN deployment footprint than category leaders; validate scale references.","Managed delivery is partner-led."],"evidence_coverage_pct":0.16417910447761194,"evidence_source_count":28,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.checkpoint.com/harmony/sase","marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","shortlist_summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (Israel/US). Harmony SASE UK presence; delivered via UK security partners."},{"slug":"ntt","name":"NTT DATA","rank":0,"score":62,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"NTT DATA meets every stated requirement with a weighted capability score of 62. 24x7 managed SD-WAN delivery via global operations centres with strong portal visibility.","category":"Global managed network provider","deployment_speed":"months","cost_model":"Quote-based managed service; global design/delivery/support, SD-WAN vendor and security stack determine cost.","key_differentiators":["24x7 managed SD-WAN delivery via global operations centres with strong portal visibility.","Managed SASE partnership with Palo Alto Networks (Prisma SASE) for buyers wanting that platform under managed service.","Strong global delivery footprint including APAC, EMEA and Americas."],"best_fit_for":["Multinational enterprises wanting truly global managed delivery with consistent operations across regions.","Buyers wanting Prisma SASE consumed as a fully managed service.","Organisations prioritising managed service maturity and global SOC/NOC depth."],"watch_outs":["Platform fit depends on which vendor is being proposed (Palo Alto, Zscaler, others); evaluate platform independently.","Commercial complexity is meaningful at global scale; ensure scope and RACI are explicit.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.029850746268656716,"evidence_source_count":22,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.nttglobal.net/services/sd-wan","marketplace_url":"https://netify.co.uk/marketplace/ntt-data/","shortlist_summary":"NTT DATA is a massive, globally-established IT services and network provider, founded in Japan in 1988 as a spinoff of Nippon Telegraph and Telephone (NTT), and now operating in more than 70 countries with approximately 190,000 employees. A significant, current corporate event is worth understanding first: on 8 May 2025, NTT, Inc. (renamed that same year from Nippon Telegraph and Telephone Corporation) launched a tender offer to acquire full ownership of NTT DATA Group Corporation, its previously partially-owned, publicly-listed subsidiary; the offer, at JPY 4,000 per share (a confirmed 41.5% premium), achieved 81.75% acceptance, and following shareholder approval on 29 August 2025, NTT D...","value_tier":"premium","uk_delivery":"uk_entity","uk_basis":"UK contracting entity (NTT DATA UK) of a Japanese parent, with UK delivery and operations."},{"slug":"forcepoint","name":"Forcepoint","rank":0,"score":59.2,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Forcepoint meets every stated requirement with a weighted capability score of 59.2. FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","category":"Security / secure SD-WAN vendor","deployment_speed":"days","cost_model":"Quote-based appliances/software/subscriptions; managed SD-WAN positioned but pricing public transparency limited.","key_differentiators":["FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","MultiLink resilience and zero-touch deployment with cloud central management.","Strong story for buyers prioritising data security and DLP as a procurement criterion."],"best_fit_for":["Enterprises with strong data protection and DLP requirements (regulated industries, government).","Organisations wanting secure SD-WAN where data security is the primary decision driver.","Buyers consolidating DLP with SD-WAN under one vendor."],"watch_outs":["Smaller SD-WAN market presence than the leading platforms.","Full SASE platform completeness has partial public evidence; SSE module depth should be confirmed.","Managed delivery is partner-led; co-managed and white-label support require partner validation."],"evidence_coverage_pct":0.19402985074626866,"evidence_source_count":44,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.forcepoint.com/product/secure-sd-wan","marketplace_url":"https://netify.co.uk/marketplace/forcepoint/","shortlist_summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025.","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). UK delivery via security partners; government and defence heritage suits UK public sector."},{"slug":"colt-technology-services","name":"Colt Technology Services","rank":0,"score":57.6,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Colt Technology Services meets every stated requirement with a weighted capability score of 57.6. SD-WAN and SASE with strong European data sovereignty positioning.","category":"Enterprise managed SD-WAN / connectivity provider","deployment_speed":"months","cost_model":"Quote-based managed service; access, SD-WAN/SASE design, data sovereignty and service options drive pricing.","key_differentiators":["SD-WAN and SASE with strong European data sovereignty positioning.","Managed and co-managed delivery options with management portal access.","Enterprise-grade connectivity heritage with substantial European network ownership."],"best_fit_for":["European enterprises prioritising data residency, sovereignty and regulatory alignment.","Buyers wanting genuine co-managed delivery rather than pure managed or pure DIY.","Organisations consolidating European connectivity with SD-WAN under one provider."],"watch_outs":["Global delivery depth outside Europe is less prominent than the largest global carriers.","CASB and DLP have partial public evidence; SSE platform partner choice should be confirmed.","Underlying SD-WAN platform should be explicitly confirmed in RFP."],"evidence_coverage_pct":0.014925373134328358,"evidence_source_count":14,"independent_evidence_source_count":1,"last_verified":"2026-09-01","website":"https://www.colt.net/products/networking/sd-wan","marketplace_url":"https://netify.co.uk/marketplace/colt/","shortlist_summary":"Colt Technology Services is a long-established, European-anchored network operator, founded in 1992 as City of London Telecommunications and headquartered in London. Since 2015 Colt has been privately owned by Fidelity International (Eight Roads’ current specific role to be reconfirmed), and its network footprint expanded materially through a significant acquisition of Lumen Technologies’ Europe, Middle East and Africa business for $1.8 billion, completed November 2022, reinforcing Colt’s own confirmed network scale of more than 30 countries, more than 50 metropolitan area networks, and more than 32,000 on-net buildings, all delivered over its own named Colt IQ Network platform.","value_tier":"mid","uk_delivery":"uk_hq","uk_basis":"UK headquartered (London). UK contracting entity with owned UK metro fibre and UK support."},{"slug":"lumen","name":"Lumen","rank":0,"score":57,"eligible":true,"gating_failures":[],"matched_requirements":["Sector: Financial services"],"gaps":[],"summary":"Lumen meets every stated requirement with a weighted capability score of 57. Fully managed or co-managed SD-WAN with strong NaaS positioning and integrated network services.","category":"Managed SD-WAN / NaaS provider","deployment_speed":"months","cost_model":"Quote-based; Lumen states fully managed or co-managed SD-WAN, with access/network services priced by requirement.","key_differentiators":["Fully managed or co-managed SD-WAN with strong NaaS positioning and integrated network services.","Substantial underlay ownership in North America with global reach.","Co-managed model provides operational flexibility for customers wanting selective control."],"best_fit_for":["North American enterprises wanting integrated managed SD-WAN, access and broader network services from one provider.","Buyers attracted to the NaaS consumption model.","Organisations wanting genuine co-managed delivery rather than pure managed or pure DIY."],"watch_outs":["SASE and security capabilities are largely partner-integrated rather than native; the SSE platform choice needs explicit evaluation.","International delivery depth is less prominent than the dedicated global carriers.","Underlying SD-WAN platform should be confirmed; platform choice affects feature set."],"evidence_coverage_pct":0.05970149253731343,"evidence_source_count":18,"independent_evidence_source_count":1,"last_verified":"2026-09-01","website":"https://www.lumen.com/en-us/services/sd-wan.html","marketplace_url":"https://netify.co.uk/marketplace/lumen/","shortlist_summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely.","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"No UK HQ (US); UK delivery is largely via partners following the EMEA divestment to Colt."}],"generated_at":"2026-09-11T17:26:43.546Z","methodology_note":"Scores are weighted across 40 capabilities with points accrued based on: yes 1.0, via partner 0.75, via managed service 0.65, partial 0.5, not confirmed 0.15, not primary 0. Extended dimensions are indicative desk research; confirm via RFP."},"faqs":[{"q":"Which SD-WAN and SASE providers are strongest for financial services?","a":"Based on the Netify capability matrix, the leading providers for financial services are listed in the ranking above. Each is graded on public evidence of sector capability, such as case studies, dedicated offerings and certifications, alongside 40 technical and service features."},{"q":"How is this financial services ranking calculated?","a":"Providers without confirmed financial services sector evidence are excluded. The remainder are scored on a weighted average across 40 capability features (graded yes, partial, via partner, via managed service, not primary or not confirmed) with the sector grade weighted at double. The same engine powers the interactive shortlist builder, the MCP tool and this page, so results are reproducible."},{"q":"Can I adjust this shortlist for my own requirements?","a":"Yes. The interactive shortlist builder lets you add your operating model, regions, clouds, security features, AI requirements and deployment ceiling on top of the financial services filter. Every configuration is a shareable URL."}],"citation":"Cite as: Netify ranked shortlist, Best SD-WAN and SASE providers for Financial services, https://netify.co.uk/sase/best/sd-wan-sase-providers-for-financial-services","continuation":{"version":"continuations v2026.2","family":"sector","source":"sector:financial_services","sentence":"We are a financial services firm consolidating network and security into SASE.","action":{"label":"Turn this into a live project","url":"https://netify.co.uk/sase-sd-wan-rfp-builder/?q=We+are+a+financial+services+firm+consolidating+network+and+security+into+SASE.&vendors=cato-networks%2Cpalo-alto-networks%2Cnetskope%2Ccisco%2Chpe-aruba&utm_source=ai_assistant&utm_medium=twin"},"opens":"Your procurement on Netify","pins":["cato-networks","palo-alto-networks","netskope","cisco","hpe-aruba"],"mcp_tools":["workspace_ingest","score_vendor_fit","build_sase_shortlist"]}},"interactiveSurfaces":[{"id":"financial-services-shortlist-tool","kind":"filter-ui","url":"https://netify.co.uk/sd-wan-sase-for-financial-services/#shortlist-tool","backingTool":"build_sase_shortlist","endpoint":"https://netify.co.uk/sase/api/openapi/build_sase_shortlist","fixed_arguments":{"sector":"financial-services"}},{"id":"financial-services-regime-filter","kind":"filter-ui","url":"https://netify.co.uk/sd-wan-sase-for-financial-services/#regime=uk","backingTool":"get_sector_evidence","endpoint":"https://netify.co.uk/sase/api/mcp/","fixed_arguments":{"sector":"financial-services"},"note":"The same filter is available here as ?regime=uk|eu|us|canada."}],"shortlist":"https://netify.co.uk/sase/shortlist/?s=financial-services","rfp_builder":"https://netify.co.uk/sase/rfp-builder/","citation":"Cite as: Netify, \"SD-WAN & SASE for Financial Services (2026)\", https://netify.co.uk/sd-wan-sase-for-financial-services/"}