The most basic definition of the cloud is technology that stores data and accesses programs using servers hosted over the internet instead of relying on a local server confined to a specific office or a personal computer's hard drive. Cloud users aren't confined to one personal computer, giving them greater flexibility for how and where they work, and a higher likelihood of retrieving their files, emails and data in the event of an office accident, device theft or operating system hack.
There are three types of cloud platforms:
Public clouds: Brands such as Amazon Web Services, Microsoft Azure and Rackspace are examples of public cloud platforms, which are owned and managed by providers supplying cloud tools to multiple external clients on a pay-as-you-go basis. Firms that use public clouds lower the costs of buying and maintaining their own infrastructure because their cloud providers use economies of scale to take care of those responsibilities.
However, public cloud providers offer the exact same services, including security, availability and configurations, for every consumer — and their standard offerings don't include full IT management, troubleshooting and cybersecurity services. As a result, public cloud platforms may not be the best option for wealth management firms that require system flexibility to implement security and compliance controls around their data.
Private clouds: Private cloud platforms offer greater data security and compliance functionality, enabling wealth managers to always remain aware of exactly where their data is located and apply the necessary security controls. Wealth managers that can prove their sensitive client information is properly safeguarded will be in the best position to meet evolving cybersecurity regulations.
Private clouds can also accommodate legacy software with little programming alterations, and enable RIAs and broker-dealers to configure desktop views and access controls to their liking.
While private clouds offer greater customization and security capabilities, building and maintaining their infrastructure require significant financial and manpower commitments that can put small or mid-size financial organizations at risk of becoming distracted from their core competencies.
Hybrid clouds: Hybrid cloud platforms are increasingly viewed as solutions that can give wealth management firms the best of private and public clouds — enabling them to utilize proprietary applications that require the highest level of security, while saving money on services over which they can tolerate relinquishing control. However, like private clouds, hybrid clouds require RIAs and credit unions to have a strong IT team that can manage the infrastructure, anticipate configuration challenges and maximize firm-wide platform use.
Wealth management practices that lack the in-house IT resources to build and manage a cloud platform over the long term can engage outside IT specialists that possess expertise in both technology and financial services. These specialists should be well-versed in SEC and FINRA policies as well as developments at large banks and credit unions that may affect independent financial advisors — and they should also adhere to stringent internal audits of their own procedures.
Checklist of Criteria for Cloud Providers
After taking the time to understand the different types of cloud platforms, and their various benefits and drawbacks for their practices, wealth managers can begin the process of choosing a cloud provider. When performing due diligence, advisors should evaluate prospective cloud partners according to the following five criteria:
Established consumer base and references: Potential cloud providers should be able to offer client references to verify the reliability and quality of their services, customer support and network performance.
Industry and technical expertise: Providers should understand the technology products that wealth management firms require, as well as the consistently evolving needs of the overall industry.
Security and compliance requirements: Prospective cloud partners should have comprehensive security and disaster recovery plans in place that meet or exceed all requirements from wealth managers' regulators and members.
Support: A potential cloud provider should offer technical support 24 hours a day and 365 days a year. Its support team should be staffed with knowledgeable engineers who understand wealth managers and their individual technology setups.
Third-Party validation and accreditation: Wealth managers should check that cloud providers conduct periodic SSAE 16 audits of their security procedures to ensure they safely process and host data — and ask for results of past audits.
Every wealth management practice is unique. In order to make sure a credit union can properly utilize the cloud to streamline and grow their business — while meeting evolving cybersecurity and regulatory requirements — over the long term, wealth managers must first be able to identify the right cloud solution and service provider.
© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
