Core technology can become a material arrangement.
APRA CPS 230 requires regulated entities to manage critical operations and risks arising from material service providers.
APRA · CPS 230 ↗Financial services & insurance / Industry brief 01
Capacity you can govern,
inspect and plan around.
Cooma AI is developing customer-specific Australian AI estates for financial workloads where operational resilience, provider accountability and assured capacity matter alongside model performance.
01 · Workload02 · Boundary03 · Capacity04 · Contract
The decision / Why now
AI adoption is moving.
Accountability must move with it.
The case for a dedicated estate is not “cloud versus sovereign.” It is whether a selected workload needs a more explicit operating boundary, capacity plan and service-provider agreement than ordinary consumption provides.
Use is accelerating faster than some controls.
ASIC found 60% of the 23 reviewed financial-services and credit licensees intended to increase AI use and warned of a widening governance gap.
ASIC · REP 798 ↗Residency is only one part of the control decision.
ASD guidance asks cloud buyers to consider provider locality, ownership, administration, support locations and exposure to foreign control.
ASD · Cloud guidance ↗Workload selector
Choose the workload.
See what sovereignty changes.
The operating boundary should be proportionate to the data, decision and continuity risk. Select a starting workload to inspect the recommended profile.
01 / Decision intelligence
Fraud and financial-crime model pipelines.
Bring high-volume transaction and investigative workloads into a defined environment with traceable model versions, controlled data paths and planned inference capacity.
Readiness-sprint outcomeA workload, control and capacity brief that risk, technology and procurement can assess together.
- Compute pattern
- Batch training + high-volume inference
- Data profile
- Sensitive customer and transaction data
- Likely deployment
- Dedicated estate with controlled enterprise integration
The sovereignty ledger
Five controls.
One accountable boundary.
The ledger updates with the selected workload. It is the starting point for a control conversation—not a claim that infrastructure alone creates compliance.
01
Data
Keep transaction and investigation data on approved Australian processing paths with explicit retention and deletion rules.
02
Models
Version, evaluate and approve the models that generate alerts, scores and investigator support.
03
People
Define Australian privileged administration, screening, access approval and separation of duties.
04
Operations
Agree logging, key ownership, incident handling, model change control and the provider chain.
05
Continuity
Plan inference headroom, failover, recovery priorities and exit before the workload becomes critical.
Proposed deployment pattern
Keep the cloud.
Add a deliberate AI estate.
Cooma's intended role is to integrate with the institution's existing data and cloud environment, while making the selected AI workload's operating boundary and capacity explicit.
Bank data,
apps & cloud
Systems of record, governed data products and existing integration services.
Cooma readiness
& control brief
Workload profile, service boundary, capacity envelope and procurement requirements.
Australian GPU
capacity
Customer-specific infrastructure and operations subject to executed customer and supply agreements.
Governed models
in workflow
Approved APIs and services integrated into business processes with accountable human oversight.
Cooma is developing this operating model. Final architecture, security, capacity, availability and delivery terms depend on the workload and executed customer, facility, power, hardware and partner agreements.
Commercial path
Move from interest
to a financeable commitment.
An MOU may record intent. The commercial goal is a sequence of increasingly specific, binding decisions.
Executive workload session
Select one candidate workload, sponsor and target horizon.
Qualified opportunityMutual discovery
Confirm data class, service criticality, current environment and decision owners.
Mutual NDA + scopeReadiness sprint
Produce the operating boundary, architecture, demand envelope, risk map and procurement brief.
Binding paid SOW · 4–6 weeksDesign partnership
Complete technical validation, assurance work and the production business case.
Paid milestonesCapacity agreement
Contract defined service, acceptance, minimum commitment and expansion terms.
Long-term service revenueFinancial services briefing
Bring one workload.
Make the boundary concrete.
Do not send customer, transaction or otherwise sensitive information. The first discussion needs only the business outcome, workload type and target horizon.
Evidence & status
Research updated 23 July 2026
Primary context: APRA CPS 230 · APRA CPG 230 · ASIC REP 798 · ASD cloud guidance. Requirements depend on the entity, workload and arrangement. Cooma's estate and service descriptions are proposed and subject to contracting and delivery readiness.