BNP Paribas Keeps Sensitive Data Off Public Cloud Despite Google Deal

• The deal grants BNP access to Google's public cloud infrastructure and Gemini models for AI agents supporting corporate credit, sales, trading, and research functions
• Highly sensitive data like medical information from insurance operations will remain off public cloud, with BNP maintaining its on-premise infrastructure and partnership with French AI firm Mistral
• Google confirmed BNP retains data ownership and that customer data will not be used to train or refine Google's AI models, while less sensitive tasks like invoice processing may use Google technology

BNP Paribas-Google Cloud Partnership: Summary

Key Development:

BNP Paribas announced a five-year cloud and AI partnership with Google on September 24, while emphasizing it will maintain sensitive data on private infrastructure rather than migrating entirely to public cloud services.

Partnership Scope:

The agreement provides BNP Paribas access to Google's public cloud infrastructure and Gemini AI models to develop AI agents for internal operations including corporate credit memos, sales, trading, research, and structuring. Less sensitive applications like invoice processing and data management will utilize Google technology.

Critical Limitations:

Group Chief Information Officer Marc Camus clarified this is not a "wholesale move," stating the bank will retain its on-premise infrastructure. Highly confidential data, such as medical information from insurance operations, will remain off public cloud platforms. BNP Paribas will continue using open-source models and maintain its existing partnership with French AI company Mistral for different applications.

Data Security Measures:

Google confirmed BNP Paribas retains full data ownership, with assurances that customer data will not be used to train or refine Google's AI models. The bank stated Google's AI agents will be authenticated, resource-limited, and actively monitored.

Financial Terms:

Neither company disclosed the deal's financial value.

Market Implications:

This partnership highlights the banking sector's cautious approach to cloud adoption, balancing innovation with regulatory compliance and data security concerns. The hybrid strategy suggests major financial institutions remain reluctant to fully embrace public cloud infrastructure for sensitive operations, particularly in heavily regulated European markets.