BaaS moving to bank-grade infrastructure

Diving deeper into

Roy Ng, EVP, Chief Business Officer at FIS, on the future of BaaS

Interview
professionalizing some of these relationships, building technology that is more durable
Analyzed 5 sources

This is the shift from fintech middleware as a fast launch tool to fintech infrastructure as regulated operating system. In practice, durable technology means tighter bank and non-bank workflows, shared data, standardized compliance steps, and fewer ad hoc exceptions. FIS is arguing that the winning platform is no longer the one with the easiest API alone, but the one that can help a bank, a software company, and regulators all look at the same program and trust how money moves through it.

  • The fragile version of BaaS was startup serving startup. When funding tightened, those customers disappeared. The sturdier version is enterprise and vertical SaaS, where the customer already has a real software business, budget, compliance staff, and a concrete money flow to embed cards, accounts, or lending into.
  • Professionalizing relationships mostly means standardizing the glue between bank and fintech. That includes who owns KYC and fraud review, what data the bank sees, how approvals and exceptions are handled, and how funds flow is documented. Bond historically sold this program management layer, and FIS adds deeper compliance tooling and bank relationships around it.
  • This also changes the competitive line. Earlier BaaS platforms won by abstracting away legacy processors like FIS, Fiserv, and Jack Henry. Now incumbents can buy that API layer, as FIS did with Bond, and combine developer tooling with issuer processing, compliance products, and long standing bank distribution. That is consolidation plus vertical integration, not just feature competition.

The next phase of embedded finance looks more like bank grade infrastructure sold into software companies and banks than startup APIs sold to other startups. That favors platforms that can make launch fast without making oversight loose, and it pushes independent providers toward either deep specialization or becoming part of a broader regulated stack.