BNP Paribas: INES Programme

CASE STUDY · FINANCE & BANKING

Transforming depositary control with AI and the Meta-Language.

Adservio acts as an Augmented CIO partner to design a complex business solution dedicated to BPSS Depositary Control and Investment.

Client

BNP Paribas Securities Services

Expertise

Augmented CIO · Data Governance · Software Engineering

Tech Stack

.NET · Java · SQL Server

Engagement

10 experts · 18 months

CONTEXT

Project Context

Under the combined pressure of UCITS V, AIFMD and the ACPR's reinforced requirements, BPSS faced an impossible equation with its legacy tooling: absorbing exponential volume growth, processing tens of thousands of daily NAVs, and guaranteeing end-to-end traceability.

The tools accumulated over the years could no longer support this scale-up. Technical debt was becoming a major operational and regulatory risk.

The INES programme was launched to break with this approach: a cloud-native, modular platform driven by a business Meta-Language. An architecture where compliance becomes configurable, and where AI accelerates anomaly detection.

Strategic Objectives

OBJECTIVES

(01)

State-of-the-art architecture

Design a cloud-native, modular and scalable infrastructure able to absorb tens of thousands of daily NAVs while guaranteeing an RTO/RPO compatible with DORA requirements and 24/7 Securities Services activity.

(02)

Business alignment

Configure the application as closely as possible to depositary control rules (UCITS V, AIFMD, fund prospectuses) by exposing a Meta-Language that lets business experts write and audit controls without going through IT.

(03)

Security and compliance

Embed BNP Paribas group standards (ISO 27001, ISSP, NIS2, GDPR) from the design stage, with end-to-end encryption, granular action traceability and immediate auditability for regulators (ACPR, ESMA).

Solutions Delivered by Adservio

SOLUTIONS

Adservio deployed a multidisciplinary team (Tech Lead, Developers, Data Experts) to drive the technical and functional side of the programme.

(01)

Operational and data steering

Coordination of the programme data stream: facilitating SAFe ceremonies, monthly governance workshops with BPSS managers, weekly SLA reporting and technical trade-offs alongside the executive sponsor. Quarterly OKRs aligned with regulatory milestones.

(02)

Data engineering

Design of the Conceptual Data Model (CDM) covering funds, instruments, NAVs and controls. Development of a business data dictionary serving as a group reference. Definition of progressive migration batches with a blue-green strategy for zero interruption to depositary activity.

(03)

Software design and Meta-Language

Development of application components in .NET and Java on SQL Server, with a proprietary Meta-Language engine that expresses control rules in an auditable business DSL. Industrialised CI/CD pipelines, test coverage above 80%, systematic code reviews.

(04)

AI and anomaly detection

Integration of anomaly detection models on NAV flows and accounting entries, with native explainability for controllers. HAS/AMF validation of the models, full MLOps governance (versioning, replay, drift monitoring).

(05)

Change management

Writing technical and functional documentation to group standards, creating tiered training materials (end users, key users, IT teams). SAFe coaching sessions and support for BPSS teams in adopting the new tool.

A business rule in a few lines,
an anomaly caught in 14 ms.

BPSS experts write their depositary controls in an auditable DSL. The engine executes, logs and notifies, in real time, across 1.1M NAVs per day.

nav-control.meta · v3.1● connected

# Depositary control: UCITS funds

# Author: BPSS business expert · ESMA audit OK

control "NAV deviation" {

scope: funds.type("UCITS")

trigger: on("nav.computed")

when {

abs(nav.delta_pct) > 0.50%

|| nav.holdings.divergence() > €2M

}

then {

flag(severity: "high")

notify("depositary-team")

audit_log(immutable: true)

}

✓ Compiled · 0 errors · deployed in 14 ms

control-engine.live

12,480 NAV/s

FundNAVΔ %Status

BNP-Equity-EU-LCV€187,420+0.12%OK

BNP-Bond-IG-USD€124,005−0.08%OK

BNP-Multi-Asset-Pro€312,876+0.31%OK

BNP-Emerging-Mkts€98,442+0.87%WARN

BNP-Tech-Innovation€245,118−1.24%FLAG

BNP-Sustainable-EU€173,209+0.04%OK

BNP-Real-Estate-Cap€89,317+0.18%OK

BNP-Convertible-Glb€156,930−0.22%OK

[FLAG] BNP-Tech-Innovation · NAV.delta = −1.24% > threshold 0.50%

notify → depositary-team · audit_log → immutable · DORA · ESMA

Active controls

2,184

NAVs processed / day

1.1M

p99 latency

14 ms

DORA compliance

100%

Results

MEASURED FIGURES

99.95%

Platform SLA

Availability of the Depositary Control platform in production.

×4

Peak capacity

Processing capacity multiplied during month-end peaks.

−70%

Reporting time

Reduction in the time to produce compliance reports.

92%

Predictability

Delivery predictability across 10 SAFe teams.

Blocking incident

Zero blocking incidents in production during the switchover.

24/7

Secured activity

Securities Services activity secured around the clock.

Impact

WHAT IT CHANGES

More reliable flows

A stabilised cloud-native infrastructure enabling the secure rollout of the new Depositary Control offering, with a 99.95% SLA and processing capacity multiplied by 4 during month-end peaks.

Data mastery

A unified data dictionary that became the group reference, making each control easier to audit for regulators (ACPR, ESMA) and cutting compliance report production time by 70%.

Enterprise agility

Successful adoption of SAFe across 10 multidisciplinary teams, with delivery predictability raised to 92% and a release cadence moving from quarterly to fortnightly, with no drop in quality.

Native compliance

A platform compliant by design with DORA, NIS2 and GDPR requirements, with granular traceability and immutable logging of every business action. BNP Paribas internal audits and the ACPR validated it with no major reservations.

Zero disruption

Data migration and application switchover prepared over 6 months and executed across two cutover weekends. Zero blocking incidents in production, zero client impact on depositary activity during the transition.

Accelerated time-to-market

The business Meta-Language lets BPSS experts change depositary control rules themselves in a matter of hours, versus several weeks of IT cycles before, drastically reducing the time needed to adapt to regulatory changes.