Finat

Poland · www.finat.pl · 21 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 21 sub-vendors.

Insights

Last updated 2026-08-15 · revision 2

21 direct vendors, 243 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Finat's migration readiness is assessed as medium (45). The most significant advantage for migration readiness is the stated "Total Vendors: 0". This implies a minimal to non-existent direct vendor lock-in, which is a major facilitator for any migration effort, as it removes complex contractual and technical dependencies on external parties. "Data Residency Requirements" are "Not specified," which means no explicit constraints are known to hinder migration. However, several critical unknowns significantly reduce the overall readiness. The internal tech stack details are missing, making it impossible to assess the extent of legacy systems, containerization, or microservices adoption, which are key indicators of migration complexity. Similarly, the regulatory environment and specific compliance requirements are unknown, posing potential significant hurdles and costs for re-platforming or re-hosting. Lastly, the absence of data on financial stability and growth history makes it impossible to determine Finat's capacity to fund a potentially large-scale migration project. These substantial data gaps, particularly concerning technology and regulatory landscape, temper the positive impact of low vendor lock-in.

Compliance

12 in-scope frameworks identified; showing 3.

MiFID II — Assessment Required

PKO Finat provides transfer agent services and fund-related services to investment funds and financial market participants in Poland. MiFID II governs investment services and activities in the EU. As a service provider to MiFID II-regulated entities (investment firms, fund managers), PKO Finat must comply with MiFID II requirements applicable to outsourcing arrangements, including operational resilience, data retention, and conduct standards. Additionally, if PKO Finat itself provides any investment-related services, it may be directly subject to MiFID II licensing requirements. The KNF (Polish Financial Supervision Authority) is the competent authority. High risk due to: (1) direct involvement in financial market infrastructure; (2) KNF active enforcement; (3) significant penalties for non-compliance.

Evidence: https://www.finat.pl, https://www.knf.gov.pl, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32014L0065

PPK Act — Assessment Required

PKO Finat explicitly administers PPK (Employee Capital Plans) services ('PPK w PKO Finat'). The PPK Act (Ustawa z dnia 4 października 2018 r. o pracowniczych planach kapitałowych) is a Polish law establishing mandatory employer-sponsored retirement savings plans. PKO Finat as a PPK service provider is directly regulated under this Act and supervised by KNF and PFR (Polski Fundusz Rozwoju). Non-compliance carries significant regulatory and reputational risk given the mandatory nature of PPK and the involvement of employee retirement savings.

Evidence: https://www.finat.pl/www.finat.pl/oferta/oferta-dla-funduszy/ppk-w-pko-finat, https://www.mojeppk.pl, https://www.knf.gov.pl, https://isap.sejm.gov.pl/isap.nsf/DocDetails.xsp?id=WDU20180001921

NIS2 (source) — Assessment Required

PKO Finat operates in the financial sector (transfer agent, fund accounting, IT services for financial institutions) and is a subsidiary of PKO Bank Polski — one of Poland's largest and systemically important banks. NIS2 classifies banking and financial market infrastructure as Essential Entities. PKO Finat provides critical IT and operational services to financial sector entities, which may qualify it as an Essential Entity or Important Entity under NIS2. As part of the PKO Bank Polski group, it almost certainly exceeds the 50-employee and €10M turnover thresholds. Poland transposed NIS2 via the Act on the National Cybersecurity System (KSC). Non-compliance with NIS2 for Essential Entities can result in fines up to €10 million or 2% of global annual turnover. The financial sector's critical infrastructure status and PKO Finat's role as an IT/operational service provider to financial entities creates High risk.

Evidence: https://www.finat.pl, https://www.gov.pl/web/cyfryzacja/cyberbezpieczenstwo, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.cert.pl

Financials

Financial Resilience Score: 7/10

PKO Finat sp. z o.o. benefits from significant financial resilience due to its status as a captive subsidiary within the PKO Bank Polski Group, Poland's largest bank. This provides a highly stable and predictable revenue base through intra-group services including transfer agent, fund accounting, PPK administration, and IT outsourcing for the parent bank and PKO TFI. The regulated nature of its core services (KNF supervision for fund administration) creates high switching costs and a defensible market position. Growth tailwinds include the expansion of Poland's Employee Capital Plans (PPK) system launched 2019-2021, which continues to grow participants and assets under administration. Diversification into IT staff augmentation and cybersecurity services adds complementary revenue streams. However, heavy customer concentration on the PKO BP Group creates vulnerability to intra-group transfer pricing decisions and parent-driven cost optimization programs. Risks include labor cost pressure from Polish IT wage inflation in people-intensive service lines, regulatory changes to PPK rules or DORA/ICT-risk requirements, and limited external brand pull versus independent competitors like ProService Finteco. Actual financial figures (revenue, EBIT, equity) were not retrievable during the analysis and would be required for a fully quantitative resilience assessment.

Key strengths: Captive customer base within PKO Bank Polski Group provides stable recurring revenue, Regulated-industry moat with KNF supervision and high switching costs, PPK (Employee Capital Plans) tailwind growing assets under administration, Diversification into IT body-leasing and cybersecurity services, Access to associate/contractor pool of ~10,000 experts

Risk factors: Heavy customer concentration on PKO BP Group entities, Labor cost pressure from Polish IT wage inflation, Regulatory risk from PPK rule changes and DORA/ICT compliance, Limited external brand pull versus independent competitors, Vulnerability to parent's cost-optimization and transfer pricing decisions

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report