The Bancorp

United States · www.thebancorp.com · 12 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 12 sub-vendors.

Insights

Last updated 2026-09-13 · revision 1

12 direct vendors, 180 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

The Bancorp demonstrates medium migration readiness, leaning towards the lower end due to several unknowns and potential challenges. The tech stack includes modern elements like 'Salesforce Experience Cloud' and inferred 'Microsoft 365 ecosystem', indicating some existing cloud adoption. 'AI and Intelligent Automation platforms' and 'Data engineering and analytics platforms' also suggest a foundation that could be migrated to cloud environments. However, the presence of 'Proprietary licensed software' and generic 'Web-based application platforms' could signify legacy or on-premise systems that would require significant effort for migration, potentially lacking cloud-native characteristics like containerization or microservices (which are not mentioned). 'Data Residency Requirements' are 'Not specified', which introduces an unknown factor that could complicate cloud migration, especially for a financial institution. 'Financial Stability' data is missing, making it impossible to assess the company's capacity to fund a large-scale migration. Vendor relationships present a similar contradiction as with resilience: 'Total Vendors: 0' is stated, but other vendor geographic data exists. Assuming vendors exist, the 'Vendor Lock-in Risk' is 'Unknown', which is a critical impediment to migration planning as high lock-in can significantly increase complexity and cost. The financial industry's inherent 'Regulatory Environment' (e.g., 'BSA/AML compliance') will also add complexity and stringent requirements to any migration effort.

Compliance

11 in-scope frameworks identified; showing 3.

PCI DSS (source) — Assessment Required

The Bancorp is a payment card program sponsor and payment services provider working directly with Visa, Mastercard, PayPal, Venmo, and other payment networks. As a card-issuing bank and payment processor, PCI DSS compliance is a contractual requirement imposed by the card networks. Non-compliance can result in fines from card networks, loss of card processing privileges, and reputational damage. Risk is High because the company's core business model depends on payment card infrastructure.

Evidence: https://www.thebancorp.com/Fintech-solutions/program-sponsorship/, https://www.thebancorp.com/Fintech-solutions/payment-services/, https://www.thebancorp.com

ISO 27001 (source) — Assessment Required

ISO 27001 certification is increasingly expected for financial institutions and fintech infrastructure providers. The Bancorp's role as a banking-as-a-service provider to major fintechs creates strong market pressure for ISO 27001 certification. However, US banks often rely on FFIEC IT examination frameworks and SOC 2 rather than ISO 27001 as their primary information security assurance mechanism. Risk is Medium because non-certification does not constitute regulatory non-compliance in the US banking context, but may represent a competitive and contractual risk with international fintech partners.

Evidence: https://www.thebancorp.com/company/sustainability-strategy/, https://investors.thebancorp.com/corporate-profile/sustainability/default.aspx

FFIEC IT Examination Handbook — Assessment Required

The FFIEC IT Examination Handbook and Cybersecurity Assessment Tool (CAT) are the primary cybersecurity frameworks for US banks under OCC, FDIC, and Federal Reserve supervision. As a technology-forward fintech banking infrastructure provider, The Bancorp's IT and cybersecurity posture is subject to regular FFIEC examination. Risk is High because cybersecurity failures in a BaaS provider could cascade to multiple fintech clients and their end customers, creating systemic risk concerns for regulators.

Evidence: https://www.thebancorp.com/company/sustainability-strategy/, https://www.thebancorp.com/Fintech-solutions/, https://investors.thebancorp.com/overview/default.aspx

Financials

Three-year financials

Financial Resilience Score: 8/10

The Bancorp demonstrates exceptionally strong financial performance for a US bank holding company, with a 2.5-2.7% ROA and 27-35% ROE—roughly 3x the KBW Regional Bank Index average. The company has delivered consistent net income growth from $110.7M (2021) to $228.2M (2025), with diluted EPS more than doubling from $2.27 (2022) to $4.92 (2025). Management guidance projects continued strong growth with 2026E EPS of $5.95-$6.05 and 2027E EPS of $8.10-$8.30. The balance sheet is supported by a fee-heavy, deposit-rich model. Fintech Solutions provides $8.1B of low-cost (1.63%) transaction deposits, 94% of which are insured, reducing reliance on wholesale funding. Credit quality in the Credit Solutions segment is strong with net charge-off ratios of only 0.04% YTD 2026 and 0.10% in 2025. The company has $3.8B in unused FHLB/Fed borrowing capacity and has returned ~100% of net income to shareholders via buybacks ($885M since 2022, ~33% of shares repurchased). However, there are meaningful risks that prevent a top-tier score. The sponsor-bank/BaaS business faces heightened regulatory scrutiny following Synapse, Evolve, and Blue Ridge issues. Rapid expansion of fintech sponsored consumer lending has caused provisions to surge from $38.4M (2024) to $177.7M (2025), with credit enhancement recoveries offsetting losses but creating dependence on partner solvency. The REBL commercial real estate bridge lending portfolio ($2.4B in multifamily value-add) faces industry stress. The Durbin/Reg II $10B asset cap constrains balance sheet growth.

Key strengths: Best-in-class profitability: 2.5-2.7% ROA and 27-35% ROE, ~3x regional bank peers, Strong low-cost deposit base: $8.1B from fintech partners at 1.63% cost, 94% insured, Diversified fintech ecosystem: 40+ partners including Chime, PayPal/Venmo, Block, Intuit, Excellent credit quality in Credit Solutions: 0.04-0.10% net charge-off ratios, Aggressive capital return: $885M in buybacks since 2022, ~33% of shares repurchased, Consistent EPS growth: from $2.27 (2022) to $4.92 (2025), guidance of $5.95-$6.05 for 2026, $3.8B unused FHLB/Fed borrowing capacity provides liquidity cushion, #1 US prepaid card issuer, #6 debit/prepaid issuer by volume

Risk factors: Heightened regulatory scrutiny of sponsor-bank/BaaS model following industry failures, Concentration risk with large fintech partners (Chime, PayPal/Venmo, Block, Intuit), Rapid fintech consumer lending growth: provisions surged 363% to $177.7M in 2025, Dependence on partner credit-enhancement agreements for loss absorption, $10B Durbin/Reg II asset cap constrains balance sheet growth, REBL commercial real estate exposure: $2.4B in stressed multifamily bridge segment, Interest rate sensitivity on $1.6B securities portfolio with 4.3-year duration, No dividend; capital return entirely via buybacks underserves income investors

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report