National Bank of Greece (NBG)

Scoring 68/100 sits in a transitional band. A multi-cloud setup may technically work, but DORA's ICT risk requirements typically force a firm to demonstrate data sovereignty by the next audit cycle. Dedicated infrastructure options belong on the table now, not when a regulator asks.

Cloud cost volatility alone would typically concern a board. Global memory prices surged by 25% in June 2026, which can trickle into higher AI token costs from hyperscale providers. Without fixed-term sovereign capacity, unit economics for AI deployments can become unsustainable within a planning year.

The regulatory direction is clear: data sovereignty is becoming a board-level obligation, not just a technology preference. This AI-generated review surfaces those questions. Management would typically have to choose whether to address the gaps proactively or wait for a regulator to surface them.

A compliance function would typically read this AI-generated review as confirmation of issues an internal review would flag. The security grade would typically need improvement, and the bigger gap is demonstrating to auditors where AI training data physically resides. Under GDPR Article 44, cross-border transfers to non-adequate countries require documented safeguards that current cloud-provider agreements may not satisfy.

A hypothetical institutional shareholder would typically view AI governance risk the same way as cybersecurity risk — an asymmetric liability. The downside of a regulatory finding or data-sovereignty breach can far exceed the cost of proper infrastructure. Firms in financial services without a sovereign AI strategy can face a valuation discount within a planning cycle. That is not a prediction or investment advice.

A hypothetical enterprise client would typically need to know that AI systems processing their data meet DORA's third-party risk requirements. Regulated buyers increasingly ask vendors for data-sovereignty attestations. Firms that can demonstrate EU-sovereign AI infrastructure can have a procurement advantage with those clients.