Estimated reading time: 4 minutes · Last updated:
NatWest Boxed, part of NatWest Group, is remaking embedded finance by owning and operating its Banking-as-a-Service platform and by designing an orchestration layer that keeps old and new systems aligned. As first reported by FinTech Magazine, the unit — established around 2022 — rebuilt its platform in-house using micro-domains, a real time data synchronisation process and phased cutovers that completed with zero customer downtime. That engineering model is being paired with ISO 27001 certification and DORA-focused operations to give brand partners such as The AA, Saga and Sainsbury’s faster, configurable access to savings, unsecured lending and point-of-sale finance.
What I really wanted to do wasn’t just modernise a legacy technology platform, but build a new, transformational, next-generation embedded finance platform
Asif Siddiqui, Director of Engineering, Banking as a Service at NatWest Boxed
Key takeaways
- NatWest Boxed, part of NatWest Group, provides embedded finance technology to The AA, Saga and Sainsbury’s.
- NatWest Boxed was established around 2022 and rebuilt its BaaS platform in-house, completing a phased migration with zero customer downtime.
- The business has achieved ISO 27001 certification and operates to DORA metrics, says Asif Siddiqui, Director of Engineering, Banking as a Service at NatWest Boxed.
- Capco has supported the programme since its Mettle work and continues to provide engineering resources during the migration and scaling phases.
Table of contents
Own the platform, control the experience
NatWest Boxed’s strategic choice was to move from a split operating model to full platform ownership. Initially, NatWest retained the core banking engine while a technology partner ran the orchestration layer; that arrangement helped launch early products and buy time to build an internal stack.
The migration was executed as a staged, feature-by-feature programme that relied on micro-domains and an orchestration layer that could route requests to either platform. That architecture let teams repoint front-end channels and APIs incrementally while preserving existing customer profiles and regulatory controls.
A central technical safeguard was a real time data synchronisation process that kept legacy and new systems aligned until cutover. Because the synchronisation and orchestration were in place, engineers could pause or roll back migration steps without interrupting service, which enabled the team to complete the move with zero customer downtime.
Micro-domains and resilience as the engine of speed
NatWest Boxed separates functionality into micro-domains — small, owned areas such as identity, customer management and onboarding — each governed by strict data and API contracts. That division reduces cross-team coupling: one team can develop and deploy inside its domain without forcing a full-platform retest.
The platform is cloud-native and API-first and follows continuous integration and continuous deployment practices. Those principles, combined with built-in validation and resilience controls inside each domain, are intended to let teams ship more frequently without increasing outage risk.
The unit has also pursued formal security and operational standards: it reports ISO 27001 certification and that it operates to DORA metrics for software delivery performance. The engineering argument NatWest Boxed advances is simple: resilience built into the platform is the foundation for faster, safer innovation.
Configurable products and preparing for agentic AI
NatWest Boxed positions configurability as a competitive requirement for brand partners. The AA has used the platform to offer savings and lending products, including interest rates linked to membership; Saga needed a customer journey tuned to people over 50. Those examples show how partners require custom authentication, branding and loyalty integration alongside regulated banking services.
The group aims to make the platform agentic AI-ready so automated agents can interact with, orchestrate and execute workflows. Asif Siddiqui says the business is investing in agentic AI to increase development velocity and productivity, and that end-to-end ownership makes integrating AI-driven automation easier to manage.
Capco continues to support NatWest Boxed, extending a relationship that began with Mettle and then moved into core platform work. That ongoing consultancy engagement has provided experienced engineering resources while internal teams have grown their capabilities.
| Partner | Products / focus | Customisation required |
|---|---|---|
| The AA | Savings and unsecured lending | Interest rates linked to membership |
| Saga | Embedded financial products | Customer journey designed for people over 50 |
| Sainsbury’s | Partner integration | Not specified |
What could move this either way
The case for
- Platform ownership plus orchestration gives NatWest Boxed the mechanical ability to deliver configurable products to multiple brands without repeated bespoke integrations.
- ISO 27001 certification and a DORA-focused delivery model should sustain high availability and faster recovery, supporting more frequent releases.
- Agentic AI investments could multiply development velocity if the business preserves its domain boundaries and validation controls.
The case against
- Regulatory and data-preservation requirements make migrations complex; any fault in the synchronisation layer could expose customer-data or compliance failures.
- Integrations with partner authentication and loyalty systems create heterogeneity that can raise operational overhead and testing scope.
- A continued reliance on consultancy support such as Capco could slow internal capability transfer if not managed as a temporary resource.
What to be careful about
- Data synchronisation failure during staged migration could compromise customer profiles or regulatory records.
- Complex integrations with partner authentication and loyalty systems increase testing surface and operational risk.
- Dependence on external engineering support (Capco) during critical phases raises a transition risk if knowledge transfer is incomplete.
The bottom line
NatWest Boxed’s decision to own its BaaS stack and to migrate it through micro-domain segmentation, orchestration and live data synchronisation reflects a deliberate trade-off: greater technical responsibility in exchange for configurability and speed for brand partners. The unit pairs that engineering model with ISO 27001 certification and DORA-oriented delivery to protect availability and compliance while scaling. The near-term tests for the approach will be successful agentic AI pilots and additional partner rollouts; both will hinge on keeping synchronisation and domain contracts airtight as the platform grows.
What to watch
- Watch for NatWest Boxed’s public update on agentic AI pilots and their application to product development; no date has been set.
- Watch for announcements of new embedded finance product launches with brand partners such as Sainsbury’s; no date has been set.
Frequently asked questions
What is NatWest Boxed and who uses it?
NatWest Boxed is the NatWest Group unit that provides a Banking-as-a-Service platform to brand partners. It works with names such as The AA, Saga and Sainsbury’s and offers savings, unsecured lending and point-of-sale finance.
How did NatWest Boxed migrate its platform without disrupting customers?
The team used a phased migration built on micro-domains, an orchestration layer and a real time data synchronisation process that kept legacy and new systems aligned, allowing cutovers to complete with zero customer downtime.
What does 'agentic AI-ready' mean for the platform?
As used by NatWest Boxed, agentic AI-ready means designing APIs and orchestration so automated agents can interact with workflows; Asif Siddiqui says the business is investing in agentic AI to raise development velocity and productivity.
Related reading
