Founded in 1930 and headquartered in Jordan, Arab Bank is one of the oldest banks in the Middle East. Operating out of 28 countries, we’ve earned our customers’ trust with a prudent approach to operations and respect for the cultures and customs in the region. 

With a few exceptions where cloud providers have hosted their datacenter in a Middle Eastern or North African country, the banking sector, in general, in the region has been slow to adopt cloud technology for a number of reasons, including concern about data security, maturity and security controls of cloud services (PaaS and SaaS), and regulations in place. But on the other hand, we saw the opportunity to accelerate our development and testing using the cloud, as well as to partner with the fintech community and digital service providers to integrate their solution in the banking ecosystem. We needed more flexibility to connect with the outside world, and a more open architecture to help us drive our internal innovation at a faster rate with the help of the fintech industry. By collaborating with Google Cloud, we reached those goals and accelerated app development and testing through products like Apigee and Anthos. We’re now offering innovative apps and services to our customers and employees that leverage new technological capabilities to give more agility and flexibility, and to optimize our workloads.

Embracing the cloud in a regulated industry 

To get started with the cloud, we needed to create internal awareness about cloud technology, the API layer, containers and their benefits amongst our leaders and staff. Google helped us educate and get buy-in from key functions by organizing open technology demonstration sessions and discussion panels. When considering potential cloud providers we had four decision criteria: maturity of security controls, ease of use, cost, and scalability / agility for new deployments and continuous innovation. This last factor was critical, and we were impressed by Google Cloud’s innovation roadmap, both via direct conversations and at Google’s Next conference, where we met a lot of people passionate about technology, innovation and building something new.  

Going back to our journey, given the above-mentioned regional limitations, we started to develop a hybrid cloud approach. This helped us continue to operate on-premises for a number of services in production, particularly those that have personally identifiable information (PII) or other sensitive data attached, and to leverage the cloud for development, testing and production workloads that don’t contain customer data. 

In the short term, we didn’t anticipate that our many jurisdictions would allow data to be transported to other countries. But cloud tools will allow us to tokenize or anonymize customer data while maintaining customer data on-premises. This applies to many digital journeys such as customer onboarding, credit facility online applications, or marketplace navigation. In the coming years, we predict our API integration with partners will accelerate and enrich the overall digital value proposition of our business segments, namely consumer banking, small and medium-size businesses and large corporate and institutional clients. 

Building connections and cornerstones in the cloud

The first move in our digital transformation was to implement Apigee, Google Cloud’s API management platform, to connect to the world’s digital banking ecosystem. Apigee provides the security, sharing, mediation policies, and developer portal capabilities for us to successfully meet Open Banking standards while focusing on innovation.  

On the back of the Apigee implementation, we created an accelerator program to incubate Fintech ideas that can, in turn, integrate into our digital platforms and be offered to our customers. We also developed various banking APIs, all designed and documented in accordance with PSD2 and Open Banking regulations, and made them available to our partners. These APIs exposed on our API development portal offer the needed code structure for fintech companies to design creative solutions around them.

Next, we adopted Anthos, Google Cloud’s managed application platform. Anthos has become a cornerstone of our operations because it works across hybrid cloud, offering integration of microservice containers and fueling collaborative opportunities with external parties. Our current Anthos infrastructure includes several hundreds of  microservices now running on containers in Google Kubernetes Engine (GKE) and on-premises. We now use the cloud for collaboration, development and testing, but not for production, which is done on-premises. 

Along the way, Google Cloud’s Professional Services Organization (PSO) helped us through the entire cloud setup process, and with the adoption of Anthos. We originally built on the cloud tools through an iterative process, learning from our successes and errors along the way. Now that we have a better sense of how Anthos operates, we’re building a fresh infrastructure atop a sound, stable, and resilient foundation that will let us scale easily as we work to transform Arab Bank into a digital-first enterprise, that is our ambition. 

Currently products running on Anthos include customer acquisition and onboarding via mobile apps, and our Arabi-Pay app, which allows customers to instantly pay each other via WhatsApp or other messaging platforms. Leveraging Anthos, our instant loan service for Arab Bank salaried employees can grant and disburse loans up to $7,000 in less than seven minutes.

In addition, we’ve built a number of digital journeys for our Small and Medium Enterprise (SME) customers, such as our SME client digital onboarding process and paperless SME lending platform.

While some may think that digital adoption in this part of the world can be slow, as customer contact remains anchored in our customs, the recent COVID-19 pandemic has accelerated the adoption of digital banking services and electronic payments, inspiring more confidence to buy and pay online. Thanks to our rich and user-friendly banking app that relies on Apigee and Anthos for critical customer journeys, over 90% of new-to-bank customers are using our mobile apps. Within the next 18 months, we predict that number will be closer to 100%. 

Of course, with higher customer adoption comes the challenge of potential service interruptions. A single moment of downtime can be highly visible to many digital customers. But Google Cloud’s Anthos and Apigee give us the flexibility to resume processes at a fast rate, so any interruptions are almost invisible to our customers. In fact, when the COVID-19 pandemic hit, though our branches could be open only for limited hours each day, our consumer clients in particular were able to take advantage of our digital services in a very self-sufficient manner. Being well positioned with Google Cloud, we could also keep our internal teams and external partners connected and productive. Without Google Cloud, continuing the digital transformation of the bank at the pace we wanted would have been a big challenge. 

Collaborating across borders and time zones

With Google Cloud, our ability to collaborate and partner has transformed significantly. We operate 24/7 now because our developers are scattered across multiple geographies and different time zones. Because testing and deployment can run around the clock, including on weekends, we currently deploy a new digital journey in a few weeks, faster than ever before. This has given our organization a spirited mindset that prioritizes innovation, and raised the bar in terms of our operating model.  

Another consideration about Google Cloud tools is the elimination of inefficient processes typically seen in a software development lifecycle. We now build in a completely agile manner, from design squads until deployment in production. Compared to where we were two years ago, when we had an annual maximum of two systems releases in production, we now have close to monthly releases of our digital packages. In addition, we also  supplement those monthly releases with additional ad-hoc releases and fixes in between. As a result, we have removed internal silos and improved tremendously the collaboration between the product and sales teams, operations, IT Dev Factory and Infrastructure, as well as our supporting functions.

Through the agile process facilitated by APIs, we introduced Design Thinking workshops involving external customers and prospects early on to understand their true pain points better and emotions during the existing journeys and how to make new digital journeys frictionless. As a result, the relevance of our products for various customer personas has improved tremendously. 

Transcending banking 

With Google Cloud, we can offer our customers so much more than just banking. We’ve become more digitally relevant to their lives. For example, we recently launched a mortgage app that helps customers all the way from home selection through mortgage negotiations and closing, and even to getting the home decorated. It’s an end-to-end journey in which API integration with key regional players was a cornerstone to our success. 

For other digital products, we have an extensive roadmap of lifestyle-based solutions relevant to each segment and age group. We’ve only scratched the surface of the services we can provide, and we see the cloud as the future for everything we want to do.

Read more about Google Cloud’s Open Banking solution to learn how you can simplify and accelerate the process of delivering open banking as required by PSD2. You can also view our video on Open Banking, powered by Apigee API Management.

As a family supermarket chain since 1939, Schnuck Markets Inc. depends on driving efficiency and volume sales to achieve its mission, identifying customer service and community partnerships among its key differentiators.

In order to commit its maximum resources for success, Schnucks continues to focus on streamlining operations and achieving greater efficiency. Management and administrative staff throughout the company’s 100 stores in five states need to be able to collaborate effortlessly while enjoying an accurate, centralized information exchange platform. These efficiencies have the potential to impact productivity, customer service, and employee engagement.

Fast-tracking data sharing

Before adopting G Suite, Schnucks found collaborative workflows to be a challenge. Managers from different stores, often in different states, had to provide data that could be compiled and shared. Collaborative documents on traditional platforms faced challenges at Schnucks, where limits of simultaneous users would result in user lockouts. Schnucks managers often exchanged many different versions of the same documents and spreadsheets. However, reconciling all those versions was time-consuming and limited real-time collaboration.

“When we share a Google sheet and request data, 200 people can add their responses immediately at the same time from any device. They don’t walk away and forget and need a reminder. The result is near-effortless compliance,” says Kim Anderson, Director of Procurement and Replenishment at Schnucks.

Schnucks has been successful using the entire range of G Suite tools, with Drive, Docs, Slides, Sheets, and Forms contributing to enhanced collaboration. Google Keep is a popular productivity tool for meeting notes and tasks and creating reminders. Schnucks also uses Hangouts Meet and Hangouts Chat to reduce time and costs spent in face-to-face meetings, and Calendar as the central source for scheduling company events and meetings.

The partnership between Schnucks and Agosto helped with a successful G Suite deployment for the retailer. Agosto helped coordinate the logistics of the move and tackled the G Suite migration with a three-part strategy: IT staffers would move to Google first before employee “Google Guide” experts came in who could help answer teammate G Suite questions.

“Agosto’s deployment plan helped our G Suite deployment run smoothly,” says Dave Steck, Schnucks Vice President of Development and IT Infrastructure. “Their thorough planning helped mitigate the inevitable disruption a change of this size would make.”

Enhanced security and reliability

Previously, Schnucks relied on email to exchange information and any outages added even more lag time to its operations. With Gmail and the entire G Suite, Schnucks now experiences virtually no downtime, allowing for effective communication with enhanced levels of reliability and security.

“We were able to take advantage of the security benefits of G Suite right away,” says Joey Smith, Vice President and Chief Information Security Officer at Schnucks. “Our administrators are able to quickly configure, test, and manage our G Suite security settings to fit the security needs of our business while maintaining compliance with all regulatory obligations.”

On top of the CapEx and OpEx savings with Google providing infrastructure for its office productivity software, Schnucks has gained increased security and high availability, as well as robust disaster recovery. These features are included in G Suite, without any need for IT intervention.

“G Suite automatically encrypts our data with a unique encryption key for each piece and distributes it across multiple data centers for performance, security, and reliability,” says Joey. “This saves us a significant amount of time and money while achieving top notch security.”

Another way Schnucks benefits from Google security is the availability of data loss protection (DLP) features native to Gmail. With DLP, Schnucks can automatically audit outgoing emails for Personal Identifiable Information (PII), Protected Health Information (PHI), and other information the store requires.

“DLP is very powerful because it provides detailed visibility,” says Joey. “We can isolate emails, analyze patterns of false positives, and follow up with education or enhanced restrictions to increase security.”

Spam reduction

An unexpected advantage of adopting G Suite was an instantaneous reduction in spam emails. That’s more administrative time saved for employees. In fact, Gmail native spam prevention is so effective that Schnucks was able to replace its third-party spam filter with a simpler technology that costs 80% less.

Savings on hardware and software

Converting to G Suite saves Schnucks the operational costs of an infrastructure for office and communications solutions, but its web interface also provides substantial savings on application maintenance, anti-virus software, and hardware.

With G Suite files and applications residing in the cloud, the need for employees to use heavyweight installable applications is increasingly rare. As laptops age, Schnucks is replacing them with Chromebooks, saving approximately $1,250 per computer. Because Chromebooks don’t require additional anti-virus software or many other endpoint security measures, the need for software licenses and other security and maintenance costs are simultaneously reduced.

Schnucks also finds that Chromebooks instantly increase productivity. “What’s great about the Chromebook is the productivity savings we get from the speed and ease of use and management,” says Dave Steck, Vice President of Development and IT Infrastructure at Schnucks. “You’re not waiting for applications to start up. As a result, Chromebooks are the only laptops we need for the majority of our teammates.”

Aligning the company across sites

More than just providing a common set of office tools, intuitive collaboration in G Suite enables the grocery chain to provide consistent messaging and a central information hub across all store locations. With posters, presentations, and communications, Schnucks worked hard to help ensure that the entire company understood the value of the tools. The Operations and IT teams rolled out the changeover in three phases, using Google Guides to show the benefits of adoption and then rolling out to larger groups over time.

“Adopting G Suite as a collaborative platform helped us to integrate individual store activities and increase operational efficiency,” says Dave.

Investing in the future

Employees who were already familiar with G Suite because they used it in school or in their personal lives have found the move eases communications company-wide, and Schnucks believes that the move will also help attract prospective employees who already use G Suite.

“Knowing that more and more prospective employees are already familiar with G Suite is a big win for us,” says Joey. “To them, it helps demonstrate our commitment to innovation.”

We are excited to announce that as of April 1, 2021, Google Cloud VMware Engine is covered under the Google Cloud Business Associate Agreement (BAA), meaning it has achieved HIPAA compliance. Healthcare organizations can now migrate and run their HIPAA-compliant VMware workloads in a fully compatible VMware Cloud Verified stack running natively in Google Cloud with Google Cloud VMware Engine, without changes or re-architecture to tools, processes, or applications.

Healthcare organizations increasingly use cloud platforms to personalize patient care, analyze large datasets more effectively, enhance research and development collaboration, and share medical knowledge. Leveraging cloud platforms can also help healthcare organizations increase the privacy and security of information systems, including protected health information (PHI), and, as a result, better comply with applicable laws and regulations while reducing the burden of compliance. For PHI, the Health Insurance Portability and Accountability Act of 1996 (HIPAA) set standards in the United States to protect individually identifiable health information. HIPAA applies to health plans, most healthcare providers, and healthcare clearinghouses that manage PHI electronically, and to persons or entities that perform certain functions on their behalf. 

With Google Cloud, organizations can leverage solutions that enable secure, continuous patient care and data-driven clinical and operational decisions with ease, while being empowered with collaboration and productivity tools. Further, Google Cloud Platform supports HIPAA compliance. We offer HIPAA-regulated customers the same products at the same pricing that is available to all customers, unlike many other cloud providers. 

For healthcare organizations that leverage VMware on-premises, having a consistent, cloud-integrated platform that provides seamless access to native cloud services unlocks the opportunity to extend, migrate, and modernize healthcare IT infrastructure and applications in a fast, low-risk manner at their own pace. This is especially important for mission-critical healthcare provider workloads, where having a low-risk way to adopt the cloud is important. Google Cloud VMware Engine offers that solution. By achieving coverage under Google Cloud’s BAA, Google Cloud VMware Engine enables healthcare organizations to realize the benefits of cloud computing and stay on track with their HIPAA compliance efforts without additional complexity. This is very relevant in hybrid scenarios, where customers would like to leverage other native cloud services such as analytics and big data processing, without having to enter into multiple BAAs.

Google Cloud VMware Engine offers dedicated, isolated software-defined datacenter environments with fully redundant and dedicated 100 Gbps networking that are suitable for healthcare organizations to run applications storing and processing PHI data. Customers have the ability to encrypt their virtual storage area network (vSAN) using an external key management server. Healthcare customers can run their workloads in a native VMware environment—vSphere, vCenter, vSAN, NSX-T, and HCX—while benefiting from Google Cloud’s highly performant infrastructure to meet the needs of their workloads. Customers can connect their VMware applications to native Google Cloud services such as BigQuery and artificial intelligence (AI) to derive new insights from existing data and quickly make informed decisions. 

Protecting against and mitigating the impact of ransomware attacks is top-of-mind for Healthcare organizations. This requires building a cyber resilience program and back-up strategy to prepare for how users can restore core systems or assets affected by a security (in this case, ransomware) incident. This is a critical function for supporting recovery timelines and lessening the impact of a cyber event so organizations can get back to operating their business.  Google Cloud VMware Engine in combination with Google Cloud first party solutions such as Actifio Go, or partner solutions such as NetApp CVO can provide an efficient way to recover incremental point-in-time backups along with on-demand provisioning of new compute to  recover both data and infrastructure from Ransomware attacks quickly and efficiently. 

Healthcare customers can also use Google Cloud VMware Engine as a disaster recovery (DR) target for their on-premises VMware workloads. Healthcare organizations also need a business continuity plan for their mission critical applications. When a disaster occurs, hospitals need their data protected so they can quickly get back to treating patients. It is a HIPAA requirement that healthcare organizations must be able to recover from a natural disaster. Google Cloud VMware Engine offers a like-for-like cost-effective DR target for these customers. The DR environment can be operated without new training using the same tools as their on-premises deployment. Google Cloud VMware Engine is currently available in 12 regions across the globe including three regions in the US, which means our regional and multi-national customers can take advantage of this service for geographic diversification as well. 

If you are interested in understanding more and taking advantage of Google Cloud VMware Engine, contact your Google sales team now.

For details, see HIPAA compliance on Google Cloud Platform.