Modernizing Supervision at Slovenia’s AZN with CORA on Microsoft Azure
Compliant Risk Technology (CRT) · Published
At CRT, we engineer advanced SupTech for forward‑looking regulators
In partnership with the Insurance Supervision Agency of Slovenia (Agencija za zavarovalni nadzor, AZN), we supported a strategic modernization—migrating core supervisory systems to the cloud and enhancing AZN’s operational resilience.
AZN, Slovenia’s insurance regulator, faced limitations tied to legacy infrastructure: scalability challenges, manual workflows, and rising cybersecurity demands. Rather than maintain the status quo, AZN took a decisive step toward modernization—mirroring a broader shift among supervisory authorities across Europe.
From legacy to Azure: a strategic shift
The transformation centered on migrating CORA—CRT’s modular, containerized platform—to Microsoft Azure. AZN’s previous hardware-based system, with limited redundancy and process automation, was replaced by a flexible, cloud-native infrastructure delivering real-time oversight and operational efficiency.
CORA’s multi-tier SupTech framework
CORA offers a layered architecture tailored to regulatory needs:
- Tier 1: Data validation, secure submissions, compliance tracking
- Tier 2: Workflow automation and licensing management
- Tier 3: BI and real-time analytics
- Tier 4: AI modules for predictive insights and document intelligence
This architecture empowers regulators to manage complexity with speed and precision.
Why Azure was the right fit
Azure’s infrastructure complements CORA’s design:
- Container Apps for scalability
- Defender for Cloud, Azure Firewall, WAF, RBAC for security
- Blueprints & Policies for automated governance
- Log Analytics & Monitor for operational visibility
- Hub-Spoke networking for secure data flows
These tools created a resilient, compliant platform for supervisory data operations.
Risk management and business value
The migration followed an exhaustive risk‑mitigation approach covering data residency, encryption, identity controls, and EU compliance.
Key outcomes include
- High availability and disaster recovery readiness
- Reduced infrastructure costs via cloud-based OPEX models
- Continuous, validated data flows for real-time supervision
- Rapid updates to compliance rules and supervisory insights
Perhaps most critically, this transformation underscores a broader trend in supervisory work: authorities like AZN are enhancing already robust oversight capabilities with tools that allow for faster intervention, deeper insight, and more agile responses to evolving market risks.