Big Banks Are Using AI to "Out-Code" Vendors. Here's How Community Banks Can Still Compete.
Source: AmericanBanker.com - "Fifth Third official: AI will help banks 'out-code' vendors"
TL;DR
Fifth Third Bank's EVP of consumer lending recently told American Banker that AI will let large banks "out-code" their own vendors, running continuous risk reviews and building internal tools instead of waiting on vendor roadmaps. The capabilities he described are real and worth understanding. But the path to get there requires engineering teams, cloud-native data infrastructure, and model risk management programs that most community banks under $10B simply cannot staff or fund internally. The good news: the outcomes Fifth Third is chasing - continuous exam readiness, faster loan operations, cleaner data - don't require building an in-house AI lab. They require the right operating model and a willingness to rethink how operational work gets done.
In a recent American Banker article, Fifth Third Bank executive Jay Plum made a provocative claim: artificial intelligence will allow large banks to "out-code" their technology vendors. Instead of waiting on Fiserv or Jack Henry to ship features, banks with internal AI teams will build what they need themselves, faster and cheaper. Plum described how Fifth Third is already using AI to run ongoing "mini reviews" of its loan portfolio and risk exposure, replacing the traditional annual scramble of pulling data from a dozen systems to prepare for regulatory exams. The bank scans portfolios continuously, flags emerging concentrations early, and maintains exam-ready documentation as a byproduct of daily operations rather than a quarterly fire drill.
For a $214 billion institution with hundreds of engineers, that's achievable. For a $700 million community bank with a four-person IT department, it reads more like a dispatch from another planet.
But the underlying insight is worth paying attention to, because the operational outcomes Plum is describing are not exclusive to large banks. The delivery model just has to look different.
What Fifth Third Is Really Solving
Strip away the "out-code" language and Plum is describing three operational improvements that every bank CFO and COO would recognize as valuable.
Continuous exam readiness instead of periodic scrambles. Rather than spending weeks before an exam pulling data from core, LOS, GL, and compliance systems, the bank maintains a continuously updated, auditable record. When examiners ask a question, the answer is already assembled.
Earlier risk detection through ongoing portfolio analysis. Instead of discovering loan concentrations or documentation gaps during annual reviews, AI-powered monitoring surfaces them in near real time. Issues get addressed before they become findings.
Less dependence on vendor release cycles for critical workflows. When a bank can build and adapt its own tools, it stops waiting 12-18 months for a vendor to prioritize a feature request. It controls its own operational roadmap.
These are outcomes, not technology features. And that distinction matters.
The Scale Advantage Is Real
The honest assessment: replicating Fifth Third's approach in-house is not realistic for most community institutions. To "out-code" vendors, a bank needs a modern cloud-ready data environment that unifies information across core, LOS, document repositories, and compliance systems. It needs an internal engineering team that understands both banking operations and AI tooling. And it needs the ability to operationalize AI models, which means embedding them into daily workflows, monitoring performance, and documenting everything for model risk management and regulatory scrutiny.
For small to mid-size community banks ($500M - $10Bn), dedicating that level of budget and specialized talent to internal AI development is rarely justifiable. The math doesn't work. A single senior data engineer costs more than most community bank technology budgets can absorb, and that's before infrastructure, tooling, and the compliance overhead of running production AI systems in a regulated environment.
This is the "cost vs. capability" trap that keeps community banks stuck between enterprise software they can't fully implement and manual processes they can't scale.
Same Expectations, Fewer Resources
Regulatory requirements scale with asset size. A $600 million community bank isn't filing the same reports or facing the same supervisory cadence as a $50 billion regional. But the standard of evidence doesn't scale down with the balance sheet. Examiners still expect accurate data, defensible processes, and clear traceability - regardless of how many people are on the ops team producing it. That asymmetry is the core problem: smaller banks carry a proportionally heavier compliance burden relative to their resources, even though the absolute reporting load is lighter.
The OCC's 2025 Request for Information on community bank digitalization confirmed what most operations leaders already know.
Banks described compliance teams spending weeks preparing for exams because data lives in five or six different systems.
Loan review teams spending half their time extracting information from PDFs before starting the actual analysis.
New technology investments underperforming because the underlying data is fragmented, unstructured, or trapped in legacy formats.
In that context, Fifth Third's "mini review" approach is less a technology story and more a process story. Continuous monitoring, automated exception handling, and built-in documentation relieve exam pressure and reduce operational risk.
The real question for community banks is how to get there without hiring a team of AI engineers.
Five Things Community Banks Can Do Right Now
Before getting into operating models and partnerships, it's worth acknowledging that community banks are not helpless here. There are practical, concrete steps that any institution can take to start closing the operational gap, regardless of budget or technology maturity.
Turn exam prep from an event into a habit. The single biggest insight from Fifth Third's approach is that exam readiness should be a byproduct of daily operations, not a separate project. Even without AI, banks can restructure how documentation is maintained. If loan files, compliance records, and reconciliation evidence are kept in a continuously updated, searchable state, the annual scramble shrinks dramatically. The discipline matters more than the tool.
Audit where your staff time actually goes. Most banks don't have a clear picture of how many hours per week are consumed by data preparation versus actual analysis and decision-making. A simple two-week time study across loan ops, reconciliation, and compliance workflows will reveal where the highest-value automation opportunities are. You can't improve what you haven't measured, and the results are almost always worse than leadership assumes.
Stop buying tools that create new manual work. Every new compliance platform or lending tool that assumes clean, structured input data just shifts the manual burden upstream. Before the next technology purchase, ask a straightforward question: who prepares the data this tool needs to function, and how many hours does that take? If the answer is "our people, manually," the tool isn't solving the problem. It's relocating it.
Use vendor contracts as leverage, not handcuffs. Core providers control integration timelines, but banks with clearly documented process pain points have stronger negotiating positions during contract renewals. If you can demonstrate exactly where your systems fail to share data, exactly how many staff hours that costs, and exactly what the downstream risk looks like, you're negotiating from specifics rather than frustration. That changes the conversation.
Start small where the ROI is obvious. Document intake, transaction reconciliation, and loan file organization are high-volume, low-judgment tasks. These are the right starting points for any automation or managed services engagement, not because they're easy, but because the before-and-after is measurable within 90 days. A community bank that can demonstrate a 40% reduction in reconciliation time or loan prep hours has built an internal business case that funds the next step.
None of these require a seven-figure technology investment. They require operational clarity and a willingness to look honestly at how work gets done today.
From "Out-Coding" to "Out-Executing"
The goal shifts from building an internal AI stack to achieving the same operational outcomes through a combination of smarter process design, selective technology adoption, and the right partnerships. There are several ways to get there. Some banks renegotiate with their core provider to unlock integration capabilities they're already paying for. Others invest in lightweight automation tools their existing staff can manage. And some look for partners who can take ownership of specific workflows and deliver clean, validated, audit-ready data as an output - freeing internal teams to focus on higher-value work. The common thread is that none of these paths require hiring a team of AI engineers. They require clarity on which operational problems actually need solving and an honest assessment of whether the bank has the internal capacity to solve them alone.
This model looks different from traditional software procurement or BPO staffing in a few important ways.
The bank buys an outcome, not a tool. Rather than licensing software and hiring staff to run it, the bank pays for a defined result at a predictable cost. Loan files are complete and validated. KYC documentation is organized and defensible. Reconciliation happens same-day with exceptions routed automatically.
The data infrastructure is handled. Document intake, classification, extraction, cross-validation, and lineage tracking all happen within the managed workflow. The bank doesn't need to build a cloud-native data pipeline or maintain AI models internally.
Automation without blind spots. Any automation approach. Whether built internally, purchased, or delivered through a partner - human checkpoints are needed for the exceptions that automated systems can't resolve confidently. The percentage varies by workflow, but the principle holds: full automation without oversight creates a different kind of risk.
Audit trails exist by default. Every data point, every transformation, every human review decision is documented with full lineage. When examiners ask "show me your process," the answer already exists.
What Does This Look Like in Practice?
To make the concept concrete, consider how managed data operations can address the same pain points Fifth Third is solving with internal AI teams.
Exam readiness as an ongoing process.
Instead of a quarterly push to assemble documentation, a managed operations partner continuously ingests, validates, and organizes the documents and data that examiners care about. Loan files, compliance records, reconciliation evidence, and risk reports are maintained in a searchable, auditable state at all times. When exam season arrives, the preparation work is already done.
Loan document processing without the manual bottleneck.
AI-enabled document intelligence can ingest a 150-page loan package, classify each document, extract key financial data, validate it across sources, and format it for the LOS. Only true anomalies get routed to underwriters. Several vendors offer these capabilities as standalone tools. For banks that lack the internal capacity to implement and manage those tools, managed service providers can handle the entire workflow end-to-end. Either way, the loan team spends its time making credit decisions, not prepping data.
KYC and onboarding without the compliance drag.
Identity documents, business filings, and beneficial ownership records can be captured, verified, and organized into a consistent digital record through a mix of automation and structured process design. Watchlist screening can be embedded in the workflow rather than handled as a separate manual step. The implementation path varies - some banks can accomplish this with their existing compliance platforms configured more effectively, while others may need external support to build and run the workflow.
These are not theoretical capabilities. They mirror exactly what Fifth Third is building internally, delivered as a service rather than as a large-scale engineering project.
Competing Without Writing Code
Jay Plum's argument is that AI shifts the balance of power between banks and vendors. Banks with strong internal teams can build and adapt faster than vendor roadmaps allow.
For community banks, the same logic applies with a different mechanism. The competitive advantage doesn't come from out-building the largest players on technology. It comes from being more deliberate about which problems to solve first, more honest about internal capacity, and more open to operating models that didn't exist five years ago.
The options are broader than the old binary of "buy enterprise software" or "hire more people." Banks can push their core providers harder on integration and data access. They can adopt targeted automation for specific high-volume workflows. They can bring in partners for the operational work that doesn't justify a permanent internal team. And they can do all three in combination, starting small and scaling based on what actually works.
In a market where large banks are racing to out-code their vendors, community banks have a viable counter-strategy: focus on out-executing on the things that actually matter. Exam readiness. Loan cycle time. Data accuracy. Operational cost control. The competitive advantage for community banks was never going to come from building a bigger technology stack. It comes from staying focused on what they do best - serving their communities - while making sure the operational backbone keeps up.
Learn About Shore GroupFAQ
What does it mean when banks "out-code" their vendors?
It refers to large banks using internal AI and engineering teams to build custom tools and workflows faster than their core technology providers can deliver through standard product releases. Fifth Third Bank's EVP of consumer lending used the phrase to describe how AI allows banks to take more control over risk management, exam preparation, and operational processes that were previously dependent on vendor roadmaps.
Can community banks replicate what Fifth Third is doing with AI?
The specific approach of building internal AI engineering capabilities is generally not feasible for community banks under $10 billion in assets due to the cost of specialized talent, cloud infrastructure, and model risk management. However, the operational outcomes Fifth Third is pursuing, including continuous exam readiness, faster document processing, and better data quality, can be achieved through a combination of smarter process design, targeted automation, and external partnerships.
What practical steps can community banks take to improve operational efficiency?
Start by identifying which workflows consume the most staff time relative to their complexity. Common candidates include loan document processing, daily reconciliation, KYC verification, and regulatory reporting preparation. From there, evaluate whether the improvement comes from reconfiguring existing tools, adopting targeted automation, renegotiating with core providers for better data access, or bringing in an external partner for workflows that don't justify permanent internal capacity.
How does continuous exam readiness differ from traditional exam preparation?
Traditional exam preparation is a periodic, labor-intensive project where staff pull data from multiple systems, reconcile records, and assemble documentation in the weeks before an exam. Continuous readiness treats that documentation as an ongoing byproduct of daily operations. Data lineage, validation records, and process documentation are maintained in real time, so the evidence examiners need already exists when they ask for it.
What should community banks consider when evaluating operational partnerships?
Look for alignment on a few fundamentals: clear ownership of the workflow and its outcomes, built-in human oversight for exceptions, complete data lineage and audit trails, and a willingness to start with a small scoped engagement before expanding. The right partner should be able to articulate specifically how they handle your data, where human review occurs in the process, and what happens when something goes wrong. Be skeptical of anyone who leads with technology rather than outcomes.