The size of the opportunity
US banks spent an estimated $200 billion on technology in 2023, according to industry research from Celent and IDC Financial Insights. JPMorgan Chase alone budgets $15 billion per year on technology — more than most Fortune 500 companies spend on their entire operations. Bank of America, Wells Fargo, Citigroup, and US Bancorp each run multi-billion-dollar technology budgets.
Five spending categories drive the bulk of that volume: core banking modernization (migrating off decades-old mainframe systems), payments infrastructure, compliance and RegTech, cybersecurity, and data analytics. Each category has an active procurement pipeline with vendors ranging from $50,000 consulting engagements to multi-year platform contracts worth tens of millions.
Supplier diversity programs at these banks are not window dressing. JPMorgan Chase, Bank of America, Wells Fargo, Citigroup, and US Bancorp are all members of the Billion Dollar Roundtable — a group that requires a demonstrated commitment to spending at least $1 billion annually with diverse suppliers. For technology vendors, that means real budget allocation, not a token line item.
Which certifications matter most here
NMSDC MBE certification is the primary credential for banking technology work. The major banks are active NMSDC corporate members, which means their supplier diversity teams regularly source candidates from the NMSDC supplier database and attend regional council matchmaking events. A certified MBE firm gets indexed in a database that procurement officers actually search.
WBENC WBE certification is equally recognized at the large banks. Wells Fargo, Bank of America, and Citigroup all have dedicated WBE programs, and WBENC's corporate membership list reads like a who's who of financial services procurement.
A few other credentials are worth noting for specific contexts. The Small Business Administration's 8(a) program opens doors with banks that have government-related technology contracts or federal banking charters with procurement requirements. For Black-owned technology firms specifically, some regional banks accept NMSDC MBE from an affiliated regional council as the operative credential rather than national certification — the process is the same but the relationship is local.
CDFI certification (Community Development Financial Institution) is a separate designation from the Treasury Department and applies specifically to minority-owned financial technology firms that provide services to underserved communities. It is not a standard supplier diversity credential, but it can create procurement relationships with banks seeking CRA (Community Reinvestment Act) credit for their vendor spend. If your firm serves low-income markets or provides banking access products, CDFI certification is worth investigating alongside MBE/WBE.
The certifications to skip early on: federal certifications like WOSB or SDVOSB have minimal leverage in private banking procurement unless you are targeting bank subsidiaries that hold government contracts.
Key corporate buyers and their programs
JPMorgan Chase runs the largest technology supplier diversity program in US banking. Their supplier diversity team actively sources certified MBE and WBE technology vendors across application development, infrastructure, cybersecurity, and data platforms. The JPMorgan Chase for Business accelerator focuses on small business clients, but their innovation lab (JPMorgan Chase Lab) has historically piloted fintech partnerships with diverse founders. Entry point: the JPMC supplier registration portal and NMSDC regional council events where JPMC procurement staff participate.
Bank of America publishes an annual supplier diversity report with specific spend metrics and runs the Neighborhood Builders program, which has a technology and innovation track. BofA's Global Technology and Operations group is the relevant procurement buyer for IT services. They also participate in WBENC's formal matchmaking events. Entry point: BofA's supplier registration system and WBENC National Conference, where BofA typically sends multiple procurement representatives.
Wells Fargo maintains one of the more transparent supplier diversity programs in banking, publishing category-level spend data. Their technology procurement focuses on infrastructure modernization and compliance tooling. Wells Fargo is an active NMSDC and WBENC corporate member and participates in regional council matchmaking events. Entry point: Wells Fargo's diverse supplier portal and NMSDC regional council connections in markets where they have large operational footprints (Charlotte, Minneapolis, San Francisco).
Citigroup runs a global supplier diversity program with specific targets for MBE, WBE, and other certified categories. Citi's technology spend is concentrated in infrastructure, cybersecurity, and payments. Entry point: Citi's supplier registration portal and WBENC corporate connections.
US Bancorp is smaller than the top four but has a notable supplier diversity commitment as a Billion Dollar Roundtable member. Their technology procurement is concentrated in Minneapolis and Cincinnati. Regional NMSDC council relationships are particularly valuable here.
Beyond these five, regional banks with active supplier diversity programs include PNC Financial, Truist, and KeyBank. They are less likely to appear at national conferences but often respond well to direct outreach backed by NMSDC or WBENC certification.
Goldman Sachs 10,000 Small Businesses deserves a separate mention. It is not a procurement program — it is an education program that provides business owners with skills training and networking. The alumni network is genuinely useful, and Goldman's supplier diversity team does give preference to 10KSB alumni in some sourcing decisions. If you qualify for the program, it is worth the time investment independent of any direct contracting outcome.
Typical contract sizes and entry paths
Contracts in banking technology span a wide range. Initial pilot engagements with large banks often start between $50,000 and $250,000 — scoped as proof-of-concept work or limited consulting projects. Successful pilots frequently convert to multi-year agreements in the $500,000 to $5 million range. Platform licensing deals and long-term managed services contracts can reach $10 million or more, but those typically require an established track record with the institution.
Most diverse technology firms enter through one of three paths.
Subcontracting is the most common initial path. Large IT service firms — Accenture, IBM, Cognizant, Infosys — hold master service agreements with major banks. These primes actively recruit certified diverse subcontractors to meet their own supplier diversity commitments. The work is real, the payment is reliable, and the relationship with the bank's internal teams often creates a pathway to direct contracting later. NMSDC and WBENC certification databases are where primes search first.
Direct proposal through supplier diversity programs is the second path. After registering in a bank's supplier portal and connecting through NMSDC or WBENC networks, some firms receive direct RFP invitations. This is more likely for specialized capabilities — niche RegTech, specific cybersecurity tools, specialized data analytics — where the bank cannot find the capability at a prime contractor.
Accelerator and innovation lab relationships are a third path, though they are more competitive and less predictable. JPMorgan Chase's and BofA's innovation relationships have produced real vendor engagements for some fintech firms, but the process is selective and the timeline is long.
Industry-specific barriers
Security and compliance requirements are the biggest barrier for small and diverse technology firms entering banking. Banks require SOC 2 Type II audits, sometimes ISO 27001 certification, and rigorous vendor risk assessments before any technology touches their systems or data. A SOC 2 Type II audit costs $15,000 to $50,000 and takes six to twelve months to complete. This is a real cost that many early-stage firms cannot absorb.
The practical mitigation: pursue the SOC 2 audit earlier than you think you need it, and budget for it explicitly. Firms that show up to procurement conversations without SOC 2 in progress are typically filtered out before the evaluation starts. Some NMSDC regional councils have negotiated discounts with SOC 2 audit firms for certified MBE members — worth asking.
Vendor consolidation pressure means banks are actively reducing the number of technology vendors they manage. Procurement teams favor vendors that can handle multiple functions over point solutions. Small diverse firms are often point solutions. The counter-strategy: partner with complementary firms to present broader capabilities jointly, or position your point solution as a component within a prime's broader service offering.
Relationship time horizons in banking procurement are long. A first meeting at an NMSDC event might take 18 months to convert to a paid engagement. Firms that treat NMSDC or WBENC membership as a one-year experiment and then lapse typically do not see results. The banks that are serious about supplier diversity track participation over multiple years.
Payment terms at large banks are often Net 60 or Net 90, which creates cash flow problems for small firms. Ask about early payment programs — JPMorgan Chase and some other large banks have supply chain finance programs that allow diverse suppliers to access early payment at a discount.
First steps for a new firm in this sector
- Get your NMSDC MBE or WBENC WBE certification first. The process takes three to six months. Start the application now, not after you identify a specific opportunity. Both databases are live and searched by procurement teams continuously.
- Register in the supplier portals for JPMorgan Chase, Bank of America, and Wells Fargo. Each has a public registration system. This takes an afternoon and puts your firm in front of their supplier diversity teams.
- Join your regional NMSDC council. National certification matters, but relationships are built at regional council events where bank procurement officers from your geography participate.
- Start the SOC 2 Type II process. If you are targeting any work that touches bank data or systems, this is not optional. Find an audit firm and understand the timeline and cost before your first serious procurement conversation.
- Identify two or three large IT primes — Accenture, IBM, Cognizant — and contact their supplier diversity or subcontracting teams directly. Frame the conversation around your specific technical capability and your MBE/WBE certification. Primes are actively looking for qualified diverse subcontractors.
- Attend WBENC National Conference or NMSDC Annual Conference. These are the events where bank procurement officers show up specifically to meet diverse technology vendors. One conversation at the right event is worth dozens of cold emails.
The banking technology market has real budget and real procurement infrastructure for diverse suppliers. The firms that succeed here tend to be patient, credentialed early, and focused on specific technical categories where they have genuine expertise.
