> Markdown version of [/videos/1979-inside-bitpanda-s-tech-stack-scaling-a-european-fintech-leader-markus-dorner?t=2169](https://www.wearedevelopers.com/videos/1979-inside-bitpanda-s-tech-stack-scaling-a-european-fintech-leader-markus-dorner?t=2169). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Inside Bitpanda's Tech Stack: Scaling a European Fintech Leader - Markus Dorner

Markus Dorner reveals how Bitpanda's Kafka-driven architecture survives massive, unpredictable traffic spikes. Discover the multi-cloud tech stack powering seven million users and preparing for agentic readiness.

- **Speakers:** Markus Dorner
- **Event:** Coffee With Developers
- **Published:** June 1, 2026
- **Duration:** 40:29
- **URL:** https://www.wearedevelopers.com/videos/1979-inside-bitpanda-s-tech-stack-scaling-a-european-fintech-leader-markus-dorner

## Summary

Bitpanda's transition into a European fintech powerhouse relies on a highly resilient, cloud-native infrastructure capable of handling massive, unpredictable traffic spikes—often triggered by sudden social media trends. Serving over seven million customers across both B2C and B2B channels, the platform leverages a unified, configurable trading engine. This core architecture allows the engineering organization to maintain strict regulatory compliance, manage complex inventory and hedging systems, and deploy tailored features across multiple frontend experiences without duplicating underlying backend logic.

Under the hood, the engineering team operates a multi-cloud environment anchored by AWS and orchestrated via Kubernetes. The backend utilizes Java for core financial services and Python for Web3 and blockchain interactions, while systematically phasing out a legacy PHP monolith. To ensure high availability during aggressive traffic bursts, the architecture relies heavily on Confluent Kafka for message queuing and automated state recovery. This architectural resilience was heavily tested when geopolitical disruptions forced a live, high-stakes data migration from a failing UAE availability zone to Europe, underscoring the critical necessity of agile data locality and multi-region infrastructure planning.

Operating in a highly regulated space requires a strict "you build it, you run it" operational model, supported by an internal service management umbrella that drives cross-functional incident response and rigorous, blameless postmortems. As the industry embraces AI-assisted development, Bitpanda utilizes tools like Google Cloud Code but heavily guards against data leakage and supply chain attacks through strict endpoint security platforms like Zscaler. Rather than treating AI as a replacement for human developers—a concept firmly rejected due to the necessity of human comprehension during critical outages—the engineering focus is shifting toward "agentic readiness." By rebuilding robust, highly scalable API layers, the platform ensures that both human developers and autonomous AI agents can interact securely and efficiently.

**Keywords:** cloud-native fintech architecture, high-volume traffic scaling, b2b trading engine configuration, kafka event-driven resilience, multi-region data locality, cross-functional incident management, you build it you run it, blameless postmortem culture, ai code generation security, developer endpoint protection, social engineering mitigation, agentic api readiness, hardware security modules, web3 blockchain integration, supply chain attack prevention

## Chapters

1. **Adopting cloud-native infrastructure in fintech** (00:02) — The industry shift toward scalable cloud-native deployments allows testing in small circles while building for millions of users.
1. **Maintaining a multi-cloud strategy to avoid vendor lock-in** (01:55) — Using AWS as the primary provider while maintaining openness to Azure and Google Cloud handles provider-specific optimizations.
1. **Handling data center region failures and data locality** (02:50) — A sudden outage in a UAE data center required a swift migration of regional shards back to European infrastructure.
1. **Designing system resilience for sudden traffic spikes** (06:13) — Using Kafka and aggressive monitoring helps infrastructure handle abrupt scale-ups caused by viral social media trends.
1. **Empowering domains through cross-functional in-house development** (08:50) — A strict build-first strategy empowers cross-functional teams to own their domains and manage on-call rotations entirely in-house.
1. **Architecting a unified backend for diverse product channels** (11:57) — A highly configurable core trading platform serves both B2B and B2C channels to prevent feature overload and code duplication.
1. **Selecting diverse programming languages across backend services** (14:44) — Integrating Java, Python, TypeScript, and Rust with managed AWS and Confluent services enables team-specific language choices.
1. **Integrating AI coding tools while maintaining human control** (18:01) — Providing tools like CloudCode and Bedrock to developers requires code to remain comprehensible for emergency human intervention.
1. **Preventing sensitive data leakage from generative AI tools** (20:12) — Implementing strict endpoint security and tool licensing constraints ensures AI agents do not leak sensitive financial data.
1. **Focusing internal hackathons on direct business value** (22:45) — Organizing experimentation days around tangible internal problems rather than unstructured free time maintains strong team alignment.
1. **Navigating development creativity within strict regulatory constraints** (24:28) — Separating highly regulated components like hedging engines from faster-moving environments like Web3 wallets optimizes overall development velocity.
1. **Managing continuous deployment through rigorous blameless postmortems** (26:23) — Daily releases in a sensitive financial environment require rigorous design reviews, strict QA pipelines, and transparent incident analysis.
1. **Defending against supply chain and targeted endpoint attacks** (31:03) — Countering sophisticated social engineering and malicious packages relies heavily on employee vigilance and internal vulnerability scanning.
1. **Adjusting hiring practices to combat sophisticated deep fakes** (33:19) — Mandating in-person communication steps during recruitment helps verify candidate authenticity amidst rising state-actor and criminal threat vectors.
1. **Preparing backend APIs for autonomous agent-driven interactions** (36:09) — Rebuilding the core API layer ensures that both traditional scripts and emerging AI agents can seamlessly interact with backend services.

## Related Moments

- [Solving complex platform architecture challenges at an enterprise scale](https://www.wearedevelopers.com/videos/1209-coffee-with-developers-maria-apazoglou) (from "Coffee with Developers - Maria Apazoglou")
- [Balancing platform availability and security with AI feature releases](https://www.wearedevelopers.com/videos/100106-craftsmanship-in-the-age-of-agents) (from "Craftsmanship in the Age of Agents")
- [Scaling data infrastructure for a rapidly growing fintech platform](https://www.wearedevelopers.com/videos/100311-swapping-a-data-warehouse-at-runtime-zero-downtime-migration-without-changing-a-single-client) (from "Swapping a Data Warehouse at Runtime: Zero-Downtime Migration Without Changing a Single Client")
- [Platform engineering as the foundation for scaling AI tools](https://www.wearedevelopers.com/videos/100266-ai-won-t-fix-your-engineering-culture) (from "AI Won't Fix Your Engineering Culture")
- [Architecting the platform with modern cloud and mobile technologies](https://www.wearedevelopers.com/videos/64-shared-mobility-for-everyone) (from "Shared mobility for everyone!")
- [Modernizing legacy infrastructure for ai driven business transformation](https://www.wearedevelopers.com/videos/1690-tackling-the-risks-of-ai-with-ai) (from "Tackling the Risks of AI - With AI")

## Related Articles

- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [How we Build The Software of Tomorrow](https://www.wearedevelopers.com/magazine/120-how-we-build-the-software-of-tomorrow)

## Related Jobs

- [Senior Software Engineer, Angular (B2C Web Platform)](https://www.wearedevelopers.com/jobs/ext/1927757-senior-software-engineer-angular-b2c-web-platform) at **Bitpanda**
- [Senior Backend Engineer, Blockchain (Smart Contracts)](https://www.wearedevelopers.com/jobs/ext/1940851-senior-backend-engineer-blockchain-smart-contracts) at **Bitpanda**
- [Platform Engineer - Mercury Runtime Platform](https://www.wearedevelopers.com/jobs/ext/293235-platform-engineer-mercury-runtime-platform) at **Raiffeisen Bank International AG**
- [Devops Engineer](https://www.wearedevelopers.com/jobs/ext/1940926-devops-engineer) at **Bitpanda**
- [Senior Software Engineer, React (Investing & Trading)](https://www.wearedevelopers.com/jobs/ext/1937625-senior-software-engineer-react-investing-trading) at **Bitpanda**
- [Platform Engineer (f/m/x) - Mercury Runtime Platform](https://www.wearedevelopers.com/jobs/48266-platform-engineer-f-m-x-mercury-runtime-platform) at **Raiffeisen Bank International AG**