EY

ey.com

EY operates across Assurance, Consulting, Strategy and Transactions, and Tax; technology delivery is a practice-level offering rather than the whole business. Its documented technology scope extends from capability assessments and architecture through application configuration, integration, testing, deployment and security operations. Buyers can therefore evaluate EY for advisory work, implementation or continuing operations, but should specify the boundary between them. EY member firms are separate legal entities, and Ernst & Young Global Limited does not provide services to clients, making the contracting entity an important procurement detail. ^[1] ^[2] ^[3] ^[4]

Services and delivery

Technology strategy and enterprise architecture advisory

Advisory. Assesses technology capabilities and defines technology strategy, governance, operating models and IT organization design. Architecture work includes business and enterprise architecture planning, application architecture and legacy-modernization planning. The practice also offers technology support for post-merger integration and divestitures. ^[2]

Enterprise and industry application implementation

Implementation. Implements enterprise applications from requirements and solution architecture through configuration, development, integration, testing and production deployment. The service includes security and controls and program/release management. Named platforms include SAP, Oracle, Microsoft, JDA and Maximo, with industry applications including Guidewire, Temenos and Fadata. ^[3]

Cloud strategy and architecture advisory

Advisory. Defines cloud strategy and architecture within broader technology-transformation planning. This advisory scope helps buyers establish their cloud direction and technical foundation; migration execution and operational responsibilities should be scoped separately. ^[2]

Cloud migration and infrastructure implementation

Implementation. Provides cloud migration alongside network and storage architecture and data-center/disaster-recovery services. These are documented delivery offerings, although the reviewed description does not establish a standard migration method or hosting model for every engagement. ^[2]

AI adoption and architecture advisory

Advisory. Helps define AI adoption requirements and the strategy, design, architecture, data and risk considerations needed to incorporate intelligent capabilities into customer operations. This is an explicit commercial AI advisory offering, separate from EY’s research publications and internal AI tools. ^[5]

AI systems implementation and integration

Implementation. Designs and builds systems that learn from data, integrates automation and incorporates intelligent or autonomous capabilities into business operations. The service description includes systems integration and the design, build and monitoring of automated systems. ^[5]

Security operations design, build and testing

Implementation. Plans, designs, builds and improves security operations centers. Related work includes security-investment prioritization, controlled penetration testing, static and dynamic application testing, and vulnerability-remediation support. ^[4]

Managed threat monitoring and incident response

Managed services. Provides operational threat monitoring, vulnerability management, remote incident response and just-in-time on-site response. Coverage hours, response commitments and the required security tool stack need to be established in the contract. ^[4]

Company details

Track record

Bayer Crop Science: EY reports helping build a generative-AI knowledge-retrieval proof of concept in 90 days using Microsoft Azure. Work included preparing agronomy and product information, restructuring spreadsheet and table content, retrieval-augmented generation, prompt engineering and automated response validation. This is a proof-of-concept reference, not evidence of a production-scale deployment. ^[6]

Oregon Health Authority: EY reports that EY US led migration from a legacy system to the ROADS behavioral-health data platform. Work included requirements, governance, architecture, data migration, interfaces and adoption support. Technologies included Power Platform, Azure, Dataverse, Power BI, Logic Apps and Function Apps. EY says the platform launched in March 2025 and more than 230 million records were migrated. This case demonstrates data-platform delivery, not AI work. ^[7]

Asahi Europe & International: EY describes co-designing an AI-enabled trade-promotion-optimization tool within an ongoing, outcomes-based managed-services relationship. The tool combines descriptive analysis, recommendations and predictive modeling, uses Microsoft Azure machine learning and integrates with customized SAP environments. EY also reports interface design and continuing refinement; operational SLAs and commercial terms are not disclosed. ^[8]

Scope and limitations

The supplied evidence establishes technology capabilities within relevant EY practices, not across every EY service or member firm.
Public case-study outcomes are EY-reported and have not been independently validated in this research. They should not be treated as representative delivery guarantees.
The reviewed descriptions do not establish standard support hours, incident-response times, migration methods or contractual responsibility for application operations.
The cybersecurity AI survey is research evidence, not proof of implementation capability for every technology discussed.
The EY.ai EYQ case describes internal technology. Customer licensing or deployment availability is unverified in the supplied evidence.

Questions to ask

Which member firm will contract for the work, and who owns architecture, engineering, testing and deployment?
Can EY provide references matching our industry, selected platforms and required production scale?
Where does advisory work end, and which implementation and ongoing operational responsibilities are included?
Which software licenses or accelerators are required, and what rights will we retain to code, data, configurations and documentation?
What support coverage, incident-response commitments, SLAs and transition-out assistance will be contractual?
For AI deployments, what evaluation criteria, data-access controls, production safeguards and post-launch monitoring will be included?

Overview