Who this guide is for
What CCM Software Is — and What It Is Not
- Composition: merging data from core banking, policy administration or billing systems into templates, in batch (millions of statements at month-end) and on demand (a contract generated while the customer waits).
- Authoring and content management: templates, reusable clauses, legal text and brand assets, with versioning, approval workflow and effective dates.
- Multichannel output: print streams for the mailroom, PDF, HTML email, web and app delivery, SMS, from one source of content.
- Interactive documents: letters and contracts that an agent or underwriter completes with guided edits inside controlled limits.
- Archive and evidence: what exactly was sent to whom, when, in which version — the record you need for complaints, disputes and audits.
Why 2025 Changed the Selection Criteria
| Rule | Applies from | What it changes in a CCM selection | Source (date) |
|---|---|---|---|
| European Accessibility Act, Directive (EU) 2019/882 | 28 June 2025; existing contracts may run up to 5 years; some Member States postponed to 28 June 2030 | Contractual documents, terms and conditions and disclosures for consumer banking services must be accessible and perceivable; key information must not exceed CEFR level B2 (upper intermediate) | Legal500 / Oxford Business Law Blog (2025) |
| Italy — D.Lgs. 82/2022 (EAA transposition) | 28 June 2025; services already provided before that date have until 28 June 2030 | AgID supervises; accessible output becomes a procurement requirement for Italian consumer services | Portolano Cavallo |
| Spain — Ley 11/2023 (EAA transposition) | Title I in force 28 June 2025; existing services until 28 June 2030 | Same accessibility duties for consumer banking services in Spain | Cuatrecasas (2025) |
| DORA, Regulation (EU) 2022/2554 | 17 January 2025 | A hosted or SaaS CCM platform is an ICT third-party service: it goes in the register of information, its contract must carry the Article 30 terms, and if it supports a critical or important function you need a documented exit strategy | FMA Austria; William Fry |
| Italy — Art. 119 TUB and Banca d'Italia transparency provisions | In force | Periodic communication at least once a year (rendiconto plus documento di sintesi): one of the largest recurring batches the platform must produce | EC News (art. 119 TUB commentary) |
| UAE — CBUAE Consumer Protection Regulation (Circular 8/2020) and Standards | 31 December 2020 | Consumer information in Arabic, other languages in addition: bilingual, right-to-left composition is a core requirement, not a localisation extra | Trowers & Hamlins; Pinsent Masons |
Accessibility is a composition problem, not a PDF fix
Start With Your Template Estate, Not the Vendor List
- Identity and volume: name, business owner, documents produced per year, peak batch size and the deadline it runs against.
- Channel and trigger: batch, on demand or interactive; print, PDF, email, portal, app.
- Data sources: which systems feed it, through which extracts or APIs, and who owns each feed.
- Embedded logic: conditional clauses, calculations, tables that change shape, regulatory text by product or jurisdiction. Logic that lives in the template rather than in the source system is the costliest thing to migrate.
- Regulatory exposure: which rules the document satisfies (transparency, pre-contractual information, accessibility, language), and the retention period of its archive.
- Status: live, rarely used or dead — with the date it last produced a document.
The CCM Vendor Landscape in 2026
| Platform | Lineage (dated) | Usually shortlisted for | Check carefully |
|---|---|---|---|
| OpenText Exstream | Formerly HP Exstream; OpenText agreed to buy HP Inc.'s CCM assets for about USD 315 million in June 2016 and closed in August 2016 | Very high-volume batch and complex, multi-section statements | Skills availability, licence structure, which deployment options the roadmap really favours |
| Quadient Inspire | Formerly GMC Software, acquired by Neopost in 2012; renamed Quadient in 2017, and the group became Quadient in 2019 | Omnichannel design and business-user tooling; named a Leader in four 2025 Aspire Leaderboard segments | Effort of migrating very large legacy estates; module scope in the quote |
| Smart Communications (SmartCOMM) | Spun off from Thunderhead in 2016 as an independent company backed by Accel-KKR; headquartered in London | Cloud-delivered CCM, interactive documents and digital forms | High-volume batch performance on your statement run; data residency options |
| Precisely EngageOne | Formerly Pitney Bowes Software & Data, acquired by Syncsort in December 2019, which then rebranded as Precisely | Estates already on Pitney Bowes tools; combination with data-quality software | Product roadmap investment relative to the vendor's data business |
| Messagepoint | Named a Leader in the Aspire CCM Technology Vendors Leaderboard for the seventh consecutive year in 2025 | Content management and template rationalisation, often layered over existing composition engines | Whether you need a content layer or a full replacement engine |
| Doxee | Founded in 2001 in Modena, Italy; listed on Euronext Growth Milan | Italian market, cloud delivery, digital statements and dematerialisation | Scale references comparable to your volumes outside Italy |
| Adobe Experience Manager Forms | Part of Adobe Experience Cloud | Banks already running AEM for web and forms | Batch composition depth compared with specialist engines |
Seven Criteria That Actually Separate CCM Platforms
1. Composition power and batch performance
2. Who authors templates — specialists or the business
3. Deployment model, data residency and the DORA exit
- In which countries are our data, our templates and our archive stored and processed, including backups and support access?
- Which subcontractors and cloud providers sit underneath, and how are we notified before they change?
- Can we export every template, content asset and archived document in documented, non-proprietary formats, and has any customer actually done it?
- What are your incident notification times, and do they fit our own regulatory reporting clocks?
- Will you accept audit and inspection rights for us and our supervisor, and support an exit transition period?
4. Accessible and plain-language output
5. Languages, scripts and right-to-left layout
6. Migration tooling and the partner ecosystem
7. Commercial model and total cost
Scoring the Shortlist
| Criterion | Example weight | What a 5 out of 5 looks like | Evidence to demand |
|---|---|---|---|
| Composition and batch performance | 20% | Your hardest statement reproduced; peak volume inside the window with margin | Timed run on your data in the proof of concept |
| Authoring model | 15% | Regulatory text change made by a business user in minutes, with approval trail | Live exercise by your compliance officer |
| Deployment, residency and DORA exit | 15% | EU residency, named subcontractors, Article 30 terms accepted, documented export | Draft contract and export sample |
| Accessible and plain-language output | 15% | Tagged PDF and HTML from one template, passing assistive-technology testing | Your statement tested by an assistive-technology user |
| Languages and RTL | 10% | Bilingual Arabic–English document correct in print, PDF and HTML | Bilingual document in the proof of concept |
| Migration tooling and partners | 15% | Converter for your source platform; partner with a reference of your size | Reference call with a migrated customer |
| Five-year commercial model | 10% | Predictable cost under your channel-shift forecast; fair exit terms | Priced five-year model on your volumes |
The Proof of Concept That Decides
- Pick ten documents from your inventory: your most complex statement, a credit agreement or policy schedule, an interactive letter, a regulatory notice, a bilingual document if relevant, and five ugly ones the business complains about.
- Provide real, anonymised data extracts in the formats your systems produce today, not cleaned files built for the test.
- Define pass criteria in advance: visual fidelity against the current output, accessibility test results, batch timing, the authoring exercise, export of everything at the end.
- Make your own people do the authoring change on day one and again at the end, so you measure the learning curve, not the vendor's consultants.
- Score against the matrix the same week, with operations, compliance, IT and procurement in the room, before the commercial negotiation starts.
“A CCM vendor that will not let your own people touch the templates during the proof of concept is showing you exactly how the next ten years will go.”
— Michele Cimmino · Fractional CTO & Digital Transformation Advisor
When Not to Buy a Full CCM Suite
Migration: Where the Real Risk Sits
- Undocumented logic in templates: calculations and conditions nobody remembers, discovered when the new output differs from the old. Automated visual and data comparison of old versus new output, document by document, is the only reliable control.
- Archive continuity: years of sent documents must stay retrievable for complaints and audits, under their original retention periods, after the old platform is gone.
- Print and mailroom dependencies: print-stream formats, inserter barcodes and postal sorting that the new platform must reproduce exactly.
- Parallel-run cost: two licences, two skill sets and two operations teams for longer than planned. Put the decommissioning date in the business case and in the contract.
- Content governance: without an owner for clauses and legal text, the new platform recreates the old sprawl within two years.
Mistakes Worth Avoiding
- Running the RFP before the inventory. Vendors size the migration on your template count; if you do not know it, they will guess low and bill high later.
- Judging on the demo. Every platform looks good on its own sample documents. Only your statement on your data is evidence.
- Migrating every template. Retire and consolidate first; migration cost scales with what you carry over.
- Treating accessibility as a later phase. Templates redesigned once for the new platform should be redesigned accessible and in plain language at the same time, not twice.
- Signing without a tested exit. DORA asks for it, and it is the only leverage you keep after go-live.
- Buying AI features before fixing content. Generative authoring on top of thousands of inconsistent clauses produces faster inconsistency. If you do add AI, govern it like any other system, as I describe in the AI governance framework for mid-market companies.
Your First 90 Days
- Weeks 1–2 — appoint and frame. One accountable owner for customer communications, a steering group with operations, compliance, IT, procurement and the mailroom, and the regulatory drivers written down.
- Weeks 2–6 — build the template inventory, with volumes, channels, data sources, embedded logic, regulatory exposure and last-used dates. Mark retire, consolidate and migrate.
- Weeks 6–7 — fix the criteria and weights in a scoring matrix signed off by the steering group, and pick the ten proof-of-concept documents.
- Weeks 7–9 — long list to shortlist: RFP to five or six vendors with the DORA and accessibility questions included; down-select to two or three on written answers and reference calls.
- Weeks 9–13 — paid proof of concept in parallel, scored the same week it ends, followed by a five-year commercial model and contract negotiation that includes the Article 30 terms and the exit plan.
The Bottom Line
If you want an independent second opinion