Secure the software supply chain behind Westlaw, CoCounsel, and Reuters
Thomson Reuters' AI-first transformation depends on thousands of packages flowing through your pipelines every day. Cloudsmith gives platform teams a single, secure artifact layer.
How Cloudsmith Can Help Thomson Reuters
- Eliminate Artifactory maintenance toilFree your platform teams from patching servers and managing S3 backends. Cloudsmith is a fully managed, cloud-native SaaS – your engineers focus on building, not on keeping artifact infrastructure running.
- Standardize the AI software supply chainProxy, cache, and scan ML models from sources like Hugging Face. Enforce policy-as-code to block vulnerable or malicious assets before they reach your ModelOps pipelines.
- Standardize artifact workflows across TRReplace fragmented tooling with a single platform that supports containers, npm, PyPI, Maven, ML models, and internal binaries. One source of truth for every format, every team.
Built for platform engineering teams at Thomson Reuters' scale
Engineering teams across Thomson Reuters build and operate platforms that power some of the most trusted information systems in the world – Westlaw, CoCounsel, Reuters, and tax and accounting software used by professionals worldwide.
These systems depend on thousands of open-source and internal packages, distributed across global development teams. As your engineering organisation scales and your AI investment accelerates, the artifact layer becomes a critical control point.
Cloudsmith provides the artifact management and software supply chain security layer that sits between your CI/CD pipelines and your cloud infrastructure. It gives platform teams a way to standardise how dependencies, packages, containers, and models are stored, secured, and distributed – across every team and every environment.
- Reduce technical debt related to artifact infrastructure across Thomson Reuters
- Shift engineering focus from "keeping the lights on" to AI value creation
- Predictable cloud operating costs to support your global FinOps initiatives
Why Cloudsmith?
Genuinely cloud-native artifact management
You are migrating 500TB of data and 18,000 databases to the cloud. You shouldn't be managing the repositories that feed them. Cloudsmith aligns with your "engineering velocity" goals.
Delivering a golden path developer experience
Platform teams want developers to move fast with guardrails in place. Cloudsmith enables curated artifact repositories that give developers pre-approved open-source dependencies, internal libraries, and consistent build inputs across teams, with reliable artifact distribution worldwide. Developers get speed. Platform teams maintain control.
Securing the software supply chain
Legal and financial technology platforms require strong governance over dependencies. Cloudsmith lets organisations scan artifacts for vulnerabilities, enforce license policies, block malicious packages, maintain auditable records, and track provenance. Security becomes part of the delivery pipeline, not a downstream process.
Eliminating self-hosted artifact infrastructure
Many enterprises still rely on legacy artifact tools that require infrastructure management. Cloudsmith replaces this with a fully managed SaaS platform: global distribution, high-performance CDN delivery, multi-format support, and zero infrastructure overhead. Platform teams spend time enabling developers rather than maintaining servers.
Standardising artifact workflows across the company
Large enterprises often have fragmented artifact tooling across teams. Cloudsmith provides a single standardised platform supporting containers, Maven/Gradle, Python/npm, ML artifacts, and internal binaries. One consistent developer experience across the entire organisation.
Switch to Cloudsmith
Switch to Cloudsmith: modern artifact management for a tech-first company
Compare the operational burden of legacy, self-hosted repositories with a managed, cloud-native service built for the speed of the modern Thomson Reuters engineering team.
Your current solutionManual S3 prefixing and managing EC2 instances for internal artifact servers.
With CloudsmithA fully managed, serverless platform that scales with your global demand.
Your current solutionPotential throttling and latency during high-concurrency build bursts in CI/CD pipelines.
With CloudsmithA global Package Delivery Network that eliminates bottlenecks by caching assets at the edge for every region.
Your current solutionHidden costs in storage, egress, and engineering hours spent keeping the lights on.
With CloudsmithTransparent, usage-based pricing that supports your FinOps mandates and reduces technical debt.
Your current solutionSecurity risks and manual vetting processes for public AI models sourced from HuggingFace.
With CloudsmithAutomated proxying, caching, and scanning of ML models with policy-based quarantine.
Resources
Trusted by engineering teams in global media and information services
Organisations that depend on trusted information platforms use Cloudsmith to secure and distribute their software artifacts.
Let's talk Artifact Management
Hi team Thomson Reuters,
I've been following your transformation into a world-class technology company, particularly Matt Dimich's focus on reducing technical debt to drive engineering velocity. It’s an inspiring shift, but I imagine that managing legacy artifact servers might still be a significant source of "toil" for your platform teams. At Cloudsmith, we help companies like yours take the heavy lifting out of the software supply chain. We built the only artifact platform that is genuinely cloud-native—no servers to patch, no S3 buckets to manage, and no scaling limits to hit.
Whether it's standardizing your TR-AWS CDK library or securing your Hugging Face models for CoCounsel, we'd love to show you how we can help your engineers stop spending their time "keeping the lights on" and start shipping the future of professional-grade AI.
Let's chat about how we can help you move faster.
I've been following your transformation into a world-class technology company, particularly Matt Dimich's focus on reducing technical debt to drive engineering velocity. It’s an inspiring shift, but I imagine that managing legacy artifact servers might still be a significant source of "toil" for your platform teams. At Cloudsmith, we help companies like yours take the heavy lifting out of the software supply chain. We built the only artifact platform that is genuinely cloud-native—no servers to patch, no S3 buckets to manage, and no scaling limits to hit.
Whether it's standardizing your TR-AWS CDK library or securing your Hugging Face models for CoCounsel, we'd love to show you how we can help your engineers stop spending their time "keeping the lights on" and start shipping the future of professional-grade AI.
Let's chat about how we can help you move faster.