VTB — Mobile Bank for Business

Experience with a major fintech player: multiple A2BS solutions inside VTB’s mobile business banking app.

The VTB Business Platform is a modern mobile solution for SMEs: online statements, payment approvals, advanced analytics, service integrations, personalization, and in-app support.

хочу стать вашим клиентом

▸ Industry: Fintech, Banking Services
▸ Product: Mobile business banking app (iOS/Android) for remote account and transaction management
▸ Client Scale: VTB — Russia’s second-largest bank (Top 2)
▸ Our Contribution: Development and delivery of several modules and integrations within the mobile bank release
▸ Project Features: High-level security, numerous external integrations, complex approval and compliance workflows

Challenge

Our Solution

Enhance VTB’s mobile business bank with new modules and integrations while maintaining seamless UX and meeting strict banking requirements for security, resilience, and SLA. The project required passing multiple approval layers across product, IT, security, and legal teams.

We joined the client’s project teams and delivered several modules that became part of the bank’s product ecosystem. Architecturally, we implemented domain isolation, clear layer interfaces, flexible feature flags, and event tracing for audit purposes.

Architecture & Key Modules

Architectural Principles

▸ BFF (Backend-for-Frontend): unified entry point for the mobile client, data adaptation per screen, reduced network calls
▸ Integration Layer: connections with core banking systems and external services (payment gateways, customer profiles, product catalogs, notifications)

▸ Role-based Access & Subscriptions: differentiated access by organizational roles, multi-step payment approvals
▸ Observability & Security: transaction tracing, encryption, security policies, operation audits, API protection (mTLS/JWT/idempotency)

Financial Analytics Module

Objective: Give business owners a real-time “control panel” to track money, see trends, and make decisions on the go.

User Scenarios:
▸ Morning snapshot: within 10–15 seconds, users see balances, turnovers, deviations, and top events for yesterday/week
▸ “What happened?”: drill-down from chart to document/counterparty/category details
▸“What’s next?”: quick cash gap forecast and recommendations (reschedule payment, remind debtor, overdraft/deposit options)

Implemented Features:
▸ Data Consolidation: aggregation of transactions, balances, statements, and fees by accounts, companies, and time periods (daily/weekly/monthly/quarterly)
▸ Dashboards & KPIs: turnovers, inflows/outflows, average check, payment structures by category, top counterparties, recurring charges
▸ Forecasts & Seasonality: short-term cash flow predictions, peak load detection, seasonal patterns
▸ Anomaly Detection: alerts for unusual operations, counterparties, expense spikes, deviations from plan
▸ Quick Actions: shortcuts (“create payment,” “issue invoice,” “reconcile with counterparty”) directly from dashboards
▸ Performance: incremental calculations, materialized views, caching for core widgets

Legal Assistance Module

Objective: Integrate a legal support service directly into the mobile bank: consultations, contract reviews, and document templates — without leaving the app.

User Scenarios:
▸ “Upload contract and get edits by end of day”
▸“Urgent legal advice on clause 5.3”
▸ “Generate POA in 3 minutes and send for signature”

Implemented Features:
▸ Legal Support Desk: create requests (questions/contract review/document preparation), set priorities, track statuses and deadlines
▸ Template Library: up-to-date samples (supply contracts, NDAs, POAs, etc.) with risk notes and mandatory clauses
▸ Review & Redlining: secure contract upload, annotated edits, iteration history, multi-round approvals
▸ Communication: secure chat with lawyer, file attachments, reminders, SLA-driven response times
▸ Integrations: SSO via bank account, e-signature/digital signature, counterparty card link, client’s internal directory
▸ Document Builders: semi-automated generation via questionnaires, export to PDF/Docx

A2BS Technical Deliverables

A2BS SignKit — Secure Signature & Offline Queue SDK

▸ Wrapper for Secure Enclave/Android Keystore for local key storage and confirmations
▸ Offline mode: queueing payments/documents with idempotent keys and retries
▸ Risk gates: conditional flows (limits, geo, time, operation type) before server-side authorization
▸ Reduced failures and retries via deterministic redelivery

A2BS BFF/Gateway — Security & Adaptation Layer for Mobile Client

▸ Unified entry point aggregating responses from dozens of internal systems
▸ Security policies: mTLS, JWT/rotating keys, rate limiting, circuit breaker, replay protection
▸ Contract versioning & feature flags for staged rollouts (canary releases, A/B testing)
▸ Observability: end-to-end tracing, log/metric correlation at user request level

Integrations & Security

▸ Integration buses for payments, statements, client profiles, products, notifications
▸ Strict non-functional requirements: encryption, audit, logging, monitoring, backups, load testing
▸ Compliance with bank’s internal security policies and release management procedures

Process & Governance

▸ Multi-step approvals: product → architecture → security/compliance → legal → release readiness
▸ Regular demos, change control, formal DoD criteria, acceptance scenarios
▸ Parallel team workflows, integration testbeds, and regressions before release

Before / After

Before: functional requests required separate refinements and manual synchronization across systems.

After: new modules and integrations reduced friction, improved visibility of operations, and enabled direct access to key functions within the app. Users gained a more seamless business management experience.

Business Impact

▸ Strengthened remote banking scenarios within one app (account view, statements, operations, services, support)
▸ Unified access logic and enhanced login security for business users
▸ Faster feature delivery through modular architecture and standardized integrations

Client Feedback

“The A2BS team smoothly integrated into our release flow: numerous integrations, strict security, multiple approval rounds — all completed on time. We received high-quality modules that fit seamlessly into VTB’s mobile business banking app.”