Home / Product engineering / A lender integration that holds its security

Case study · CRM software · Financial services integration · July 2024

A lender integration that holds its security

A portal integration between a CRM software company and a lending partner, with HMAC-signed API calls and polling built to the platform’s own architecture.

CRM software Client
Product engineering Practice
July 2024 Published

01 — The challenge

Where it started.

Joining a lender’s backends to the client’s platform without loosening either side’s security requirements, where the usual integration shortcuts were not acceptable.

The platform also needed polling-based integration on top, which it had no native way to express.

02 — What we built

The work itself.

HMAC-signed calls with CryptoJS. API calls signed under an HMAC configuration, so data in transit between the two parties stays encrypted and attributable.

Built to the platform, not around it. A bespoke polling mechanism written against the platform’s architecture, so retrieval and synchronisation run inside its framework rather than beside it.

03 — Results

What the client has now.

A portal the client’s own customers use to collaborate and reach resources in one place. Access to information and tools centralised rather than distributed across systems. Security, usability and headroom treated as the same requirement rather than traded off.

Looking for a similar solution? Contact us today!

Related work