Category: Use cases

  • Migrating a national card switch without a maintenance window

    The challenge

    A twelve-year-old switch was clearing every card transaction in the network and could not be taken offline. Every scheme mandate cycle was landing late, and the change queue had grown past what the team could clear in a year.

    What we delivered

    We ran the new switch in shadow against live traffic for eleven weeks, reconciled every difference to zero, then cut over per-BIN across a single night. No downtime was booked and no transaction was reprocessed.

    Disciplines

    • Advisory
    • Implementation
    • Run & govern
  • Putting certified card acceptance on merchants’ own phones

    The challenge

    Terminal cost was the single barrier keeping small merchants on cash. Hardware economics meant the processor could not profitably serve anyone below a monthly volume floor.

    What we delivered

    A SoftPOS acceptance app on standard Android, taken through scheme and PCI MPoC evaluation alongside build rather than after it. Onboarding moved from a scheduled engineer visit to a same-day download.

    Disciplines

    • Product engineering
    • Certification
    • Security
  • Reaching ISO 27001 without freezing the delivery roadmap

    The challenge

    Enterprise deals were stalling in security review. The team had good practice but no evidence trail, and an auditor-led programme would have consumed the engineering roadmap for two quarters.

    What we delivered

    Controls were mapped onto the tooling already in use, so evidence became a by-product of normal delivery instead of a parallel workstream. Certification landed inside a single quarter with the roadmap intact.

    Disciplines

    • GRC
    • Security
    • Advisory
  • Moving fraud review from next-morning batch to real time

    The challenge

    Fraud was reviewed the following morning from an overnight batch. By the time an analyst opened a case the funds had usually moved, and the rule set could not be changed without a release.

    What we delivered

    A streaming decision layer scores every authorisation inline, with the rule set owned by the fraud team rather than by engineering. Analysts now work a queue that is minutes old instead of a day old.

    Disciplines

    • Platform engineering
    • Data
    • Run & govern