A flexible application providing desired options

TIS is a German company that has been reimagining enterprise payments since 2010.

The company has developed a Cloud-based platform and services for corporate payments and cash management. They can also help companies ensure financial compliance and security. TIS’s goal is to streamline business payments and liquidity management operations.

Businesses of various sizes (including over 250 enterprises) from over 140 countries utilize TIS’s services in many aspects of their finances. The Cloud-based platform aids companies with cross-border or domestic payments, bank connectivity, cash forecasting, fraud prevention, payment compliance, and more.

The power of a comprehensive Cloud-based platform encapsulated in a versatile yet secure Flutter app.

The solution that we created was not only a direct response to what TIS’s clients wanted. The application was crafted by collecting end-user feedback at each stage. This means that the final product we delivered was in line with client expectations.

The application was developed using Flutter. This cross-platform technology makes the solution versatile by nature. This means the users can successfully run it on any mobile operating system they have. What is more, since Flutter is a widget-based framework, it allows for introducing modifications to the app more easily. This gives TIS the opportunity to quickly provide new features in the future.

The TIS Mobile Payments App is a financial solution containing sensitive data and playing a critical role in the business process. For this reason, the security of this application is of the utmost importance. To address this, the Deviniti Team applied the highest security standards. These were carefully checked against Open Web Application Security Project (OWASP). It is worth mentioning that we created certain security measures (e.g. Android secure storage) on our own, without using the aid of external libraries. The combined features of versatility and security enabled us to deliver a solution that TIS’s clientele wants and needs.

Due to the unique nature of this project, we didn’t use the typical Scrum methodology. Firstly, we didn’t test the solution within one sprint due to the extent of our cooperation. Secondly, certain Scrum ceremonies didn’t apply to this project. Thirdly, there were several changes in the project itself as well as the project team. Lastly, TIS was working on specific parts of the backend whose deliveries weren’t in line with the frontend parts delivered by Deviniti.

For the above reasons, we decided to apply the Kanban methodology. This methodology allowed us to keep track of tasks and fluently transition between specific activities. Kanban allowed us to effectively carry out our work without being affected by the team size or various levels of the complexity of changes.

The project was completed using the Kanban methodology. We started with kick-off workshops during which the client shared their functional requirements. Our Business Analyst was deeply involved with our client until we acquired the necessary business requirements. Since TIS had never had a mobile app before, we took the MVP route. The company’s initial goal was to receive an app with basic functionalities and develop them had the solution been accepted by the end-users.

The UX Designer prepared a clickable prototype using Adobe XD. That way, our client could experience the look and feel of its future application. We adopted the agile approach and started the development works along with creating the project documentation. There were some unexpected events such as API issues during the development stage. Nevertheless, we managed to resolve them successfully.

As a fintech solution, the app has several security measures. It offers tiered payment acceptance – payments accepted beforehand can still be rejected by users with higher-level authorizations. We also ensured connection security – the backend address isn’t encoded in the app but must be obtained via scanning a QR code. The app forces users to create unique PINs; it doesn’t allow repetitive or obvious number combinations. What’s more, the solution provides more logging options – via Touch ID or Face ID. Lastly, the app pushes users to change their PIN every 6 months as per SWIFT security guidelines.

One of the security highlights related to this project was having an external company carry out the app’s pentests. A third-party company hired by TIS conducted a consensual, simulated cyberattack on our application. Our security measures implemented into the solution managed to withstand the hacking attempts. The pentest company found only a few minor errors. They praised us for the work we did to secure the TIS Mobile Payments App.