A regional financial institution focused on consumer banking and credit cards set out to accelerate the digitization of its key transactional processes. The goal: enable secure self-service flows for its card customers — balance transfers, express transfers, and transfers to other banks — with a simple experience and parameterization wired directly into the banking core. Andes Development designed and built a web platform with a modular architecture on Laravel that models each flow as a configurable entity, delivering two end-to-end flows in just six weeks.
// The challenge
The bank needed to enable transactional self-service without giving up control, security, or brand consistency. The key challenges were:
- Complete Self-Service Flows Balance transfers, express transfers, and transfers to other banks — including immediate withdrawal to savings accounts — all from the customer experience.
- A Dual Requirement A simple user experience on the outside, and on the inside an application capable of creating and adjusting flows dynamically, with strict parameterization tied to the banking core.
- Corporate Security Standards Compliance with the financial group's security guidelines and corporate UX/UI standards: brute-force attack mitigation, cookie policies, and detailed step-by-step telemetry.
- Tight Budget and Timeline Early value delivery with room to extend later, on internal infrastructure (Red Hat) and a simple, maintainable DevOps pipeline. This demanded a modular, governed design that would avoid technical debt and ensure functional compliance.
// The technology solution
Andes Development designed a mixed, modular architecture that models flows as configurable entities, letting the bank administer and evolve them from the CMS without deep rewrites — while preserving the mandatory dependencies and parameterization the core requires to minimize operational errors.
- A Configurable Flow Model Four abstractions make up the platform: Products (group what the customer can manage, such as cards), Blueprints (each flow within a product), Nodes (the sequential steps of each blueprint), and Components (visual and functional pieces — calculators, core calls, validations — embedded in nodes). Every real execution is recorded as an Artifact with all of its step-by-step data.
- A Modern, Robust Stack A Laravel 12 backend, a PostgreSQL 18 database, a Filament admin panel, and a Vue frontend, served with Nginx on on-premise Red Hat.
- A CMS with Access Governance Administration restricted by IP and ranges, with MFA and passkeys for administrator authentication.
- Security by Design reCAPTCHA integration against brute-force attacks, authentication encryption compliant with the group's corporate standards, and CSP compliance (nonce, with
unsafe-inlinemitigated) to pass banking security evaluations. - Telemetry and Measurement A tagging and event system traces every step of the flow, enabling conversion analysis and node-by-node optimization of the funnel.
- Brand Consistency and Reuse A UI aligned with the bank's corporate transactional design, a cookie banner per its policies, and reuse of existing modules (such as the digital card) to speed delivery and standardize components.
- Infrastructure and DevOps Installation of the database, Nginx, and application on Red Hat, with a simple deployment pipeline from Bitbucket for fast, controlled updates.
// Results and key wins
Despite the tight budget and timeline, the project delivered critical value early and left the bank with a scalable, self-managed platform:
-
6 Weeks
Two critical end-to-end flows (backend and frontend) in production, enabling balance transfers and transfers with immediate withdrawal. -
100% Configurable
The bank creates and adjusts flows — blueprints, nodes, and components — directly from Filament, under controlled business rules and dependencies. -
Bank-Grade Security
Access restricted by IP, MFA and passkeys, reCAPTCHA against brute force, and CSP compliance, aimed at the group's security evaluations.
// Conclusion
The dynamic, secure, and manageable flow platform positions the institution to scale its self-service capabilities, add new use cases, and maintain corporate security and experience standards. The modular architecture turns every new flow into a configuration rather than a new build: the bank gains autonomy, step-by-step funnel measurement, and brand consistency — accelerating its digital banking roadmap without tying itself to rewrites or outside vendors.