EU fintech (NDA): 7-stage KYC onboarding for individuals and businesses on Creatio
A licensed EU fintech needed every applicant — private or corporate — to pass registration, verification, a KYC questionnaire and an AML decision with a full audit trail. SYNTECH built separate REST API onboarding flows for individuals and legal entities on Creatio, with reference data services and duplicate protection.
About the client
The client provides accounts, payment cards and payment services to individuals and businesses in the EU. As a regulated institution it must collect and verify customer data before opening an account and keep every step traceable. The company name is not disclosed under NDA.
The challenge
- ✕Onboarding is regulated: identity, contacts, tax residence, source of income and compliance flags must be collected in a strict order.
- ✕The customer-facing web onboarding and the back office had to share one source of truth.
- ✕Duplicate applications and incomplete data had to be caught automatically.
- ✕Individuals and legal entities follow different rules.
The solution
Seven-stage onboarding API
- •1) Registration — a lead is created with a unique onboarding ID; duplicates are rejected.
- •2) Phone verification and 3) email verification.
- •4) Identity verification result from the verification provider.
- •5) KYC questionnaire submission.
- •6) Start of compliance form checking.
- •7) Final AML status — accepted or declined.
Separate flows for individuals and legal entities
- •Dedicated Creatio web services for private and corporate applicants with their own validation rules.
- •Structured error responses for validation errors, duplicates and unknown IDs.
KYC data model
- •Personal and document data, citizenship, residence and tax residence, taxpayer ID.
- •PEP and US-person flags, purpose of account opening, card order, sources of income, expected monthly income, expenses and turnover.
Reference data services
- •A lookup API exposes Creatio dictionaries — countries, document types, income ranges, onboarding stages — so the web form and CRM always use the same values.
Results
- Every application is traceable stage by stage in one system.
- Duplicate applications and missing required data are rejected at the API level.
- Compliance officers work with structured KYC data instead of documents scattered across channels.
- The same architecture serves both private and corporate onboarding.
Technologies
- Creatio
- C# REST web services
- Lookup API
- Business processes
- Validation and duplicate control