Vendor integrations within the bank platform — services that individual modules call at
runtime. This page tracks which integrations are currently stubbed or mocked, and what
is required to go live with a real vendor.
Scope: runtime integrations owned by platform modules. Does not cover rollout
integrations (identity providers, ERP, regulatory portals) — see
External system integrations.
Status legend
| Status |
Meaning |
| STUB |
Abstract interface exists with a non-functional stub; vendor contract and real implementation required before production go-live |
| PARTIAL |
Basic real integration exists (e.g., sandbox/test environment) but not production-grade |
| LIVE |
Real vendor integration deployed and operating in production |
| DEFERRED |
Known need; no stub yet; integration required before module can be production-ready |
| REAL |
Using an actual managed service (AWS, Snowflake, etc.); not a vendor stub — no action required |
Electronic identity verification (eIDV)
| Integration |
Module |
Status |
Vendor candidates |
Notes |
| eIDV document verification |
MOD-009 |
STUB |
GreenID (AU), Cloudcheck (NZ), Onfido, Jumio |
Verifies government-issued ID documents against authoritative registries. Interface abstracted; real provider wired at contract |
| Biometrics / liveness check |
MOD-009 |
STUB |
iProov, Onfido, FaceTec |
Liveness detection to accompany document verification for Tier 2+ customers |
| NZ Births Deaths and Marriages (BDM) |
MOD-009 |
DEFERRED |
DIA — NZ Government |
Direct registry lookup for NZ birth certificate verification |
| Australian Document Verification Service (DVS) |
MOD-009 |
DEFERRED |
DVS Gateway — Home Affairs |
Required for AU customer identity verification |
Sanctions and watchlist screening
| Integration |
Module |
Status |
Vendor candidates |
Notes |
| Global sanctions screening |
MOD-015 |
STUB |
Refinitiv World-Check, LexisNexis Bridger, Dow Jones Risk & Compliance |
Real-time and batch screening against UN, OFAC, EU, RBNZ, AUSTRAC lists. Stub returns CLEAR for all in dev/uat |
| PEP (politically exposed persons) screening |
MOD-015 |
STUB |
Same vendors as sanctions |
Often bundled with sanctions in vendor contracts |
| Adverse media screening |
MOD-015 |
DEFERRED |
Dow Jones, Refinitiv |
Required for enhanced due diligence (CDD tier 3+) |
SD03 — AML Monitoring
| Integration |
Module |
Status |
Vendor candidates |
Notes |
| AML typology data feeds |
MOD-016 |
REAL |
Internal / AUSTRAC FinTell |
Typology rules are internally authored; no external runtime feed required |
| AUSTRAC IFTI/CMIR submission endpoint |
MOD-019 |
DEFERRED |
AUSTRAC — government |
Submission of international funds transfer reports (AU) and cross-border currency reports. API endpoint not yet wired; regulatory reporting filed manually in v1 |
| RBNZ AML/CFT reporting |
MOD-019 |
DEFERRED |
RBNZ — government |
NZ annual AML programme certification and suspicious transaction reports |
SD04 — Payments
Payment rails
| Integration |
Module |
Status |
Notes |
| NPP (New Payments Platform) — PayTo / Osko |
MOD-120 |
STUB |
Australia real-time payments via NPP Australia. Gateway abstracted; real connectivity via an NPPA-certified gateway (e.g., Cuscal, Assembly Payments) at go-live |
| RTGS / RITS (Reserve Bank) |
MOD-119 |
STUB |
High-value AU settlements via RBA RITS. Requires RBA bilateral agreement and SWIFT connectivity |
| SWIFT interbank messaging |
MOD-119 |
STUB |
Cross-border and correspondent bank payments. Requires SWIFT membership (BIC code, Alliance gateway or cloud equivalent) |
| NZ Interbank Settlement (ESAS / SBI) |
MOD-119 |
STUB |
NZ high-value settlements via RBNZ Exchange Settlement Account System |
| Direct Credit / Direct Debit (BECS AU) |
MOD-122 |
STUB |
AU bulk electronic clearing. Requires APCA / Australian Banking Association membership and clearing agent |
| Direct Credit / Direct Debit (BECS NZ) |
MOD-122 |
STUB |
NZ bulk electronic clearing. Requires Payments NZ membership and clearing agent |
| BPay biller registration and payment |
MOD-138 |
STUB |
AU BPay scheme. Requires BPay Group membership and BPay gateway connectivity |
| EFTPOS NZ |
MOD-124 |
DEFERRED |
NZ domestic card acquiring network for POS transactions |
Card services
| Integration |
Module |
Status |
Vendor candidates |
Notes |
| Card processor (debit authorisation) |
MOD-124 |
STUB |
Visa DPS, Mastercard CPS, i2c, Galileo |
CardProcessorClient abstract interface with VisaDebitStub. Real processor wired at procurement. Processes card authorisations, reversals, and settlement files |
| Card bureau (personalisation + manufacturing) |
MOD-124 |
STUB |
CPI Card Group, Valid Systems, IDEMIA |
CardBureauClient abstract interface with BureauStub. Handles card personalisation file submission, print, and fulfillment. Bureau webhook callback is a separate internet-facing endpoint |
| Processor HSM (PIN management) |
MOD-124 |
STUB |
Via card processor — no separate contract |
PinManagementClient stub. PIN blocks are constructed by MOD-124 in ISO 9564 format and forwarded opaquely to the processor's HSM. Not a bank-owned HSM |
| Visa Token Service (VTS) |
MOD-124 |
STUB |
Visa — requires network membership |
NullTokenisationStub. Enables push provisioning to Apple Pay / Google Pay. Real integration requires Visa Token Service agreement and TSYS/Visa certification process |
| Mastercard Digital Enablement Service (MDES) |
MOD-124 |
STUB |
Mastercard — requires network membership |
As above for Mastercard. Single TokenisationClient interface covers both schemes |
| BIN sponsorship |
MOD-124 |
DEFERRED |
Sponsor bank (NZ and AU separately) |
The bank requires a sponsor BIN from an existing issuing bank for each jurisdiction. SSM paths: /bank/{stage}/mod-124/sponsor-bin-range/nz and /au. Must be negotiated before card issuance can go live |
| 3DS authentication (3-D Secure) |
MOD-124 |
DEFERRED |
Modirum, Arcot / CA Technologies |
Card-not-present fraud prevention for e-commerce. Required before online card transactions are enabled |
SD05 — Credit
| Integration |
Module |
Status |
Vendor candidates |
Notes |
| Credit bureau — comprehensive credit reporting (CCR) |
MOD-028, MOD-030 |
STUB |
Equifax NZ, Equifax AU, illion (formerly Veda/Dun & Bradstreet) |
Credit score, repayment history, defaults, hardship flags. Abstracted via CreditBureauClient interface. Requires Comprehensive Credit Reporting membership in both jurisdictions |
| Affordability data (Open Banking read) |
MOD-027, MOD-084 |
PARTIAL |
Consumer Data Right (CDR) — AU; open banking — NZ |
CDR gateway for AU income and expense verification. NZ equivalent is bank statement analysis. Partially implemented via MOD-084 (inbound CDR retrieval) |
| Property valuation / collateral |
MOD-027 |
DEFERRED |
CoreLogic, Valocity |
Automated valuation model for mortgage affordability. Required for secured lending products |
| Integration |
Module |
Status |
Vendor candidates |
Notes |
| Market rates / FX data feed |
MOD-085 |
STUB |
Refinitiv (LSEG), Bloomberg, ICE |
Real-time FX rates, interbank rates, interest rate benchmarks (BKBM NZ, BBSW AU, SOFR). MOD-085 write-back Lambda ingests these into Snowflake. Stub returns synthetic rates |
| Interest rate benchmarks |
MOD-035 |
DEFERRED |
Refinitiv, Bloomberg |
BKBM (NZ) and BBSW (AU) daily fixings for IRRBB calculations. Bundled with market data feed above in practice |
| Integration |
Module |
Status |
Notes |
| Snowflake |
MOD-102, MOD-176 |
REAL |
Contracted. Enterprise+ tier confirmed (ADR-049). Cortex Analyst enabled. No stub required |
| AWS services |
MOD-104 |
REAL |
Contracted. Lambda, EventBridge, DynamoDB, S3, KMS, Secrets Manager, CloudWatch, API Gateway. No stub required |
SD08 — App / Notifications
| Integration |
Module |
Status |
Vendor candidates |
Notes |
| SMS gateway |
MOD-063 |
STUB |
AWS SNS SMS, Twilio, MessageBird |
Transactional SMS (OTP, payment alerts, card events). Abstract SmsGatewayClient interface; stub logs to CloudWatch in dev/uat |
| Push notifications (APNS / FCM) |
MOD-063 |
STUB |
AWS SNS push, Firebase Cloud Messaging, Airship |
iOS (APNS) and Android (FCM) push for real-time account and card alerts |
| Email provider |
MOD-063 |
REAL |
AWS SES |
Email delivery via SES. No additional vendor contract required — SES is in the AWS account |
Summary — stubs requiring vendor contracts before production
| Domain |
Integration |
Blocking for |
| SD02 |
eIDV document verification |
Customer onboarding (any product) |
| SD02 |
Biometrics / liveness |
CDD Tier 2+ customers |
| SD02 |
NZ BDM / AU DVS registry |
Regulatory KYC (RBNZ, APRA) |
| SD02 |
Sanctions screening |
All customer onboarding and payment initiation |
| SD04 |
NPP (PayTo / Osko) |
AU real-time payments |
| SD04 |
RTGS / RITS |
AU high-value settlement |
| SD04 |
SWIFT |
Cross-border / correspondent payments |
| SD04 |
NZ ESAS / SBI |
NZ high-value settlement |
| SD04 |
BECS AU + NZ |
Bulk Direct Credit / Direct Debit |
| SD04 |
BPay |
AU biller payments |
| SD04 |
Card processor |
Any physical card issuance |
| SD04 |
Card bureau |
Physical card manufacturing + dispatch |
| SD04 |
BIN sponsorship |
Physical card issuance (pre-req for processor) |
| SD04 |
VTS / MDES |
Apple Pay / Google Pay provisioning |
| SD05 |
Credit bureau (CCR) |
Any lending product |
| SD06 |
Market rates data feed |
FX, IRRBB, capital ratio live calculation |
| SD08 |
SMS gateway |
OTP, payment alerts, card events |
| SD08 |
Push notifications |
Mobile app real-time alerts |