mambu technical overview

19
Technical, Architecture & Security Overview www.mambu.com [email protected]

Upload: eugene-danilkis

Post on 16-Jun-2015

1.528 views

Category:

Technology


49 download

DESCRIPTION

A look into the architecture, security, scalability of Mambu - a Software as a Service (SaaS) application for financial institutions in emerging markets. Technology to enable microfinance!

TRANSCRIPT

Page 1: Mambu Technical Overview

Technical, Architecture & Security Overview

www.mambu.com [email protected]

Page 2: Mambu Technical Overview

“Every year, our industry spends billions on IT projects and proprietary platforms.

We all face the same challenges: obsolete software, high integration costs, complex IT systems”

Financial ServicesTelecoms

GovernmentTrade

0% 2% 4% 6% 8%

Percent of bank revenue spent on IT

Page 3: Mambu Technical Overview

‣ SME Loans ‣ Consumer Loans ‣ Deposit & Current Accounts ‣Overdraft Accounts ‣ Savings Accounts

Design, Launch and Service

Manage

‣ Customer Relationships ‣Workflows & Tasks ‣ Documents & Files ‣ Transactions & Audits ‣ Reporting ‣ Accounting

Core Banking Functionality: Flexible, Agile & Simple

Page 4: Mambu Technical Overview

‣ No Hardware Maintenance ‣ No Software Upgrades ‣ No Database Maintenance ‣ No Servers to Manage ‣ 99.95+% Uptime

Zero Infrastructure

Enterprise-Grade Security

‣Global Data Redundancy ‣Off-Server Nightly Backups ‣ 30-day Transaction Rollbacks ‣ HTTPS SSL Encryption ‣ Two-Factor User Authentication

Natively Cloud Platform: Add Value On a Scalable Infrastructure

‣ React to Market Without IT ‣ Native Android Application ‣Work from Anywhere ‣ Limitless scalability ‣ REST APIs & Apps for Integrations

Business Operations Empowerment

Always Latest Technology

‣ Regular Release Upgrades ‣ Automated Software Upgrades ‣ Latest Hardware Benefits ‣ Always Up to Date Software ‣ Always Up to Date Technology

Page 5: Mambu Technical Overview

Embrace Digital: Innovate on Channels & Services

Channel innovation will be a defining feature of the future. New technology means banks are likely to pursue significant channel innovations to reach SMEs.

‣ Automate business workflows ‣ Automate credit decisioning ‣ Automate client communications ‣ Integrate to your online presence ‣ Integrate to cards and payment channels ‣ Integrate to 3rd party applications

Leverage Simple APIs Rapidly Innovate and Integrate

‣ No consultants or SIs required ‣ No proprietary standards ‣ Deploy in weeks, not months ‣ Innovate quickly and cheaply ‣ Experiment at low cost ‣ Launch mobile & tablet apps

In just days or weeks, at minimal cost, our clients have rapidly had integrations into

developer.mambu.com

Page 6: Mambu Technical Overview

Flexible Cloud Banking PlatformCustom Built In-House Solutions

Rapid time to market Fraction of total cost

Cheap and fast integrations User-friendly and intuitive

Flexible products & workflows No infrastructure to manage

Commercial Off the ShelfCore Banking Software

Time for Change: Evolution of Banking Technology

“We expect cloud computing to become more popular among the large banks, mirroring their smaller counterparts that are already making Software as a Service investments.”

Dominic Trotta, head of the financial services business at SAP

Page 7: Mambu Technical Overview

Perc

ent o

r Rev

enue

Spe

nt o

n IT

System Improvements

Software Maintenance & Upgrades

Every year, our industry spends billions on IT projects and proprietary platforms. We all face the same challenges: obsolete software, high integration costs, complex IT systems

Disrupt Incumbents: Capture Markets With Speed & Cost Advantages

Traditional Banks With In-House Solutions Winning Modern Banks

Infrastructure & Data Centres

Spending Double-Digit of Revenue on Keeping the Lights On Leveraging Cloud Technology Innovating on Channels Innovating on Products

Reduces Infrastructure Costs Increasing Channel Innovations

Digital Banking Innovation Mobile BankingOnline BankingCredit ScoringNew ProductsNew Services

Cloud-Based Banking Platforms

Page 8: Mambu Technical Overview

System Architecture

Database Servers

Data Centre A Data Centre B

Real-Time Redundancy

Automatic Failover

Automated Load Scaling

Load Scaling

Application Servers

Low-Latency Transactional

User Access Channels

USERNAME-PASSWORD AUTHENTICATION TWO-FACTOR SMS USER AUTHENTICATION

USER-BASED PERMISSION

Fully Managed Elastic Load Balancing Multiple Locations Automated CPU & Latency Monitoring Each Up to 68GB Memory & 8 CPU Cores Linux AMI

Software & Hardware Independent Desktop Smartphone Tablet APIs

256-Bit HTTPS SSL Encryption Compressed Binary Data for Bandwidth Optimization

Fully Managed MySQL or Oracle Automated Backups Automated Logging DB Snapshotting 30-Day Transaction-Based Rollback Each Up to 68GB Memory & 8 CPU Cores Isolated & Secure

SSL

& TW

O-F

ACTO

R AC

CESS

AUT

HENT

ICAT

ION

Page 9: Mambu Technical Overview

Data Isolation & Security

Primary Server

Organization A Organization B Organization C

Organization D Organization E Your Database

Organization G Organization H Organization I

Complete Data Isolation & Security Independent Databases

Isolated Schemas Scalable Servers

Real-time Mirroring Multiple Physical Data Centres

Off-Server Nightly Backups 7-Days Rolling Backups

30-Day Transaction-Based Rollback Full Audit & Log Trails

Your Database Clone

Redundant Server

Data Storage

Nightly Compressed Backup

Real Time Mirror

99.9999999999% Reliability 99.99% Availability

7-Days Rolling Backup Files

Page 10: Mambu Technical Overview

Application Architecture

Data Abstraction Layer JDO

Business Logic ServicesJava

DatabaseMySQL

API DispatchHTTP Secured RPC Dispatch

Tom

cat S

erve

rDa

taba

se S

erve

r

Rest API

RPC Dispatch

Web Browser Mobile BrowserGoogle Web Toolkit Native Android App JSON

HTTP Secured Dispatch

End

clie

nt

Tran

sact

ion

Inte

grity

Secu

rity

& U

ser A

uthe

ntic

atio

n

Page 11: Mambu Technical Overview

Development Process

Agile Methodology Continuous Development

Continuous Testing 6-16 Week Release Cycles

Requirements Engineering Interface Design & Testing

Development & Unit Testing Code-Reviewing Development Team

Quality Assurance & Testing Team

4-12 weeks

Continuous Integration (CI) Testing Nightly Test Server Builds

Re-Testing Integration Testing Regression Testing Migration Testing

2-4 weeks

Documentation Optimization

Planning

Release on SandboxStart Release on Production

Re-Testing Smoke Test

Automated Regression

Endless Improvements New Features

Security Performance

Bug Fixes

Community-Driven Development Requirements Engineering Interface Design & Testing

Re-Testing Smoke Test

Automated Regression

Page 12: Mambu Technical Overview

Testing Stack

Client & Server Code Base

Unit Test Suite

Integration Test Suite & Off-Nominal Testing

Manual Regression & Scalability Testing

Automated Regression Testing

Junit

Junit

Java

Sillenium

Automatic Execution On Every

Code Commit

Execution Before Every Release

Ensuring High Quality Code With

Every Release

10101010101010101010

10101010101010101010

10101010101010101010

10101010101010101010

Page 13: Mambu Technical Overview

Server Monitoring

99.99%Over

Server UptimeSTATUS.MAMBU.COM

Latest Servers Status Always Live and Online

Monitoring Uptime Monitoring Response-Time

Internal Automated Notifications

Independent Monitoring By

* that’s less than 40 minutes down any month!

*

Page 14: Mambu Technical Overview

Security & Compliance

&Reports, Certifications, and other

Independent Attestations Physically Protected & Maintained Large-Scale

Data Centres

Your Data is Secure with the Amazon and Mambu Infrastructure

Discover AWS Security

Two-Factor Authentication for AWS Administration Access

ISO 27001 Risk Assessment & Confidentiality, Integrity & Transparency Assessment

PCI DSS Level 1 for Processing CC Information

SOC 1/SSAE 16/ISAE 3402 Audits for Appropriate Safeguards to Protect Customer Data & Operate Effectively

Page 15: Mambu Technical Overview

API Integration

Entering Repayments Approving LoansGetting GroupsCreating ClientsGetting Clients Creating LoansGetting Loans

Disbursing Loans Applying Fees

Making DepositsGet Savings Accounts

Make Savings Withdrawals Get GL Accounts & Balances

Get GL Journal Entries Get Users

Get BranchesCreate Tasks

Get Performance Indicators Get Organization Currency

...

Easy, Fast & Secure Extensibility Standard REST Protocol

Available Over HTTPs Basic Authentication

Open-Source Wrapper Libraries Usage & Performance Monitoring

Endless Use Cases Mobile Money Integration

POS Integration Agent Network Integration Credit Scoring Integration

ATM Integration Online Banking Integration

Regulatory Reporting Generation

Page 16: Mambu Technical Overview

Webhooks Integrations

Easy External Notifications Define Custom Triggers

Call Your URLs Send any System Data

JSON/XML/CSV or Other

Sample Use Cases Business Process Automation

Customer Notifications Internal Communications

Fraud Detection

Integrate. Automate. Scale.

Webhooks make Mambu the central nervous system of your online financial platform

Payment receivedAccount approved

Withdrawal made Payment past due

Page 17: Mambu Technical Overview

App Development

Powerful, Flexible & Easy Build Your Own Web Apps Any Language, Any Servers

Integrate Directly into Mambu’s Interface Leverage APIs & Webhooks

Pull and Push Contextual Data

Mambu Apps allow partners & developers a easy way to extend Mambu's capability and to add additional value to institutions  

Page 18: Mambu Technical Overview

Competitive Technological Landscape

CostSoftware license, middleware, hardware, networking, off-site databases,

information technology staff & upgrade team, software maintenance contracts, hardware upgrade & replacement

Subscription & internet access

Capabilities Limited to internal technical skill, available consultants or numerous support contracts

Full-featured solution that is easy to use, single point of contact with free support & upgrades

Scalability Purchasing excess hardware for rare peak times, future investments in hardware & upgrades Unlimited - always available anytime, anywhere

Security Self-managed including off-site databases, physical security, access controls, theft-prevention

Always cutting-edge including automated backups, redundant servers and secure data centres

Interoperability Limited to hardware, software & technical expertise. Unknown scaling, unknown costs Easy, online & future-proof using APIs

Risk System failure, physical servers theft, high-up front investment, inability and inflexibility of business, unpredictable costs

Low up front risk, low long term - predictable, stable and flexible solution

Internal Infrastructure