Skip to main content

Logistics & Operations · KYC/KYB Compliance

Supply Chain Compliance Platform

We developed a centralized platform with a reusable digital passport to accelerate vendor onboarding for the oil and gas industry.

Supply Chain Compliance Platform
Focus
SAAS, MVP
Delivered
15 Nov 2024
Location
Australia

Outcome

Repeat vendor onboarding cut from 5 days to 10 minutes with cryptographically signed digital passports.

The Vision & Challenge

A B2B SaaS provider identified a critical gap in the oil and gas supply chain. Mid-tier operators relied on a patchwork of disconnected tools to verify and onboard new vendors, creating significant operational drag and compliance risk. The lack of a single, reliable system made it difficult to manage counterparties, particularly in jurisdictions with limited data transparency.

The core friction was the slow, manual, and repetitive nature of vendor due diligence. Each new engagement required a full KYC and KYB process from scratch, delaying projects and deferring revenue. Compliance officers spent their time chasing documents and reconciling data from different sources instead of focusing on high-level risk analysis. This fragmented approach was not only inefficient but also difficult to audit.

Robust Devs was engaged to architect and build a commercial SaaS product to solve this problem directly. We were tasked with creating a unified system that would centralize compliance workflows and introduce a new standard for vendor identity. The goal was to build a secure, multi-tenant platform that turns a complex cost center into a clear operational advantage for their clients.

The challenge

  • Data from third-party identity verification services was siloed, forcing compliance officers to manually piece together a vendor's risk profile.
  • The repetitive and manual vendor onboarding process was a major bottleneck, delaying time-to-revenue and consuming valuable resources.
  • The platform required a secure, auditable, and scalable infrastructure from day one to handle sensitive PII and support a multi-tenant SaaS model.

How we solved it

  • We built a unified API gateway to act as a single, secure wrapper for multiple compliance data providers, normalizing their outputs into a consistent format.
  • We designed a custom digital passport engine that issues cryptographically signed, reusable identity credentials to vendors, eliminating redundant verification cycles.
  • We provisioned all cloud infrastructure on AWS using Terraform and implemented a full CI/CD pipeline with GitHub Actions for automated, reliable blue-green deployments.
The same vendor onboarded twice, drawn to scale on a four-week axis. The first engagement runs full know-your-customer and know-your-business checks, aggregating several third-party identity providers through one API gateway that normalises their differing outputs into a single risk profile. At the end the vendor is issued a cryptographically signed, versioned digital passport. Every engagement after that presents the passport instead, which reduces a weeks-long process to minutes and removes the repeated verification that was deferring revenue.

Technologies

What we built it with

Front-end
  • ReactJS
  • TypeScript
  • JavaScript
  • HTML5
  • CSS3
Back-end
  • NodeJS
DevOps
  • AWS
  • Github CI
  • Docker
Database
  • Mongo DB
  • MySQL
Also used
  • Terraform
Project screen

Reusable Digital Passport Engine

At the core of the platform is an engine that creates, signs, and manages verifiable digital credentials for every entity in the supply chain. Once a vendor completes the verification process, they are issued a secure, versioned passport. This allows them to be onboarded for subsequent projects almost instantly, reducing what was once a 5-day process to 10 minutes.

Centralized Compliance Dashboard

We built a single interface for compliance officers to manage the entire verification lifecycle. The React-based dashboard includes case management tools, usage analytics, and a UBO graph visualizer to map complex ownership structures. It aggregates all data points into one auditable view, giving officers the clarity needed to make quick and defensible risk decisions.

How we built it

Turned a completed verification into a signed, reusable credential, so the second onboarding is a check rather than a repeat. Every operator was running the full KYC and KYB process from scratch for vendors who had already passed it elsewhere. The digital passport engine issues a cryptographically signed credential once a vendor is verified, and a subsequent onboarding validates the signature instead of chasing the documents again, which is the difference between five days and ten minutes. The data providers behind that verification sit behind a single API gateway that normalises their output, and the whole platform was provisioned on AWS with Terraform and shipped through GitHub Actions blue-green deployments, because a compliance product has to be auditable from the infrastructure up.

In the client's words

“Five days to onboard a vendor we had already checked. Now ten minutes, and the passport cannot be edited by the vendor.”

NDA - Signed

Have a project like this in mind?

Tell us what you're building. We'll show you how we'd approach it and what it would take to ship.