Regulatory & Sovereignty Context in FinTech
Financial software lives under audit: who moved what, who approved it, and where the data sat while it happened. KERNSTACK’s contribution is structural rather than certificational — the project runs in one European zone on infrastructure the operator can name, every change arrives through a reviewed plan, and the trails auditors sample (payment events, approval decisions, export records) are tables in the same project instead of reconstructions across vendors. Statutory retention is expressed as fields and sweeps, so “kept for the required years, deletable after” is enforced by a scheduled job with a proof log.
The event trail is the product’s memory
Fintech systems are judged in their worst week: a disputed payout, a regulator’s sample, a partner’s reconciliation break. Products built on KERNSTACK store provider events raw before interpreting them — the payment webhook as received, keyed by the provider’s event id — so derived states like “paid” or “settled” can always be re-derived and defended. Before-and-after audit entries on money-moving tables turn “where did this balance come from” into an ordered read.
Approvals with names, not mailboxes
Payouts, refunds, and limit changes pause at human workflow steps that record the approver, the moment, and the record as shown. Segregation of duties is expressed in the workflow declaration — the person who prepared a payout is never the step that releases it — and the whole rule set is reviewed as code when it changes, which is exactly the review a compliance officer wants to read.
- Payment events stored raw and idempotent by provider event id — reconciliation is a derivation, not an investigation
- Money movement always ends at a named human step; machines prepare, people release
- Exports for auditors are reproducible jobs with checksum manifests, not one-off scripts
Domain Entities & Workflows Modeled in stack.json
Teams building for FinTech on the Software Lifecycle Cloud model their core domain entities directly in Serverless Tables, index them in Full-Text and Vector Search, and coordinate multi-actor approvals with Workflows:
- Core Data Entities: accounts · ledger entries · payment events · supplier invoices · approval records
- Typical Automated Workflows: KYC document review · payout approval · invoice approval · statement export · period close
Frequently asked questions
No platform makes you compliant; obligations stay yours. What KERNSTACK removes is structural friction: one European zone to name in your records, plan-reviewed changes, approval trails with names and timestamps, retention enforced by jobs, and exports an auditor can re-run. Those are the artefacts compliance work is actually made of.
Card handling stays with your payment provider; the project ingests its events raw and owns everything around the money — orders, approvals, ledgers, disputes. That boundary keeps PCI scope with the provider while your evidence trail stays complete.
As a scheduled workflow: workers aggregate the period’s events into balances and drafts, and finance reviews them at a human step before anything posts onward. Pricing and aggregation rules are reviewed code, so a period can be re-derived under the rules that governed it.
Related capabilities, architectures, and comparisons
Ship your stack on the Software Lifecycle Cloud.
Closed preview on dedicated European infrastructure. Bring a repository or start from a blueprint.