01 / 12
Case · Banking as a Service · 2026

Banking-as-a-Service in any ecosystem.

We integrated a white-label embedded-finance solution — payments, banking, compliance and a mobile app — with a payments company's infrastructure and the platforms of 15+ partner e-commerce businesses, customized for each one.

12 chapters · ~11 min
Scroll
The starting point

Every e-commerce platform wants its own bank.

Merchants sell through them and move money every day. Offering accounts, Pix and receivables under their own brand would be new revenue — but becoming a financial institution is far from their business.

Who

E-commerce platforms

Thousands of merchants sell through them and move money every day.

What they want

Accounts, Pix and receivables under their own brand

Revenue on every transaction, and merchants who handle everything without leaving the platform.

What stops them

Becoming a fintech isn't their business

Central Bank licenses, PCI certification, compliance and years of engineering.

The store-brand logic

Like a supermarket's own-brand products, made by a specialist manufacturer. The e-commerce platform puts its brand on it; our client, a payments company, supplies the regulated infrastructure; and ZBRA integrated an off-the-shelf white-label solution between the two, adapted to each platform.

Truly multi-tenant

One codebase, a different setup per partner.

On top of the same white-label solution, we implemented each partner's customizations: brand, dashboard layout and which modules its users see. The experience changes per partner — the business rules and the infrastructure stay the same.

Partner 1 · fashion e-commerce
PaymentsonReceivablesonChargebacksonCredithidden
Partner 2 · building-supplies e-commerce
PaymentsonReceivablesonChargebackshiddenCrediton
Layer 01 — White-label payments

Financial management inside the platform.

01

Sales, receivables and disputes in one place

Real-time sales, receivables management with advance simulation, chargeback control with live status, multi-user management and frictionless payment links.

Real timeMulti-userPayment links
Layer 02 — White-label banking

A full business account, without leaving the ecosystem.

02

Full Pix and per-channel limits

Real-time balance, statement and income reports. Configurable limits per channel, Pix (Brazil's instant payments) charges built into the sales flow, and two-factor authentication with trusted devices.

Pix2FAReal-time statement
Layer 03 — White-label portal

Compliance as self-service.

03

Frictionless verification and contracts

Individual and business account verification with document upload, creditor contract management, the receivables schedule and secure changes to registration data — integrated with document-check and anti-fraud providers, on web and mobile.

KYCKYBContractsSelf-service
Layer 04 — Mobile app

Banking in the palm of your hand.

04

One session, many channels

A native React Native app for iOS and Android, in the partner's visual identity. Full Pix, real-time balance and statement, and a single login shared with the web portal.

iOSAndroidSingle login
How we integrated it

Three layers, one API contract between them.

The white-label solution, the orchestration layer and the client's core sit behind API contracts: a new partner comes on board without touching business rules or adding technical coupling.

01 · White label
Customized per partner

The white-label solution, configured for each partner: brand, components and visible modules set in the back office.

ReactNext.jsReact Native
02 · BFF
Orchestration

The integration layer between the white-label solution and the client's APIs: it aggregates and shapes calls into a single response, shielding the frontend from backend changes.

JavaSingle API
03 · Core
Client APIs

The client's Payments, Banking and Compliance serve every partner, with no rewrites.

PaymentsBankingCompliance
Cross-cutting layerKeycloak · SSO and multi-factor authenticationNew Relic · end-to-end observability
Integrations we implementedPayment gatewayCard networksKYC / KYBAnti-fraudawsOn AWS, each layer scales independently.
What the BFF unlocks
Falling marginal cost

Onboarding gets cheaper with every partner.

Single login

No authentication rework for each new contract.

Shielded frontend

Changes to internal APIs don't break the experience.

Independent modules

Payments and Banking switched on to fit the commercial model.

Security and compliance

Enterprise-grade security, before any feature.

On a platform that moves other people's money, security is the foundation from day one — and the operation already runs at real scale: 5 million transactions a day.

PCI DSS Level 1

The payments industry's highest certification, with an annual external audit and quarterly network scans — required above 6 million transactions a year.

Regulatory compliance

Meets Brazil's Central Bank requirements for payment schemes and payment institutions, and LGPD, Brazil's data protection law.

Infrastructure on AWS

A cloud operation proven through high-volume seasonal peaks, with no recorded incidents.

Per-partner isolation

A dedicated database per tenant: customer and sales data belong to the partner, while financial processing runs in its own domain.

Secure SDLC

A development lifecycle guided by recognized application-security frameworks, with continuous testing and vulnerability management.

Centralized IAM

Keycloak unifies SSO and multi-factor authentication, with trusted-device management per tenant.

Partner autonomy: each partner configures its own environment in a dedicated back office, deciding which modules and features its users see.

Results

What this architecture delivers, in numbers.

Payments, Banking, Portal and App live for 15+ partners, integrated with the client's core and monetized like the core business: a percentage of every transaction plus advance fees, distributed at scale across the ecosystem.

Scale in production
15+
partners on the same basemulti-tenant, running side by side
5M
transactions a daysteady through seasonal peaks
Revenue and savings
$150K
saved per yearwith card-network tokenization
$280M
addressable TPVin larger merchants (3DS, multi-acquirer, wallets)
Market benchmarks
+2–6 pp
higher approval ratewith network tokenization (FEBRABAN, Visa, Mastercard)
up to 30%
fewer payment-related ticketswith financial self-service portals
Integrating an off-the-shelf solution with 15+ platforms in a multi-tenant setup, without rewriting a single line of business logic, is what turns a white-label product into an operation that scales.— Architecture team, ZBRA
Beyond this ecosystem

The same approach, any institution that holds other people's money.

Integrating an off-the-shelf white-label solution, instead of building from scratch, shortens the road to market. What changes from one institution to the next is the business rules, the integrations and the brand.

01

Digital banks

B2B embedded finance for the corporate customer base, with no new core.

Embedded financeB2B
02

Lending fintechs

BaaS distributed through partners, with compliance and accounts built in.

BaaSDistribution
03

Credit unions

A modern digital layer without replacing the legacy core banking system.

Legacy coreDigital layer
04

Payment facilitators

Expanding into banking-as-a-service on top of the existing merchant base.

MerchantsNew revenue
To close

Whoever doesn't offer this layer loses share to whoever already does.

Cross-functional squads — PM, Tech Lead, QA and developers — side by side with your team, from integration to operation.

aws
Talk to ZBRA
See also: reliable financial data at scale