Auto Leasing Platform with KYC, AML, Credit Scoring, and Contract Automation for DACH Markets

A European auto leasing platform serving Switzerland and Austria needed to scale rapidly across two regulatory environments while automating the full contract lifecycle. Azati joined as the core backend engineer, migrated the system to microservices, delivered 12+ third-party integrations, and supported sales growth.

Build my leasing platform
6x

sales growth in Switzerland after platform rollout

12+

third-party integrations delivered across KYC, AML, credit bureaus, and ERP systems

2

country markets launched with country-specific compliance

Technologies used

Java
Java
Spring Boot
Spring Boot
React
React
Next.js
Next.js
PostgreSQL
PostgreSQL
Apache Kafka
Apache Kafka
AWS
AWS
Terraform
Terraform
Docker
Docker
GraphQL
GraphQL

Motivation

Leasing a car in Europe is not a simple transaction. By the time a customer signs a contract, the platform behind it has run identity checks against KYC providers, queried multiple credit bureaus across two jurisdictions, verified a company's legal status in national registries for B2B clients, requested leasing terms from the manufacturer, calculated a payment plan, generated a legally valid PDF package with a qualified electronic signature, and scheduled invoices for the full duration of the contract. Every step has country-specific rules, and Switzerland and Austria are not the same country.

The client is a digital auto leasing platform operating in the DACH market. When Azati joined, the platform was early-stage, a startup with ambitious delivery timelines and a product that needed to scale fast across two regulatory environments simultaneously. The existing architecture needed to move to microservices. Integrations with a dozen external systems had to be built. And the business couldn't wait: sales targets in Switzerland and Austria were real and pressing.

Business challenges

Challenge 01

Orchestrating a multi-step compliance process across two jurisdictions

Every leasing application runs through a sequence of external checks that vary by country, customer type, and business rules. Switzerland uses different credit bureaus than Austria, B2B clients require company registry verification, and KYC requirements differ by provider. Orchestrating all of this reliably, with parallel execution, exception handling, and state management, required a proper workflow engine, not a sequence of API calls:

  • KYC via IDnow and Mesoneer depending on context
  • AML checks running in parallel with credit scoring
  • Credit bureaus: CRIF, ZEK, KSV (CH), SCHUFA, Intrum (AT)
  • Company registry checks via Zefix and Compass for B2B
  • Country-specific workflow paths for CH and AT
#1
Challenge 02

12+ integrations with systems that don't share a common interface

Each external system has its own API design, authentication model, data format, and failure behavior. Building reliable integrations that handle edge cases, timeouts, and retries across all of them simultaneously is engineering work that compounds in complexity with every new integration added:

  • IDnow, Mesoneer, KYC providers with different flows
  • CRIF, ZEK, KSV, SCHUFA, Intrum, European credit bureaus
  • Zefix, Compass, company registry verification
  • Carbone, Pdf4me, PDF document generation from templates
  • Odoo, ERP and accounting system integration
  • Hyundai, Tesla lease term estimation calculators
  • Postmark and transactional email delivery
#2
Challenge 03

Legally correct document generation across countries and client types

The platform generates the full legal document package for each contract: leasing agreement, addendum, handover protocol, and termination confirmation. Each document must be legally valid for the applicable jurisdiction. Qualified electronic signatures, GDPR-compliant data handling, and secure document storage on S3 are non-negotiable:

  • Country-specific and language-specific document templates
  • B2C and B2B document variants with different data fields
  • Qualified electronic signatures (QES) for legal validity
  • Secure storage on AWS S3 with access controls
  • GDPR compliance for personal and financial data
#3
Challenge 04

Rapid scaling with a lean team and high delivery pressure

The client is a startup with aggressive timelines. Major releases came under pressure, estimates were frequently optimistic, and the DevOps function was not always available when needed. The Azati engineer had to cover backend, frontend contributions, and infrastructure work simultaneously, learning AWS and Terraform under production conditions:

  • Monolith-to-microservices migration during active development
  • DevOps work absorbed into the engineering role out of necessity
  • High release cadence under client delivery pressure
  • High team turnover on the client side creating context gaps
#4

The client's requirements

The client needed a senior backend engineer who could operate independently across a broad technical surface while navigating the compliance requirements of two European leasing markets. The scope covered the full platform build and continued to grow:

  • Migrate the platform from monolith to microservices architecture
  • Build and maintain the Flowable-based workflow engine orchestrating the full leasing lifecycle
  • Develop and integrate KYC flows with IDnow and Mesoneer
  • Integrate credit scoring with CRIF, ZEK, KSV (Switzerland) and SCHUFA, Intrum (Austria)
  • Implement company registry verification via Zefix and Compass for B2B onboarding
  • Build PDF contract generation pipeline using Carbone and Pdf4me with country-specific templates
  • Integrate Odoo as ERP for financial operations and accounting
  • Implement payment plan management and invoice generation
  • Build data synchronization service between SST platform and internal services via GraphQL
  • Manage AWS infrastructure including ECS, CloudFront, CloudWatch, S3, and IAM
  • Maintain Terraform infrastructure as code

Why Azati?

Senior-level Java engineering across a complex stack

The platform runs on Java 21 with Spring Boot 3, Flowable, Apache Kafka, Hibernate, Spring AOP, and GraphQL, a stack that requires real depth to work with productively. The Azati engineer contributed from day one without a meaningful ramp-up period, navigating a codebase with multiple interconnected services and a workflow engine at the center of everything.

Integration engineering at scale

Each of the twelve-plus external systems has its own API contract, authentication model, and failure behavior. That is not a one-time build: it is ongoing maintenance as APIs change, providers update their flows, and new markets add new requirements. The Azati engineer owns this layer end to end.

Compliance and regulatory domain knowledge

Most engineers do not arrive knowing the difference between ZEK and SCHUFA, or why a leasing agreement in Switzerland needs a different QES flow than one in Austria. This platform required learning those distinctions quickly and getting them right. That expertise is now part of Azati's capability in financial platform engineering.

Full-stack flexibility under operational pressure

When the DevOps function was not available, the Azati engineer learned what was needed and kept the platform moving. When frontend work was needed, it got done. The engagement required someone who could operate across the full technical surface independently, not someone who needed a well-defined lane.

Building a leasing or auto finance platform for the European market?

KYC, AML, credit scoring integrations, country-specific compliance, contract automation, Azati has built this for the DACH market. Let's talk about your platform.

Build my leasing platform

Solution

01

Workflow-Orchestrated Customer Onboarding

The customer onboarding flow is orchestrated by Flowable, which manages the sequence and parallelism of external checks. When a new leasing application arrives, the workflow engine triggers KYC verification, AML checks, and credit scoring simultaneously where possible, handles exceptions and retries, and adapts the flow based on country (CH vs AT), customer type (B2C vs B2B), and outcomes of each step. For B2B clients, company registry verification via Zefix (Switzerland) and Compass (Austria) runs as an additional parallel branch.

Key capabilities:
  • Flowable workflow engine orchestrating multi-step onboarding
  • KYC via IDnow and Mesoneer with provider-specific flows
  • AML checks running in parallel with credit scoring
  • CRIF, ZEK, KSV for Swiss credit scoring; SCHUFA, Intrum for Austrian
  • Zefix and Compass for B2B company registry verification
  • Country-specific and customer-type-specific workflow branching
02

Leasing Offer Calculation and Partner Integration

After successful onboarding, the platform queries leasing partners, currently Hyundai and Tesla, for leasing terms based on the customer profile, vehicle parameters, and country. Each manufacturer has its own API contract and data model, which the integration layer normalizes into the platform's internal offer structure before presenting it to the customer.

Key capabilities:
  • Hyundai and Tesla leasing calculator integrations
  • Country and customer-type-aware offer parameters
  • Normalized offer structure across manufacturer-specific APIs
  • Offer presentation via SST platform through GraphQL
03

Legal Document Generation and Electronic Signing

The platform generates the full legal document package for each contract using Carbone and Pdf4me as rendering engines, with templates stored and versioned on the provider side. Each document is rendered with contract data specific to the country, customer type, and language, then signed with a qualified electronic signature for legal validity.

Key capabilities:
  • Leasing agreement, addendum, handover protocol, termination confirmation
  • Country-specific, language-specific, and customer-type-specific templates
  • Carbone and Pdf4me as PDF rendering engines
  • Qualified electronic signatures (QES) for legal validity
  • Secure document storage on AWS S3 with access controls
04

Payment Plan and Invoice Management

Once a contract is signed, the platform generates the full payment plan for the leasing duration and schedules invoice generation and delivery. Invoices are sent to customers via Postmark. Financial data is synchronized with Odoo for ERP and accounting on the client side.

Key capabilities:
  • Payment plan generation for full leasing duration
  • Automated invoice generation and scheduling
  • Transactional email delivery via Postmark
  • Odoo ERP integration for financial operations and accounting
05

Data Synchronization and Platform Connectivity

The platform operates alongside SST, the client's primary frontend platform and source of truth for contract data. A dedicated synchronization service keeps customer and contract data consistent between SST and the internal microservices via GraphQL. Apache Kafka handles async messaging between services, ensuring reliability and decoupling under variable load.

Key capabilities:
  • GraphQL-based data synchronization with SST platform
  • Apache Kafka for async inter-service messaging
  • Customer and contract data consistency across services
  • OpenFeign for inter-service REST communication
06

AWS Infrastructure and DevOps

Platform infrastructure runs on AWS, managed as code via Terraform. ECS handles container orchestration, CloudFront serves the frontend, CloudWatch provides monitoring and logging, S3 stores documents and assets, and IAM manages access policies across services. The Azati engineer absorbed DevOps responsibilities when the dedicated function was unavailable, maintaining infrastructure stability throughout active development.

Key capabilities:
  • AWS ECS for container orchestration
  • CloudFront for frontend delivery and CDN
  • CloudWatch for monitoring, logging, and alerting
  • Terraform for infrastructure as code
  • AWS IAM for access policy management across services

Major achievements

Metric / areaBefore / at project startCurrent state
Platform architectureMonolithMicroservices architecture across CH and AT
Sales in SwitzerlandBaseline6x growth following platform rollout
Sales in AustriaBaseline2-3x growth following platform rollout
Third-party integrationsNone12+ integrations across KYC, AML, credit bureaus, ERP, document generation
Country coverageNoneSwitzerland and Austria with country-specific compliance
Document generationManualAutomated legal document package with QES
Payment managementManualAutomated payment plans and invoice delivery

Security

The platform handles sensitive personal and financial data across two regulated European markets. Documents are stored in AWS S3 with access controls appropriate to their sensitivity. All contracts carry qualified electronic signatures (QES) as required for legal validity under DACH jurisdiction. GDPR compliance governs the handling of personal data throughout the onboarding and contract lifecycle. AML checks and KYC verification are built into the onboarding workflow as non-bypassable steps. Platform traffic is secured with SSL/TLS encryption, and AWS IAM manages access policies across all infrastructure components.

Engagement & delivery

T&M with broad engineering ownership

The engagement runs on a Time and Material basis with a single senior engineer carrying a scope that spans backend, frontend, integrations, and infrastructure. This model gave the client maximum flexibility as the platform evolved and the technical scope expanded beyond the original brief.

Agile delivery under startup conditions

The team worked in Agile sprints, adapting to the reality of a startup with shifting priorities and aggressive release targets. When infrastructure availability was limited, the engineering scope expanded to cover it:

  • Agile sprints with direct client communication
  • Backend, frontend, and DevOps absorbed by a single engineer as scope expanded
  • AI tooling used as standard development accelerator
  • Continuous delivery maintained across a codebase that grew significantly in scope

Results & business impact

6x Sales Growth in Switzerland

Following the platform rollout, sales grew six times. Automated onboarding, instant credit scoring, and contract generation removed the friction that had previously slowed the leasing process for both customers and the operations team.

2-3x Sales Growth in Austria

The Austrian market rollout delivered two to three times sales growth, confirming that the platform's compliance architecture scaled cleanly to a second jurisdiction without rework.

Full Leasing Lifecycle Automated

From initial application to final invoice, no manual intervention required. The platform handles every step in sequence, adapting to country and customer type as it goes.

Production-Grade Integration Layer

Every external system the platform depends on has a maintained, production-grade integration behind it. None of it is prototype-quality; all of it handles real customer data in live markets.

DACH FinTech Domain Expertise Built Inside Azati

The engagement built deep expertise in European auto leasing compliance: DACH-specific credit bureaus, qualified electronic signatures, GDPR data handling, and the regulatory differences between Swiss and Austrian leasing operations. This is now part of Azati's capability in European regulated FinTech.

Strategic wins

What this engagement demonstrates beyond the feature list:

Workflow engine as the right architecture for compliance-heavy processes

Putting Flowable at the center of the onboarding flow, rather than orchestrating external calls from application code, was the right call. It gives the platform explicit state management, parallel execution, exception handling, and auditability that would be very difficult to replicate in procedural code. For any platform where a business process involves multiple external systems with uncertain response times, a workflow engine is the architecture that scales.

Country-specific compliance as a first-class design concern

Switzerland and Austria share a language but not a regulatory framework. Building country-specific credit bureau integrations, document templates, and workflow paths from the start is what allowed the platform to go live in both markets cleanly. For any European FinTech expanding across jurisdictions, compliance architecture that treats each country as a first-class concern from day one is the pattern that works.

Seniority over headcount for early-stage platforms

A startup with aggressive timelines and a broad technical surface does not need more junior engineers. It needs one person who can make architectural decisions, own the integration layer, and cover DevOps when the dedicated function is not there. That is a different hiring argument than most, and it is the one that worked here.

AI-accelerated development as standard engineering practice

Claude Code, Gemini, and ChatGPT are part of how the Azati engineer works on this project, for code generation, analysis, and review. This is not a side experiment; it is standard tooling that accelerates delivery across a codebase with broad surface area and tight timelines.

Team composition

The engagement is delivered by a single senior Azati engineer who has been the core backend contributor since September 2023, covering a technical scope that expanded well beyond the original brief.

  • Senior Backend Engineer (Java / Spring Boot, ongoing), core platform engineer since September 2023. Owns backend architecture, the full integration layer, Flowable workflow engine, AWS infrastructure, and Terraform. Covers frontend in React and Next.js when needed. Runs AI tooling (Claude Code, Gemini, ChatGPT) as standard development accelerators throughout.

The described expertise is relevant for

  • Auto leasing and auto finance platform development
  • KYC, AML, and credit scoring integration for European markets
  • Java Spring Boot microservices for regulated FinTech
  • Workflow engine implementation for compliance-heavy business processes
  • Multi-country platform engineering for DACH or broader EU markets
  • Contract automation and legal document generation for financial products
  • FinTech startups needing full-stack senior engineering from day one

Last updated

Got a job for Azati? Let’s talk business!

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

What's next?

  • 1. Tell Us Your Story
    Describe your project. We come back within 24 hours with team availability and a rough plan. NDA on request before the first call.
  • 2. Get Your Roadmap
    Receive a detailed proposal with scope, team composition, timeline, and costs tailored to your goals.
  • 3. Start Building
    Azati aligns on details, finalize terms, and launch your project with full transparency.