SmallTicketSolutions is designed to run critical financial workflows. We protect applicant data, enforce your rules, and create a complete audit trail across every action, document, and decision.
Our approach is simple: use proven technology, apply strict separation, validate every step, and never rely on guesswork.
How we keep your data secure
We run entirely on Microsoft Azure in EU data centers. All data stays inside the EU at all times.
Each customer receives its own acceptance and production databases. No customer data is ever shared or co-located.
All documents uploaded and generated during the process are stored in a secure vault that is protected with a unique environment key.
How we keep your data private
Case handlers authenticate through their own or our identity provider. MFA is enforced inside the SSO process.
We avoid complex role-based permissions. Each portal is purpose-built for a specific type of user, and everyone inside that portal has the same rights. This keeps permissions predictable and reduces configuration risk.
Know exactly what happened
We maintain a complete audit trail for everything that happens in the system.
Failed login attempts and SSO events are tracked by the customer's identity provider.
All about the documents inside the process
Contracts, SEPA mandates, amortization tables, UBO declarations, and supporting documents are automatically generated by the Platform. No local editing. No manual adjustments are possible. No version confusion.
For Application to Booking customers: Documents are deleted within 30 days after they are synced with the core system or archived in the DMS.
Other process documents: Deleted within 30 days after the case is no longer needed.
Verifying that someone is who they claim to be
Our default setup makes use of Entrust products: Signhost and Onfido.
Each signer chooses their preferred method from the organisation's minimum allowed level. For example, iDIN, itsme or Onfido is common in the Netherlands. Onfido and itsme can be used for passport or ID card validation.
The platform validates authentication data against the signer's information. If something does not match (for example, last name differences due to marriage), the case is flagged for handler review. Handlers can approve legitimate variations or decline incorrect signatures.
Making sure you do business with the right customers
Each match returns a score. If the score exceeds a threshold, a handler must give an opinion. System score and human score are compared. Outliers can be flagged for additional screening.
How we connect to you and to your partners
We support two types of integrations, and keep them separate so each remains secure, simple, and fully auditable.
We often connect to the customer's core lending or leasing systems. Every core system is different. We support:
We store only the fields required for the workflow. The customer's endpoint controls what is received. We never save unnecessary fields. Security:
Most customers start without or only have minimal core-system integration. Once the process is proven, deeper integrations are added in a controlled and secure way.
Partners can start a self-service flow or submit data directly to us through a secure API.
This ensures partner traffic is controlled, authenticated, and fully auditable.
Just making sure we're on the same page
To keep processes safe and predictable, we are clear about our boundaries:
If you want a deeper look at our architecture or need support for a risk assessment:
