The Challenge
What needed solving
A funding broker has to collect highly sensitive data — SSN, EIN, revenue, bank access — in a way that survives a compliance review, decide which lending partner each applicant should go to, and do it while partner agreements and legal copy are still being finalized.
Our Solution
How we built it
We built a Next.js 16 marketing site and a multi-product application wizard where each product (Instant, Merchant Cash Advance, Commercial and SBA) validates its own fields with a shared Zod schema on client and server. Business bank linking runs through Plaid Link, FCRA soft-pull and TCPA contact consent are recorded with a timestamp and disclosure version, and SSNs and bank tokens are encrypted at rest with AES-256-GCM. A rate-limited submission API feeds a lender-routing engine that picks a primary partner and fallbacks from credit band, revenue, amount and purpose, and stores the decision for follow-up. Dedicated SBA and revenue-based funding pages and an English/Spanish toggle round it out.
Results & Outcomes
What we achieved
- Live at goswiftfund.com with a product-specific application flow
- Lighthouse mobile accessibility raised from 92 to 100
- SSNs and bank tokens encrypted at rest with AES-256-GCM
- End-to-end test passed: Plaid sandbox bank link → SBA application → routed and stored
Project Details
Category
Web
Technologies
Tags
Build something similar?
We can architect and build a custom solution tailored to your exact requirements.
Start a Project