We build. We connect. We run.
XSIS designs and builds software, AI and data platforms, and connects your ERP to banks, POS and third parties, with in-house and outsourced teams that stay to run what they build.
01AI and data
AI that runs in production, on data you trust
We build AI features, models and document automation on your own data, with evaluation, guardrails and human review designed in. The data pipelines underneath are built to the same standard.
All AI and data services- AI developmentDesign, build and run AI features and agents on your data, connected to the systems you already use.
- Generative AI and LLM integrationRetrieval, assistants and LLM features built on your documents and systems, with evaluation and guardrails.
- Machine learningForecasting, scoring, classification and anomaly detection, from feature engineering to monitored production models.
- Data engineering and analyticsPipelines, warehouses, data quality and dashboards, so reports and models work from the same trusted data.
- Intelligent automation and document AIExtraction from invoices, statements and forms, with validation rules, human review and posting to your ERP.
02Software engineering
Software built to be run, changed and handed over
Custom applications, web and mobile products, cloud platforms and modernised legacy systems, with tests, documentation and delivery pipelines from the first iteration.
All software engineering services- Custom software developmentBusiness applications, platforms and back-end services, designed, built, tested and supported by one accountable team.
- Web applicationsCustomer portals, internal tools and web platforms with modern front ends and well-tested APIs.
- Mobile appsNative and cross-platform apps, from banking and wallet apps to field tools, with the back end they need.
- Cloud and DevOpsCloud architecture, infrastructure as code, CI/CD, observability and cost control on AWS, Azure and Google Cloud.
- Legacy modernisationStep-by-step migration of ageing applications and databases to supported platforms, with the old system running until the new one is proven.
03Integrations
Your ERP, your banks, your stores, in one reconciled flow
We connect ERP systems to banks, card networks, POS and third-party services, using the standards on each line: ISO 20022, MT940, ISO 8583, host-to-host SFTP and REST. Every failure has a path: retried, queued or handed to a person.
All integration services- ERP integrationIntegrations for SAP S/4HANA, Oracle NetSuite, Microsoft Dynamics 365, Odoo, Sage and others, monitored and reconciled.
- Bank integrationHost-to-host and API connections to banks: ISO 20022 payment files, MT940 and camt statements, and automatic reconciliation.
- Payments and POS integrationISO 8583 and gateway integrations, EMV terminals, acquirer settlement files, and POS to ERP sales and stock sync.
- Third-party and API integrationREST, SOAP, webhooks and iPaaS integrations with CRM, logistics, tax, KYC and identity providers.
Scroll sideways to see the whole drawing.
The ERP at the centre, every connection monitored
Banks, stores, payment networks and third parties connect to the ERP through one integration layer. Anything that fails lands in a queue with an alert, never in silence.
- Primary flow
- Asynchronous
- Exception path
The flow, step by step
- From ERP to Integration layer: Orders, invoices and payment runs, over REST/JSON · OData · IDoc (primary flow).
- From Integration layer to Banks: Payment files, over ISO 20022 pain.001 · SFTP H2H (primary flow).
- From Banks to Integration layer: Statements, over camt.053 · MT940 (asynchronous).
- From POS and stores to Integration layer: Sales and returns, through an event queue, over REST/JSON (asynchronous).
- From Integration layer to POS and stores: Prices and stock, over REST/JSON (primary flow).
- From POS and stores to Payment gateway and acquirer: Card authorisation, over ISO 8583 (primary flow).
- From Payment gateway and acquirer to Integration layer: Settlement files, over SFTP (asynchronous).
- From Integration layer to Third parties: Customers, shipments and tax documents, over REST · SOAP · webhook (primary flow).
- From Integration layer to Monitoring and exception queue: Failed messages, to a dead-letter queue (exception path).
- From Monitoring and exception queue to Your operations team: Alerts and breaks to resolve (exception path).
04Teams
Teams that fit the way you work
A dedicated team for your roadmap, engineers added to your own team, or a project delivered against agreed criteria. Our in-house engineers lead; vetted outsourced teams add capacity.
All team services- Dedicated teamsA cross-functional team assembled for your roadmap, run day to day by XSIS and directed by you.
- Staff augmentationIndividual engineers and specialists added to your team, under your management, for as long as you need them.
- In-house and outsourced teamsHow XSIS combines its own engineers with vetted outsourced teams, and how you stay in control of both.
- Project-based deliveryXSIS takes responsibility for a defined scope, with milestones, acceptance criteria and a named delivery lead.
05Consulting
Advice that ends in a plan
Architecture reviews, technology choices and AI readiness assessments, written down with options, risks and the order to do things in.
All consulting services
Lead industry
Fintech is where we go deepest
Banking, payments, lending, wealth, insurance and digital wallets run on systems that must be right every time. We build those systems and the connections between them, with the regulation in mind from the first design.
Fintech and financial servicesBanking
Digital banking channels, core banking extensions and bank connectivity for corporate clients.
Payments
Gateway and acquirer integrations, payment orchestration, settlement and reconciliation.
Lending
Origination, decisioning and servicing platforms, with explainable credit models.
Digital wallets
Wallet apps, tokenised cards, onboarding with KYC checks and transaction monitoring.
Scroll sideways to see the whole drawing.
A digital financial product, end to end
A banking or wallet app talks to one API layer. Behind it sit identity checks, card processing and the core ledger. Transactions are screened as they happen, and anything suspicious is held for a person to review.
- Primary flow
- Asynchronous
- Exception path
The flow, step by step
- From Customer to Banking or wallet app: Signs up, pays and transfers (primary flow).
- From Banking or wallet app to API layer: Requests, over REST/JSON · OAuth 2.0 (primary flow).
- From API layer to KYC and AML provider: Identity and screening checks, over REST/JSON · webhook (primary flow).
- From API layer to Core banking or ledger: Postings and balances, over REST/JSON · ISO 20022 (primary flow).
- From API layer to Card processor: Card issuing and controls, over REST/JSON (primary flow).
- From Card processor to Core banking or ledger: Card transactions, over ISO 8583 (asynchronous).
- From API layer to Fraud and transaction monitoring: Transactions to screen, as an event stream (asynchronous).
- From Fraud and transaction monitoring to Compliance and operations team: Held for review (exception path).
- From KYC and AML provider to Compliance and operations team: Failed or unclear checks referred (exception path).
Work with us the way that suits you
Choose a dedicated team, engineers who join your own team, or a project we deliver against written acceptance criteria. Each model has clear governance, regular reporting and a named lead.
- In-house and outsourced teamsXSIS engineers lead and own the work; vetted outsourced teams add capacity and skills under the same standards.
- Dedicated teamA complete team that works only on your product, run day to day by XSIS and directed by you.
- Staff augmentationEngineers and specialists who join your team, work in your tools and report to your managers.
- Project-based deliveryXSIS delivers an agreed scope against written acceptance criteria, with a named delivery lead.
What you can check on this site
- services, each with deliverables, process and answers
- 22
- integration blueprints with the failure path drawn in
- 5
- technologies, products and standards we work with
- 141
- answered questions, by topic
- 237
Questions clients ask first
Who is XSIS?
XSIS is KONG GROUP’s technology company. We design, build, integrate and run software for enterprises: AI and data, custom software, web and mobile, cloud, and the integrations that connect ERP systems to banks, POS and third parties. Fintech is our lead industry. We deliver through our own in-house engineers and vetted outsourced teams, under one set of standards.
Link to this questionWhat does “in-house and outsourced teams” mean?
XSIS employs its own engineers, who lead projects, set the technical direction and are accountable for quality. Where a project needs more capacity or a specialist skill, we add engineers from vetted outsourcing partners. They work to the same standards, contracts and security rules, and you always know who is on your team and who employs them.
Link to this questionHow do you estimate cost?
We estimate from the scope, not from a rate card. After a first conversation we break the work into parts, size each one and write down the assumptions behind the estimate. The main drivers are the number of systems and integrations, the state of your data, security and regulatory requirements, the testing needed and the seniority of the team. You receive a written estimate with options, so you can choose what to do first. You see the price and the timeline before we start.
Link to this questionWho owns the code and the work you produce?
Intellectual property in the work we build for you is yours from the first commit — no assignment step at the end. That covers the custom code, documentation and other deliverables made for you. Anything we bring that existed before, such as internal tools or libraries, stays ours, and you receive a licence to use it in your systems. Open-source components keep their own licences, and we list them for you.
Link to this questionHow do you protect our systems, code and data?
Access is granted per person, limited to what each role needs, and removed when that person leaves the project. We work in your repositories and environments if you prefer, use multi-factor authentication, and keep secrets in a vault, never in code. Code is reviewed before it is merged, dependencies are scanned, and production data is not copied into test environments without masking. We agree these controls with your security team at the start.
Link to this questionHow soon can work start?
It depends on the team you need and on what has to be in place first: the contract, access to your systems, security reviews and, for integrations, your partners’ test environments. We tell you what we need from you and when, and confirm a start date in the proposal. Discovery work can often begin while access is being arranged.
Link to this questionTell us what you need to build or connect
Describe the system, the integration or the team you need. We come back with questions and options.