Full re-platform of the mobile banking experience for a regional bank — native iOS and Android, biometric authentication, card control, account aggregation, and regulatory-grade onboarding — delivered to production in under 7 months against an aggressive board-set deadline.
The bank's existing mobile app had been in production for six years. It worked functionally but felt visibly dated to customers who were now digital natives: the design language was old, the onboarding flow required a branch visit, and the app crashed on newer OS versions. Net Promoter Score on the mobile channel had declined three years running.
The bank's competitive position was eroding not on products or pricing — both remained competitive — but on channel experience. Customers acquiring their first account now expected the onboarding standard set by challenger banks: app download, identity verification, account active within minutes. Anything less was visibly behind.
The board had reviewed a conservative 14-month plan produced internally and pushed back: too slow for the commercial pressure, too much risk in a big-bang release. The CEO wanted a working app in customers' hands by peak back-to-school season, with onboarding, card control, and account aggregation as minimum-viable functionality.
The challenge was not purely technical. Regulated onboarding — identity verification, KYC, AML checks, card issuance, first deposit — had to remain fully compliant with both national regulator requirements and the bank's own risk-appetite framework. No compromise on compliance, under a timeline that halved the internal estimate.
The engagement was scoped from the first day as a discovery-to-production build rather than a traditional procurement-to-build. Our team ran a two-week discovery in-house with the bank's CX, risk, and IT functions, produced a documented product brief, and began engineering on week three.
Technical architecture: native iOS and Android apps (not cross-platform) for performance and platform-native UX, with a dedicated backend layer sitting between the apps and the bank's core banking system. The backend approach meant we could iterate on app features quickly without core banking changes, and layer in biometric authentication, push notifications, and card-control orchestration without touching regulated systems.
The regulated onboarding flow was the highest-risk path. We designed it as a separate module, delivered in week 8, and submitted for regulator review immediately — ahead of all other modules. By the time the rest of the app was built, onboarding was pre-cleared.
"Virtual Era told us on week one what we could not say yes to if we wanted to ship in seven months. That honesty made the difference. Every other vendor had said yes to everything and then renegotiated mid-build."
— Chief Customer Officer, retail bank · [VERIFY]The team shipped on a two-week sprint cadence with fortnightly demos to the bank's steering committee. First production release (onboarding + balance view + transfers) went live in month 5. Full MVP (onboarding + cards + aggregation + investments) went live in month 7, two weeks ahead of the contracted date.
Post-launch, the engagement moved to continuous delivery mode — fortnightly feature releases, quarterly steering, under a managed-services contract. 14 of the 17 backlog items originally deferred from launch were delivered within the following 6 months.
Mobile active users grew 38% within 90 days of launch. App store ratings stabilised above 4.5 on both platforms against prior ratings of 2.9 (iOS) and 3.1 (Android). Digital onboarding time — from app open to account active — averaged under 60 seconds for returning customers of the bank and under 4 minutes for new-to-bank customers, comfortably under the bank's 5-minute internal commitment.
Commercially, the bank reported measurable uplift in primary-relationship customer acquisition — customers using the bank as their main account — which it attributed substantially to the parity of digital experience with peer banks.
Native Swift (iOS), Kotlin (Android), .NET Core backend, Microsoft Azure hosting, Microsoft Entra ID for consumer identity, SignalR for real-time notifications, PCI-DSS-compliant tokenisation for card data, 24/7 application monitoring.
90 minutes, no slides. A senior partner, your relevant executive, and a whiteboard. We frame the opportunity, the risk envelope, and the engagement shape — then agree whether there's a fit before any proposal is drafted.