Augmenting the built-in security provisions of our platforms
Building on similar work from previous years for global Fund and Wealth Management firms, the R&D team augmented the built-in security provisions of our platforms, by adding newly adopted systems such as Contentful and Storyblok as well as private and government identity verification systems to ensure adherence with stringent security requirements. The improvements are integrated with the platforms for leading financial clients such as Apollonian Advisors and Akta Funds.
Combining external content providers and identity verification systems, to create a unique secure environment whilst improving user experience.
Due to the insufficient built-in security provisions and absence of an off-the-shelf solution that would satisfy Fund and Wealth Management firms’ security requirements, GrowCreate implemented these solutions from scratch. Our solution combined external content providers and identity verification systems, to create a unique secure environment whilst improving user experience.
The implementation adds layers of security improvements to the frameworks and open-source products used, including advancements to authentication and cryptography, secure deployments and closing of more recent vulnerabilities. In the end, the product was verified by independent providers and penetration tests.
Scientific or technological uncertainties
The advancements described above could not be achieved without resolving scientific/technological uncertainties. The main scientific/technological uncertainties that the company sought to overcome during this claim period are summarised below:
- How to extend Storyblok, Contentful and Invessed Kentico with added security provisions, whilst maintaining the core product intact, to ensure upgradability
- How to integrate Identity verification providers from private and Government-backed services to link system users with real-life individuals
- How to ensure that the security provisions were deployable on diverse server infrastructure and did not disrupt the user experience
Eventually, the team was able to circumvent all their technological challenges to achieve fully tested websites, deployed for several clients and organisations.