Skip to content

← Back to the Labs

L3:bank-statement-analyzer · AI Wing · Featured

Bank statement analysis PoC

Document AI for bank evaluators, with strict access control, Indonesian data residency and faster document processing.

Client
SMBC Indonesia
Role
Lead engineer, responsible for maintenance
Period
Jun 2026 to Sep 2026

Results

  • ~20% faster

    Document processing: mean run 233.9 s to 186.8 s; slowest run -34%

    Replay benchmark over 4 runs with data stores wiped clean; all 4 retained 99.3 to 99.4% analysis confidence, with accuracy unchanged.

    Verified
  • 748 tests

    Automated tests supported by 34 invariant verifier scripts

    Enforced during builds and checked with mutation testing.

    Verified
  • 8 evaluators

    Bank evaluators representing 3 personas used the environment

    Used during hands-on PoC evaluation; the outcome is not public.

    Verified

Problem

SMBC Indonesia's evaluators needed auditable bank-statement analysis within a fixed PoC window. Uploads and results required strict access control, with data kept in Indonesia.

What I did

  • I built the platform and infrastructure as code in a fixed Indonesian Azure region.
  • I hardened sign-in with Entra OIDC, PKCE, JWKS verification and fail-closed role mapping, then added maker-checker controls, audit trails and three-language support.
  • I fixed critical defects before evaluator access: an SSO role-mapping flaw, an inverted CSRF check behind the platform proxy and demo paths capable of fabricating analysis.
  • I enforced team rules through build-time verifier scripts, bounded the document-processing page pool and contributed to the PoC technical proposal.

Architecture

  1. HumanBank evaluator
  2. ClientNext.js web appEntra OIDC, maker-checker
  3. ServiceFastAPI backend
  4. AIDocument Intelligence and Azure OpenAIExtraction and analysis
  5. DataCosmos DB and BlobIndonesian region

Data flow

  • Bank evaluator to Next.js web app (statements)
  • Next.js web app to FastAPI backend
  • FastAPI backend to Document Intelligence and Azure OpenAI
  • FastAPI backend to Cosmos DB and Blob (audit trail)

Tech stack

  • Next.js
  • FastAPI
  • Document Intelligence
  • Azure OpenAI
  • Cosmos DB
  • Blob Storage
  • Key Vault
  • Managed Identity
  • Entra ID
  • App Service
  • OpenTelemetry
  • Bicep

L2 · Related career entryTechnical Consultant, Software & AI · Metrodata (PT Mitra Integrasi Informatika)