EBB Systems Schedule a briefing
The Platform

One resilient layer your bank runs.

Think of EBB as a smart switchboard between your customers and every payment network — money flows both ways through it, and when a payment fails it fixes itself. It sits in front of your core banking, which stays exactly as it is. You own it, and you run it in your own estate.

The platform

Built once. Extended safely.

One resilient layer between your customers and every payment network — here it is in plain terms, then in full. You run it in your own estate; your core banking stays exactly as it is.

01
In plain termsMoney comes in, money goes out.

Think of EBB as a smart switchboard between your customers and every payment network — money flows both ways through it, and when a payment fails it fixes itself.

MONEY FLOWS BOTH WAYS · C2B collections in · B2C payouts out · B2B Customers & channels how a payment is initiated app · USSD · agency · web EBB one resilient layer you own route · retry · reverse · reconcile moves money in and out the right way, and fixes it when something breaks Payment networks every rail money moves over M-Pesa · PesaLink · cards · banks debit / credit Your core banking your existing system · EBB plugs in Finacle / T24 / FlexCube / custom CBS

A customer paying you (money in, C2B), you paying a customer (money out, B2C), or business-to-business — EBB routes each one. Your core banking is your own separate system; EBB plugs into it and leaves it unchanged.

02
Resilient by defaultFour things the core does to every payment.

Applied automatically after a payment leaves your core — no human in the loop.

01 · Route

Route

Every payment sent down the right rail the moment it’s made — resilient routing, no manual steps.

02 · Retry

Retry

Timeouts and failures caught, backed off and re-attempted automatically — never paying twice.

03 · Reverse

Reverse

Payments that can’t clear are auto-reversed back to the core, fully audited — the customer is made whole.

04 · Reconcile

Reconcile

Every leg matched against the operator continuously — mismatches resolve before month-end.

03
The architectureChannels in, operators out — your core beside it.

The same story with the real components. The dashed frame is the EBB platform — what you run; your core banking sits outside it, separate.

EBB · PAYMENT ORCHESTRATION ARCHITECTURE money in & out · C2B · B2C · B2B THE EBB PLATFORM · you run it in your estate CHANNELS · WHERE PAYMENTS ARE INITIATED Mobile app Internet USSD Agency Corporate Wallet Merchant EBB GATEWAY one front door · every channel arrives here EBB CORE the resilient layer your bank owns orchestration · built once · runs every payment the same way resilient routing retry reverse reconcile ledger sync AML / KYC audit trail signature verify Signed plugins · one per operator · run inside the core build → sign → deploy → verify · integrity · authenticity · non-repudiation YOUR EXISTING SYSTEM · NOT EBB CORE BANKING your system of record · EBB plugs in Finacle T24 FlexCube Custom CBS debit credit payouts out (B2C) collections in (C2B) OPERATORS / NETWORKS · IN & OUT Mobile money Card networks Inter-banking Cross-border Remittances Bill & utility money flows both ways: C2B collections in · B2C payouts out · B2B · EBB is separate from your core banking

→ scroll to see the full diagram

How to read it: every channel enters through the EBB gateway (one front door); the core orchestrates the payment and invokes the operator’s signed plugin to reach the network and settle. Your core banking is a separate system that EBB plugs into, untouched. Card authorization stays real-time on the card networks; EBB owns routing, retry, reversal, reconciliation, AML and audit.

04
Built once · extended safelyThree building blocks.
01

The core & gateway

Move money — resilient routing, retry, reverse. Keep the books true — reconcile, ledger sync. Prove & protect — signature verification, AML, audit.

02

The plugins

A small integration to one operator — signed at build, verified by the core before it loads. Mobile money, cards, inter-banking, cross-border.

03

How it deploys

Software your bank runs, inside your own estate, on a gateway and the cores you operate. Your core untouched; a new rail live in weeks; high availability.

05
Defence in depthSix layers, every transaction.

The controls a regulator can see — applied by the core itself.

Signatures

Every payload cryptographically signed — the message, not just the channel.

Mutual TLS

Both ends verified on every connection. No password fallback.

Network isolation

Each surface on separate, segmented ports — blast radius contained.

AML screening

Sanctions & AML checks at the infrastructure layer, before settle.

PCI-DSS masking

Sensitive fields masked at ingestion — never stored in the clear.

Audit trail

Every field, at every stage, logged — immutable and queryable.

06
What makes it differentAnd the hard parts stay solved.
  • Owned by the bank — you run it in your own estate, not a vendor’s cloud.
  • Any core, any rail — Finacle/T24/FlexCube/custom; mobile money to SWIFT.
  • Resilient by default — most failures resolve before anyone is paged.
  • Live in weeks — a new operator is one small signed plugin.
  • Provable trust — signed code, AML screening, immutable audit.
  • Zero vendor lock-in — one consolidated layer, every rail in one place.

One platform for every payment — yours to run, proven every time.

the next step

Put the platform in front of your team.

Thirty minutes with our engineers — architecture, plugin signing, deployment, audit. Bring your security and platform people; we’ll go as deep as you want.