Enterprise eCommerce App with Custom Payment Integration

About the Project

The client required a B2B iPad application for products digital ordering and payment processing. Designed for enterprise distribution, the app needed to support the entire order lifecycle – from browsing product catalogs and managing carts to capturing payments and generating receipts. A key requirement was an integration with a physical external card reader for secure transactions that meets strict security and compliance requirements.

Business Challenge

Application should be capable of securely handling complex payment scenarios in real time. The key technical and product challenges included:

• Integration with a third-party payment terminal and secure transaction processing
• Support for multiple payment methods, including credit cards, checks, split payments, manual card entry and card scanning
• Capturing digital signatures and generating receipts instantly after each transaction

Contributions

We developed a modular iPad application covering the entire order and payment flow, with a strong focus on custom hardware integration and transaction security:

• Implemented a custom communication protocol with the external card reader, based on vendor documentation
• Handled TLV (Tag-Length-Value) data parsing and implemented ARQC (Authorization Request Cryptogram) for secure, EMV-compliant payments
• Enabled a full range of supported payment methods, like magstripe, NFC, contactless with fallback options like manual card entry and camera-based card scanning
• Built the complete ordering flow: product browsing, cart, customer info, payment, digital signature, and reporting
• Added support for split payments, tokenization, and real-time payment validation to meet PCI compliance standards

Key Expertise

This project reflects our strength in building secure, hardware-integrated mobile apps for real-world commerce:

• Deep experience working with low-level payment protocols and EMV-compliant card readers
• Proven ability to implement secure flows using TLV parsing, ARQC, and PCI-compliant tokenization
• Complete ownership of the entire flow, from hardware integration and payment processing to building an enterprise-ready user experience