One of the largest US payment technology and prepaid solutions companies came to Armakuni for secure, GLBA- and HIPAA-compliant document management platform for PII and PHI handling across KYC, KYB, HSA/FSA claims, and employer onboarding.
The challenge
InComm Payments came to Armakuni with a compliance gap: a Customer Success team managing GLBA- and HIPAA-regulated documents across four disconnected channels with no unified platform and no automated enforcement. Armakuni delivered a production-grade secure document management system on AWS in Phase 1, then proposed a Phase 2 roadmap adding AI-driven classification, automated lifecycle management, e-signature integration, and secure external sharing.
Scale: Customer Success team processing compliance-critical documents daily across email, fax, encrypted upload, and paper channels.
What we built
Armakuni delivered secure, GLBA- and HIPAA-compliant document management platform for PII and PHI handling across KYC, KYB, HSA/FSA claims, and employer onboarding. The engagement ran as two engagements: Phase 1 fixed-scope SOW (Secure Document Management System) and Phase 2 feature enhancement proposal (AI document intelligence, lifecycle automation, secure collaboration). The work was AWS funded.
The outcomes
5 measurable outcomes shipped across the engagement. The ones that moved the business the most:
Four intake channels collapsed into one governed system.. Email, fax, encrypted uploads, and paper all enter the platform now. Operations staff work from one interface. Document intake is observable, consistent, and auditable from day one of production.
Compliance obligations enforced by the system, not by individual effort.. Retention policies run on schedule. Documents approaching their deadline surface automatically. Deletion actions are logged with proof. The compliance posture that previously depended on individual discipline now runs without individual intervention.
Every document action captured in a full, queryable audit trail.. Reception, tagging, viewing, downloading, editing, and deletion are all logged. Compliance officers can produce a complete document history for any file. Audit readiness that previously required manual reconstruction is now continuous.
Document search returning results in seconds, not minutes of manual hunting.. Metadata search across Member ID, account holder name, document type, and receipt date replaces manual searches through email archives and file shares. Authorized users find what they need without depending on institutional memory.
A platform positioned to absorb document volume growth without growing compliance overhead.. The Phase 2 AI enhancements proposed by Armakuni position the platform to handle classification automatically as InComm's customer base scales. Headcount and compliance overhead stay flat as business volume grows.
Built on AWS
The production environment runs on 13 first-party AWS services. Delivered under our AWS Product Engineering, Generative AI Services competencies.
What's next
Full production deployment of Phase 2 capabilities: Intelligent Document Processing, automated lifecycle management, e-signature integration, document redaction, and secure external sharing via expiring links.