Discuss your challenge

Governance software, Europe

Policy Lifecycle and Staff Attestation Engine

Regulated organisations use the client’s platform to keep every policy owned, approved, current and acknowledged by staff, with the proof an auditor asks for already on file.

3 weeksTime to hire

Policy workspace screens: six-stage document workflow, in-browser editing and staff attestation progress

About the company

  • Governance software
  • Europe
  • Multi-tenant SaaS
  • EU-hosted

Financial services firms and other regulated organisations use the client’s software to show regulators and members that their governance works. Alongside risk and compliance, the platform manages the policies, contracts and procedures those organisations must keep current and prove their people have read. The company is European, multi-tenant by design, and keeps customer data inside the EU.

The engagement

Time to hire
3 weeks
Core team
1 backend developer, 1 frontend developer, 1 QA engineer, 1 architect / tech lead, 1 BA / PM
Duration
5+ years (Nov 2021–ongoing)
Tech stack
.NET 10 (C#), ASP.NET Core Web API, EF Core 10, MediatR (CQRS), FluentValidation, PostgreSQL, Syncfusion document editor, PDFTron (Apryse), SignalR, Hangfire, SendGrid, Angular 21, TypeScript, PrimeNG, Azure B2C, Cloud: Azure (App Service, Blob Storage, Key Vault, Application Insights), CI/CD: Azure Pipelines, SonarCloud, Docker, NUnit, Moq, FluentAssertions, Vitest, Playwright

Project Overview

Policies were the part of governance most customers still ran outside any system: files in shared folders, owners nobody could name, review dates nobody tracked. The client wanted a full document lifecycle inside its platform, and it wanted it without pulling engineers off the existing roadmap or opening permanent positions.

Intelvision’s Talent as a Service model supplied a dedicated team that worked as part of the client’s product group, so the policy module shipped in parallel with ongoing releases.

Challenges and Pains

  • No Room on the Roadmap

    The policy module had to reach customers alongside the features already planned. Every engineer on the client’s team was committed, and the usual answer, a permanent hire, would have taken months before anyone wrote a line of code. The client needed capacity it could switch on without a recruitment cycle.

  • Policies Lost in Shared Folders

    Customers kept policies as files in shared drives. Ownership was unclear, review dates passed unnoticed, and nobody could show that staff had read what applied to them. Each audit turned into an exercise in reconstructing who approved which version and when.

  • Live Editing Across Tenants

    Reviewers and approvers wanted to edit documents in the browser rather than download and re-upload. On a multi-tenant platform that meant edit locks, safe document conversion and a version history that could be restored, all without one customer’s documents ever touching another’s.

Solution

Intelvision supplied a dedicated team rather than individual contractors: backend, frontend, QA, architecture and business analysis roles, all working in the client’s own backlog, tools and release process. The client kept product ownership; the team took the policy module from requirements to production.

Because the team built on the platform’s existing multi-tenant foundations, document tooling and background jobs, the module arrived as a native part of the product rather than a bolt-on.

The partnership included:

  • Flexibility and Scalability

    a complete team from day one, with roles the client could adjust rather than fixed headcount.

  • Comprehensive Services

    analysis, architecture, development and QA covered inside one team, with no hand-offs to other vendors.

  • Built-in Quality

    automated tests and a SonarCloud gate on the service, with changed code required to reach more than 80% coverage.

What to expect

  1. Client’s request
  2. NDA
  3. Review of developers’ CVs
  4. Interview with developers
  5. Final proposal
  6. Signing contract
  7. Onboarding and Kick-off

How We Solved the Challenges

  • 1. Capacity Without Headcount

    The team joined the client’s sprints three weeks after the request and worked inside the same backlog as the in-house engineers. The policy module was built as its own service with its own API and delivery pipeline, so it moved in parallel with the rest of the roadmap instead of competing for release slots. The client added a complete team without adding a single permanent position.

  • 2. A Governed Document Lifecycle

    Every document now has an owner and moves through six stages from Draft to Retired. A stage only advances when the assigned reviewers and approvers have given consent, and the history log records who did what and when. Scheduled attestation asks staff to confirm they have read each policy, reminders chase the stragglers, and the result is the evidence an auditor wants without anyone compiling it by hand.

  • 3. Safe Editing at Tenant Scale

    Reviewers and approvers edit in the browser through the Syncfusion editor while SignalR edit locks stop two people overwriting each other. PDF conversion runs in an isolated PDFTron process so a bad file cannot take the service down. Every version is stored in Azure Blob Storage and can be restored, and every record carries its tenant, which keeps each customer’s documents sealed from the rest.

Project Features

  • Six-stage workflow for Draft, Review, Approval, Published, Attestation and Retired
  • Required consent from reviewers and approvers for every stage change
  • Five document types for Policy, Contract, SLA, SOP and Compliance Document
  • Template library and Document Centre for starting a document without a blank page
  • In-browser editing with SignalR edit locks for reviewers and approvers
  • Isolated PDFTron converter process for safe document conversion
  • Version history with restore and rollback to Draft for a new cycle
  • Scheduled employee attestation with reminders for proof of reading
  • Exception and decline requests for staff a policy does not apply to
  • Review-date reminders for owners before a policy goes out of date
  • Daily digest of due and overdue items for owners and approvers
  • Policies as control evidence for the compliance module
  • Expired-evidence handling for deleted policies on linked tasks
  • Policy history log for every stage and version event

Results

3 weeks
Time to hire
6
Workflow stages per document
5
Document types supported
3
Approval roles with consent
  • Zero Hiring cost for the client

Hard to find engineers

Specialists your hiring has not found, working inside your repo, Jira and standups.

Engineering talent

Let’s talk

We usually start with advice. You get a direct answer on whether we can help and what should happen first.

Talk to an expert

Yurii Kotula

CEO and Engineering Leader

Your first call is with Yurii. Send the form, or pick a time in his calendar.

Book a call with Yurii
5.0 from 14 verified reviews on Clutch

Phone is optional. Everything else is required.

We use your details to answer your enquiry. See our Privacy Policy.