KivvaTech
Fintech
FintechStashly logo

How Stashly Helped 50,000+ Users Save More with Intelligent Automation

Built a bank-integrated savings automation engine, redesigned the mobile onboarding experience, and achieved SOC 2 Type II certification for a next-generation personal finance app.

Stashly is a personal savings and financial automation platform designed for people who want to save consistently without having to think about it. The platform uses spending pattern analysis and rule-based automation to move money into goal-linked savings buckets at the right moments. KivvaTech was brought in to rebuild the bank integration layer, redesign the mobile app, and implement the compliance infrastructure needed for enterprise plan expansion.

50k+

active users post-redesign launch

2.4x

average savings rate increase for active users

70%

improvement in onboarding completion

SOC 2

Type II certified

The challenge

Stashly had strong concept validation and an engaged early user base, but three problems were preventing growth: bank integrations built on a single provider were creating data gaps and incorrect savings calculations; the mobile onboarding flow was losing 60% of users before they connected a bank account; and the planned enterprise tier required SOC 2 Type II certification before any corporate client would sign. The founding team needed a technical partner who could execute across all three in parallel.

Single-provider bank integration creating data gaps

Reliance on one data aggregator meant that when that provider had outages or data quality issues, Stashly's savings calculations were wrong. Some users saw incorrect balances trigger unintended automatic transfers, creating trust-damaging errors.

60% drop-off during mobile onboarding

The existing onboarding flow asked users to connect their bank account before showing them anything of value. The majority were abandoning before completing the connection, leaving Stashly with a large number of accounts with no linked data.

Savings automation too rigid for real spending patterns

Rule-based savings triggers were configured once during onboarding and never adapted. Users who set overly ambitious rules frequently overdrew their checking accounts, turning off their automations and going inactive.

SOC 2 compliance gap blocking enterprise plan launch

Corporate employers wanted to offer Stashly as an employee financial wellness benefit, but required SOC 2 Type II certification before any data sharing arrangement could proceed. Stashly had no compliance programme in place.

What we built

We rebuilt the bank integration layer with dual-provider redundancy, redesigned the mobile onboarding experience around progressive value delivery, added spending-aware automation that adapts to account balance before executing transfers, and implemented the full SOC 2 Type II control framework with third-party audit support. All four workstreams were delivered within a 6-month engagement.

01

Dual-provider bank integration

Primary integration via Plaid with Finicity as an automatic fallback for institutions where Plaid coverage is incomplete or experiencing degraded data quality. Transaction normalisation layer produces a consistent schema regardless of provider. Real-time balance checking before any automated transfer prevents overdrafts.

02

Redesigned mobile onboarding

New onboarding sequence shows users a personalised savings projection and goal visualisation before asking for bank connection. Gamified progress indicators, skippable steps with later-completion prompts, and biometric authentication setup at the end rather than the beginning. Completion rate improved from 40% to 82%.

03

Adaptive savings automation engine

Rule-based triggers enhanced with pre-execution balance checks, spending velocity analysis, and safe-to-transfer calculation. Automation pauses automatically when available balance falls below a configurable threshold and resumes when it recovers. Users receive a push notification before any transfer above their customised alert threshold.

04

SOC 2 Type II compliance programme

Full control implementation across the SOC 2 security, availability, and confidentiality trust service criteria. Audit log infrastructure, access control review processes, penetration testing programme, and vendor security review workflow. Achieved certification with zero findings from the independent auditor.

05

Savings analytics and goal tracking

Goal-linked savings progress visualisation, historical savings rate trends, spending pattern breakdown, and projected time-to-goal estimates. Personalised insights surfaced at the right moment: when a user is ahead of their goal or when a spending category is trending up.

Results

Measurable outcomes delivered, not projected.

2.4x

savings rate increase

Active users on the new adaptive automation save 2.4x more per month on average than users on the previous rigid rule system. The pre-transfer balance check eliminated overdraft-related automation shutdowns almost entirely.

70%

onboarding improvement

Onboarding completion rate improved from 40% to 82% following the redesign. The incremental value-first approach converted significantly more signups into active users with linked bank accounts.

50k+

active users

Post-redesign launch drove 50,000+ active users in the first 6 months as improved activation rates compounded with growth in new signups from the employer partnership channel.

SOC 2

Type II certified

SOC 2 Type II certification with zero findings unlocked the enterprise benefits channel. Three corporate employer partnerships were signed within 90 days of certification, adding a recurring B2B revenue stream.

Technologies used

Mobile

React NativeExpoBiometricsPush notifications

Banking

Plaid APIFinicityTransaction normalisationReal-time balance

Backend

Node.jsPostgreSQLRedisTemporal workflows

Compliance

SOC 2 Type IIAES-256Audit loggingPCI DSS scoping
KivvaTech delivered across every workstream simultaneously without dropping a stitch. The SOC 2 certification alone would have taken us 18 months without their help. They did it in 5.
C

CEO

Stashly

Want results like these?

Tell us your problem. A senior engineer will respond with a practical approach within 24 hours.

NDA available on request
Senior engineers only
No commitment to start