ENDEFRESNLTR
⚡ Automated 🏢 EPC Construction, Infrastructure & Heavy Engineering 👥 3,400+ Subcontractors · EN / TR / DE Portals ⏱️ 4 Weeks (Instant Webhook Flows + Security/OCR Gate)

Power Automate Shortened URL

Zero-trust vendor onboarding gate combining multilingual (/r/:token) document collection, pre-SharePoint binary/macro/PDF-JS threat scanning + Zetaleap Neural OCR (`UB-9`), DNS MX/SPF/DMARC & disposable-email blocking (`A5`), ISO IBAN MOD-97 + VKN/VAT verification, and SEPA EPC / TR FAST payment QR generation (`G2`).

19 min
Full KYC Onboarding
100%
Pre-SharePoint Scan
EN/TR/DE
Localized Vendor Portal
0
Failed IBAN Payouts

⚠️ Legacy Challenge & Bottlenecks

Subcontractors across Türkiye, Germany, and Eastern Europe submitted tax plates, trade registry gazettes, and bank letters via email. Fraudulent domain spoofing, macro-laced Office attachments, and mistyped IBANs posed severe treasury and cybersecurity risks.

  • ✕Unscanned external PDFs and macro-enabled Office files landing directly in SharePoint libraries
  • ✕Manual typing of scanned Turkish/German tax certificates and trade registry numbers
  • ✕Burner/disposable emails and spoofed domains without SPF/DMARC entering vendor master tables
  • ✕Wire transfer rejections caused by unvalidated international IBAN check digits

✅ Power Platform + Zetaleap Solution

Procurement triggers an instant `/r/:token` KYC link in English, Turkish, or German (`P1`). Upon upload, Power Automate pipes every file through `POST /api/studio/scan-ocr` (`UB-9`) to block VBA macros, embedded PDF `/JavaScript`, double extensions, and extract OCR text (`eng+tur` / `deu`). Simultaneously, `A5` checks `MX/SPF/DMARC` + VKN checksums, `iban-vat` verifies IBAN MOD-97, and `G2` generates a verified SEPA GiroCode / TR FAST Payment QR SVG card on the vendor’s Dataverse profile.

  • ✓100% of external vendor uploads scanned for macros/scripts before touching SharePoint or Drive
  • ✓Cut supplier KYC onboarding & bank verification turnaround from 4 days to 19 minutes
  • ✓Zero rejected SEPA / FAST wire transfers across 3,400+ onboarded subcontractors
  • ✓Multilingual EN / TR / DE self-service portal cut vendor support emails by 76%

⚡ 5-Stage End-to-End Execution Pipeline

01
Multilingual KYC Link Dispatch POST /api/hub/intake-create (?lang=en|tr|de)
Issues expiring bot-safe KYC portal link requesting Tax ID, IBAN, and up to 5 compliance PDFs.
02
Malware / Macro Scan & Neural OCR POST /api/studio/scan-ocr (UB-9)
Blocks macros/PDF-JS threats and extracts text from scanned TR/DE tax & trade registry PDFs.
03
Domain DNS Trust & VKN/IBAN Audit POST /api/automation/trust-validate + /pp/iban-vat
Queries DNS-over-HTTPS for MX/SPF/DMARC, blocks tempmail, and verifies VKN/VAT + IBAN MOD-97.
04
SEPA GiroCode / TR FAST QR Card POST /api/edge/payment-qr (G2)
Generates verified vector Payment QR SVG card attached directly to the approved ERP vendor master.
05
Compressed Archive & ERP Activation POST /api/studio/pdf-compress (UB-3) + SharePoint
Archives high-ratio compressed clean KYC bundle to SharePoint and activates vendor in ERP.

🛡️ Enterprise Security, DLP & ALM Governance

  • ◆Quarantine routing in Cloud Flow whenever `isClean === false` or domain `trustScore < 60`
  • ◆Cryptographic SHA-256 hash recorded for every uploaded KYC certificate in `intake_requests`
  • ◆RFC 6238 TOTP 2FA step-up verification (`POST /api/edge/totp`) for supplier IBAN change requests
  • ◆SSRF-hardened HTTPS webhook callbacks directly triggering Power Automate Instant Flows

🧩 Technology & Connector Stack

Engineered with governed Microsoft Cloud services and drop-in Zetaleap Swagger 2.0 Custom Connectors:

Power Automate Instant WebhookZetaleap Intake Portal (/r/:token)Zetaleap Threat Scan & OCR (UB-9)Zetaleap MX/SPF/DMARC & VKN (A5)Zetaleap SEPA/TR Payment QR (G2)Zetaleap TOTP 2FA (Edge)
Swagger 2.0 Connectors Scope Similar Architecture →

🚀 Try the Live Zetaleap API Studios Featured in This Case Study

More Enterprise Case Studies

View All Case Studies (8) →