Crassula Release Week 5

core v.25.01.10-25.01.11
client v.25.01.6-25.01.8

Improvements

API

Added new API methods to support the features.verification.onboarding_questionnaire functionality:

PATCH /api/clients/{{clientId}}/onboarding_questionnaire – Saves client questionnaire data.
GET /api/clients/{{clientId}}/onboarding_questionnaire/parameters – Returns a list of questionnaire parameters.

See the Banking API documentation for further details.

Card issuing

Implemented issuance, activation, PIN code delivery, password setup, and OTP code handling for both virtual and plastic cards with the Unlimit card provider.
Aligned card status management functionality with the Unlimit card provider's API statuses, enabling freezing, unfreezing, and reporting a stolen card for this provider.

KYC

Introduced a new feature toggle features.verification.onboarding_questionnaire in the system configuration. When enabled, users will be prompted to complete the necessary KYC details upon logging in. Two new API methods have been added to support this functionality. See the Improvements → API section of this document for details.

Web and Mobile Interfaces

Improved the antifraud warning dialog text for FPS transaction flows in both Web and Mobile Interfaces to enhance clarity.

Fixes

Administrative panel

Fixed an issue where cloning a price list did not include the referral program, ensuring that referral settings are now copied correctly.

Transfers

Fixed an issue for Unlimit provider users where PaymentStatusChange Webhook errors were repeatedly sent. Transaction processing for this provider now works as intended.
Addressed an issue where internal transfers with ClearBank were not imported with the finalizedAt date.

Web and Mobile Interfaces

Fixed the error message text displayed when the registration quota is exceeded to improve clarity.
Resolved an issue in the iOS version of the application where users were unable to close the "Template successfully saved" banner.
Improved the validation message display for crypto payment limits to enhance message clarity.

Upcoming Updates

Improvements

API

We are improving the POST /api/clients/{clientId}/identification-requests/import API method to support the retrieval of applicant (user, not company) data from external SumSub accounts into the SumSub accounts of our service providers, and subsequently to Crassula. This functionality is enabled by passing a shareToken in the parameters and leverages the newly developed Reusable KYC feature on the SumSub side.
A new API method, GET /api/clients/{ID}/issued-cards/{ID}/external-transactions, will be introduced, allowing users to fetch a list of card transactions along with their details (raw data) directly from the card provider. In the current implementation, this functionality will be available for users with Decta as their card provider.
We will introduce an optional query parameter, oeap-mgf1, for encrypting sensitive card data in API responses (/cardholder-data, /pin-code). This parameter defines the padding algorithm for encryption. By default, the parameter will be set to sha-256, with sha-1 as an alternative option. If the query parameter is not passed in the request, the default padding will be used. Currently, the default encryption type is sha-1, but it will transition to sha-256 in the future. If you regularly handle card data retrieval, please refer to the upgrade note for more details on this change.

Co-Funded Opportunities

Business rules engine: Transactions and client onboarding

We are introducing a powerful Business rules engine designed to automate and customize client onboarding and transaction management. This feature enables businesses to define dynamic rules for user verification, transaction limits, and compliance enforcement, ensuring seamless operations and regulatory alignment. By co-funding this initiative, you gain early access to an advanced rule-based framework that enhances efficiency, reduces manual intervention, and adapts to evolving business needs. Contact your client manager for more information on this initiative and how it can optimize your onboarding and transaction workflows. For more detail, see the corresponding article on this co-funded opportunity.