The operating systemto configure
A config-driven platform for mobile banking, AI voice and chat, employee tooling, consent management, fraud intelligence, and modern core integration.
One platform.
One codebase. One configuration per institution.
Member app and marketing web
Member mobile app, marketing website, and authenticated web app from one configuration per institution — not a better banking app alone, but a modern, compliant, configurable digital institution without rebuilding the same thing 4,800 times.
AI chat and voice banking
Natural language banking with deterministic tool use, explicit permissions, auditability, and escalation to human support — same backend, same permissions, same audit trail across channels.
Employee portal
Staff sees the same member truth, same consent state, same interaction timeline — no channel should feel like a separate product.
Compliance and fraud network
Compliance and consent surfaces plus a fraud signal network and core adapter layer — config over code, network over isolation, consent over opacity.
Three steps.
One institution config.
1import { cuApp } from '@cu.app/config'23cuApp.tenant({4 charter: '5536',5 brand: 'primary',6})
Supabase,
Edge, Postgres.
Core platform: Supabase and Postgres, strict tenant isolation with RLS, Edge Functions for low-latency operations, event-driven audit trail, typed service contracts, and a feature flags and config registry.
Shared architecture,
tenant isolation.
Core adapters
and integrations.
Symitar and Episys first, PowerOn orchestration, FDX-aligned scopes, card processor, KYC, CRM, and statement providers — canonical CU API above adapters.
Consent is
product.
Open banking compliance, fraud intelligence, and auditable privileged staff actions — security should feel visible but not oppressive.
Consent and privacy
Consent dashboard: which apps have access, what data categories were granted, when permission started, when it expires, and revoke — every permission screen answers who, what, why, how long, and how to stop.
Security experience
Last sign-in, active devices, recent high-risk actions, biometric state, card state, consent history, export my data, revoke app access — visible but not oppressive.
Fraud and trust layer
Suspicious charge alert, unusual device sign-in, travel anomaly, payment risk prompt — fast, calm, reversible language members can understand.
WCAG 2.2 AA baseline
Dynamic type, clear focus, screen-reader sane labels, reduced motion, plain language alternatives — accessibility is not optional polish.
Frontend and backend.
One config contract.
Member app in Flutter and Dart; staff, marketing, and authenticated web in Next.js — same config source, same design token source.
Flutter member app
Custom component library, offline-tolerant patterns, white-label theming from config.
Next.js staff + marketing
Edge-aware rendering, same config source, same design tokens as mobile.
Supabase + Postgres
Strict tenant isolation with RLS, Edge Functions, typed service contracts.
Deterministic AI tools
Policy checks before execution, transcript and receipt logging, escalation framework.
flutter pub add cu_ui# Staff + marketing webnpm install# Config APIcurl /api/config/[tenantId]
“We needed one member experience across app, voice, and staff — not three products. cu.app is the first stack that sounded like how credit unions actually operate.”
Jordan Ellis
Chief Digital Officer, Community First CU
One truth across channels
built for u.s. credit unions
Phased rollout,
credible scope
Phase 1 ships the operating-system core; Phase 2 and 3 deepen voice, lending, fraud network, and adapters — not a fintech skin, a real operating system.
Phase 1
Pilot-ready core — auth, balances, transactions, transfers, cards, chat, support, profile, consent dashboard, employee portal core, basic marketing site
- Auth and balances
- Transactions and transfers
- Cards and chat
- Support and profile
- Consent dashboard
- Employee portal core
- Basic marketing site
Phase 2
Voice banking, enriched insights, fraud network, loan application surface, prequalification, document workflows, external account linking, business accounts
- Voice banking
- Enriched insights
- Fraud network participation
- Loan and prequal surfaces
- Document workflows
- External account linking
- Business experience
Phase 3
Deeper network signals, predictive insights, cross-channel journey continuity, broader core adapters, advanced employee AI, benchmarking where permitted
- Network-grade signals
- Predictive insights
- Journey continuity
- Advanced core adapters
- Employee AI tooling
- Benchmarking surfaces
- Custom rollout
cu.app is the multi-tenant operating system for credit unions: a config-driven member app, AI banking layer, employee portal, consent engine, and fraud network on one shared platform. open the configuration matrix
One platform,
every channel
The operating system your credit union has been waiting for. Config-driven digital banking, AI voice, compliance, fraud intelligence, and employee tooling — one shared platform.
start a pilot — configuration matrix opens in-app