FinToken XArchitectureCorporate Buyer

Corporate Buyer

The big customer who owes the Small or Medium-sized Enterprise (SME). Confirms the invoice with a single click in an email. Light browser portal for batch confirms. Lighter gate set than any other persona — they handle no money, take on no new liability.

Northwind Retail public limited company (plc)

Tom Whitfield, Accounts Payable · tom.whitfield@northwind.co.uk · National multi-channel retailer, 4,200 staff, FTSE 250

Northwind has 6,000 active suppliers and pays roughly 2,400 invoices a week. Tom's team will not adopt any process that takes more than thirty seconds per invoice or that creates new legal liabilities for the buyer side. The pitch to Northwind is a one-line ask: "click yes, the invoice is real and you'll pay it on the same date as before — only the bank account changes."

Channel
Email-led + browser portal
Gates
1, 2 only (no risk model)
Refresh
Identity 12mo · sanctions monthly
Code role
buyer_ap

Why the gate set is lighter

Buyers don't lend, don't borrow, don't buy a security. They affirm a fact ("yes, we owe this") and pay on a date they already committed to. The risk we're managing is identity and sanctions, not creditworthiness.

  • No risk model. A buyer with weak credit gets flagged but is not blocked — the lender prices that risk on their side.
  • No source of funds. Buyers aren't moving money toward us; they're paying suppliers as they always do, just to a different account.
  • No Money Laundering Reporting Officer (MLRO) mandatory review. Only escalations from Gate 4 (sanctions delta, insolvency) reach the MLRO queue.
  • No advance disclosure of the financing arrangement. The buyer is not asked to bless the seller's financing; they're asked to confirm the invoice. The financing happens on FinToken X's side and is invisible to them.

Flow map

StepWhat the buyer seesChannelState event
B1First-touch email — supplier has just submitted an invoiceEmailBUYER_INVITED
B2Account creation + light onboarding (Know Your Business (KYB) lite)Browser (one-time)BUYER_ONBOARDING_SUBMITTED
B3Know Your Customer (KYC) + sanctions complete — ready to confirmEmailBUYER_ACTIVE
C1Per-invoice email — "your supplier asked to be paid early"EmailBUYER_NOTIFIED
C2Magic-link confirmation page — one clickBrowser (signed link)BUYER_CONFIRMED
C3Batch portal — confirm 12 invoices in one goBrowser portalBUYER_CONFIRMED ×N
C4Payment instruction — "pay the invoice to this account on the due date"EmailOBLIGOR_INSTRUCTED
C5Receipt acknowledgment after the buyer paysEmailOBLIGOR_PAID

Onboarding · B1–B3

First time only, triggered by the supplier submitting their first invoice to this buyer. Tom Whitfield never sought us out; the email arrives because Coppergate Joinery added tom.whitfield@northwind.co.uk to invoice FX-INV-23A4F.

B1 BUYER_INVITED First-touch email
Sent the moment INVOICE_VERIFIED fires on the seller's side. The pitch is deliberately short.
Magic-link mechanics: the CTA URL contains a one-time token signed with the buyer email + invoice ID, valid for 7 days, single-use. Clicking it takes Tom to /auth/token, which exchanges the token for a session and forwards to /buyer/confirm/FX-INV-23A4F. If never seen before: the auth/token handler routes Tom through B2 (light onboarding) before the confirm page renders. If known: straight to C2.
What we deliberately don't put in this email: any banking detail (no sort code, no account number — buyer pays via the obligor instruction at C4 only); any pricing detail (the discount is none of the buyer's business); any token reference.
B2 Gate 1 BUYER_ONBOARDING_SUBMITTED Light onboarding (KYB lite)
The first time Tom clicks a confirm-link, he sees a 60-second onboarding before the confirmation page itself. KYB on Northwind, identity check on Tom, terms acceptance. Done once for the buyer entity, not per-invoice.
🔒 app.fintokenx.uk/compliance/onboarding/buyer

Quick check before you confirm

We just need to verify Northwind Retail plc and you, Tom. Should take a minute. We never share your details with Coppergate.

Verify your company
Company
Northwind Retail plc
Pulled from Companies House · 04382671 · Active
Your role
Accounts Payable
Are you authorised by Northwind to confirm payable invoices on its behalf?
Quick identity check

We'll verify your ID with Sumsub. Takes about 30 seconds — passport or driving licence, plus a short selfie.

What we don't ask you for. No source of funds, no banking details, no risk score on Northwind. You're confirming an invoice, not borrowing or lending.
What's verified: Companies House lookup on Northwind (must be active, not in administration). Sumsub identity check on Tom. ComplyAdvantage screening on the company and on the named directors (sanctions/Politically Exposed Person (PEP)). What's not verified: any risk-score, source-of-funds, banking detail. Authorised-rep flag: Tom self-attests; if no other Northwind staff member ever logs in, the platform is comfortable. If a second Northwind contact arrives later (e.g. via another supplier's invoice), they pass the same B2 themselves and are added to a per-buyer "authorised confirmers" list visible at /partner/onboarding and on the buyer portal.
B3 BUYER_ACTIVE Email · ready to confirm
Sent only on first onboarding completion. Subsequent invoices skip B3 — Tom goes straight from C1 (per-invoice email) to C2 (one-click confirm).

Per-invoice confirmation · C1–C5

From the second invoice onwards. The whole loop, end-to-end, takes Tom about 20 seconds per invoice.

C1 BUYER_NOTIFIED Per-invoice email
Sent on INVOICE_VERIFIED. Repeat suppliers get a slightly shorter version.
C2 Gates 1–2 (re-checked) BUYER_CONFIRMED One-click confirmation page
The link from C1 lands here. The page is intentionally minimal: invoice summary, "yes" button, "something's wrong" button. Behind the scenes the route is wrapped in ComplianceGateGuard action="CONFIRM_INVOICE".
🔒 app.fintokenx.uk/buyer/confirm/FX-INV-23A4F

Confirm invoice from Coppergate Joinery Ltd

Northwind Retail plc · Tom Whitfield

Awaiting your confirmation
What you're confirming
Invoice
FX-INV-23A4F (your supplier ref CG-2026-114)
Amount
£10,000.00
Due date
21 July 2026
Goods / services
Joinery and fit-out, store refurb (Manchester branch)

PDF: Invoice-23A4F.pdf (217 KB)

What confirming means
  • You confirm the invoice is real and Northwind owes Coppergate £10,000.00.
  • You confirm Northwind will pay on the due date — same as you would have anyway.
  • You'll get a payment instruction nearer the due date with a different bank account to pay into.

Confirming creates no new liability. You are not entering a finance agreement; you are not guaranteeing anything; you are not blessing the financing.

Re-check on every confirm (per money-control rule 8): even though the buyer is already BUYER_ACTIVE, Gate 4's continuous monitoring is read at the moment of confirm. If a sanctions delta has hit Northwind since onboarding, the confirm fails closed — the route guard returns to a "we need to recheck — please bear with us" state and the file is escalated to MLRO. Server response on confirm: writes BUYER_CONFIRMED with the actor's session subject ID and a hash of the rendered page; immediately fires the seller-side S4 email and triggers token mint; immediately listed on the lender marketplace.
C3 BUYER_CONFIRMED ×N Batch portal · /buyer/pending
For high-volume buyers (Northwind has 6,000 suppliers), the email-only path is too noisy. The portal lists every pending confirmation; Tom can confirm 12 at once. Same legal effect, same audit trail, faster ergonomics.
🔒 app.fintokenx.uk/buyer/pending
FX
📥
📁
⚙️
Pending confirmations
Tom W.

Pending confirmations · 12

Suppliers waiting on Northwind. Confirm to release their early payment.

Supplier
Invoice
Amount
Due
Submitted
Coppergate Joinery
FX-INV-23A4F · CG-2026-114
£10,000.00
21 Jul
2 hours ago
Stratton Logistics
FX-INV-23B11 · INV-22119
£3,420.00
14 Jul
3 hours ago
Marlow Print & Pack
FX-INV-23B12 · MP-9882
£1,890.00
14 Jul
4 hours ago
Halton & Crane
FX-INV-23B13 · HC-1140
£12,200.00
19 Jul
yesterday
Westgate Cabling
FX-INV-23B14 · WC-557
£780.00
12 Jul
yesterday
Confirm-selected mechanics: single transaction across all selected invoices; if any one fails (e.g. supplier was just frozen by Gate 4), the failed one is left in the list with a tooltip — the others succeed. Audit: the batch action records one parent audit entry (BATCH_CONFIRM) plus per-invoice child entries linking to it. This matters for Suspicious Activity Report (SAR) filings — if it later turns out one of those 12 was fraudulent, we can show the regulator that Tom confirmed it as part of a batch, not after individual scrutiny, and route blame accordingly.
C4 OBLIGOR_INSTRUCTED Payment instruction email
Sent 7 days before the invoice's due date and again on the morning of the due date. The first time this email reaches a buyer (across all their suppliers), the bank account in it is the buyer's first sight of FinToken X's collections account.
The collections account is per-seller, not per-buyer. Every invoice from Coppergate routes to the same FinToken X virtual account. This means Northwind builds up one trusted-payee record for "FinToken X — Coppergate" rather than a new payee per invoice — friction-free for Accounts Payable (AP) teams. Reference matching uses Levenshtein distance + invoice ID extraction + amount cross-check; we accept narrations like "FX INV 23A4F" or "Coppergate INV-23A4F" but flag anything ambiguous to operations.
Anti-fraud copy in the footer is deliberate: invoice-redirect fraud is a known UK threat where attackers email AP teams to "update" supplier bank details. The phrase "we never ask for changes to bank details by email or phone" is a counter-pattern.
C5 OBLIGOR_PAID Receipt acknowledgment
Sent on the inbound credit notification (Open Banking Account Information Service (AIS) or Bankers' Automated Clearing Services (Bacs)/Faster Payments Service (FPS) confirmation). Closes the loop for Tom's records.

Browser portal — what Tom sees between confirms

Most buyers will live entirely in email. The portal is a "drop in once a quarter" surface for AP teams who want to audit confirmations and reconcile against their own ledger.

🔒 app.fintokenx.uk/buyer/confirmed
FX
📥
📁
⚙️
Confirmed invoices
Tom W.

Confirmed invoices · Northwind Retail plc

Everything you've confirmed on FinToken X. Export to CSV for reconciliation.

Confirmed this quarter
142
£487,210 in face value
Paid out this quarter
£412,890
29 outstanding
Disputed (last 12mo)
3
All resolved
Suppliers active on FinToken X
37
Reference
Supplier
Amount
Confirmed
Due
Status
FX-INV-23A4F
Coppergate Joinery
£10,000.00
22 May
21 Jul
Outstanding
FX-INV-22A12
Coppergate Joinery
£8,400.00
02 Apr
01 Jun
Paid
FX-INV-22B19
Stratton Logistics
£3,420.00
12 Apr
11 Jun
Paid
FX-INV-22A88
Halton & Crane
£12,200.00
28 Mar
27 May
Disputed
Reconciliation export: CSV columns include Northwind's own supplier ledger reference (which we capture at C2), so AP teams can match line-for-line against their accounts payable system. We do not currently push to ERPs (NetSuite, SAP) — that's a partner-tier feature from partner. Disputed status: a buyer can dispute even after confirming, but only on grounds of "the goods/service didn't arrive as described" or "the line items are wrong" — never as a way out of paying. Disputes route to compliance with a hard 5-Business Day (BD) Service-Level Agreement (SLA).

Where it can go wrong

BranchWhat the buyer seesStateKnock-on
Buyer rejects at C2"Tell us what's wrong" form — wrong amount, wrong customer, didn't receive goods, suspicious. Submit free-text + structured reason.DISPUTEDSeller-side moves to DISPUTED; routed to compliance for review.
Buyer's email bouncesBuyer doesn't see C1.BUYER_NOTIFY_FAILEDSeller is asked to provide an alternate AP contact at the buyer; auto-retry to the alternate.
Northwind enters administrationAll Northwind-confirmed invoices freeze on the lender side at "Funded but at risk".BUYER_INSOLVENTLender notified; receivable enters insolvency workflow; recovery handled in lender flow.
Buyer pays the wrong amount"We received £9,800 but expected £10,000 — please send the £200 difference to the same account with the same reference."PARTIAL_PAYMENTLender informed; receivable held at FUNDED until full reconciliation.
Buyer pays to the supplier's old account by mistake"We can see Northwind paid Coppergate directly. The invoice was already funded — Coppergate now owes that money to FinToken X. We've contacted Coppergate; you don't need to do anything."OBLIGOR_MIS_DIRECTRecovery on the seller side; this is the failure mode that consumes the most ops time, so the buyer-side messaging is intentionally calm and final.
Buyer disputes after the lender has fundedBuyer sees a 2-BD response window from compliance.POST_CONFIRMATION_DISPUTELender's funding stays — they're not exposed to the buyer dispute, the seller is. Recovery from seller wallet or via lender's contractual recourse to the platform fee insurance pool.