OpenCI

by texxen

The field data collection infrastructure a credit investigation operation runs on.

978
field agents working on the platform across S.P. Madrid operations

835 of them carry live location tracking. 1,642 people hold a login on the platform: field, office, quality assurance and administration.

stages engaged

5 of 5
  1. diagnose
    [wk]
  2. design
    [wk]
  3. build
    [wk]
  4. launch
    [wk]
  5. operate
    and running

Every stage was engaged and operate has no end date, so it runs off the edge. Week counts per stage are not published for this account.

Role
Designed, built and operated by texxen
Surface
Mobile app for iOS and Android, and a web command center
Status
In production and in continuous development
Modules
Field capture, command center, form and report builders, audit engine
01Problem

Credit investigation happens where the office cannot see it.

Fig. 1. 835 of the 978 field agents, live on the map. Staging environment, mock data.
Fig. 1. 835 of the 978 field agents, live on the map. Staging environment, mock data.

An investigation is a field job. Someone has to stand at an address, speak to a neighbour, photograph a house and form a judgement about whether a borrower is who and where they say they are. Under S.P. Madrid’s operations, 978 of them work across the country at the same time.

The moment the investigator leaves the office, the operation goes blind. It stays blind until paperwork comes back, sometimes days later, and what comes back is a description of the visit rather than the visit itself.

Blindness of that size does not stay a management inconvenience. It becomes a credibility problem, because a recorded visit and an actual visit look identical on paper. The operation could not reliably separate a slow route from a route that was never driven.

That puts fraud exposure on the lending institution and leaves honest investigators under the same suspicion as everyone else.

02Challenge

Visibility is easy to buy for ten people and impossible to buy for 978.

Fig. 2. The supervisory answer, and what replaced it. Drawn.
Fig. 2. The supervisory answer, and what replaced it. Drawn.

The obvious answer is supervision, and it does not survive contact with the numbers. Supervisors scale linearly with headcount, cost linearly with headcount, and produce a report of a report rather than evidence. The layer meant to solve the blindness becomes another place information gets lost.

The second problem is where proof has to come from. Evidence of a visit is only worth anything if it is captured at the moment of the visit, and that is exactly the moment nobody is watching and the investigator has every reason to keep moving.

Any verification that costs the fieldman extra time gets worked around, and a verification that gets worked around is worse than none, because it looks like assurance.

So the requirement was narrow and awkward: make 978 people legible to the office in real time, without inserting a layer of people between the field and the decision, and make the proof a by-product of doing the job.

03Journey

The order the work happened in is the argument.

Fig. 3. Four phases. Each one a precondition for the next. Drawn.
Fig. 3. Four phases. Each one a precondition for the next. Drawn.

The app came first. Nothing downstream can be trusted if the input is a description written after the fact, so the work started at the point of capture. The design constraint was that filling the form had to be faster than writing the report by hand. Verification came along as a consequence of that rather than as an addition to it, which is the only version of it that survives contact with a working fieldman.

Then the office. With capture structured, the command center could be built around the record the app already produced. Building the office view first would have produced a dashboard fed by whatever the field happened to send. Building it second meant it could be fed by a record with a known shape.

Then the configurable shape. Different institutions want the investigation in different shapes: different fields, different criteria, different report formats. Every client-specific accommodation becomes a variant, and every variant becomes a special case someone has to remember. Seen from the client’s end it is a flexibility problem; seen from the operation’s end it is a standardisation problem. They are the same problem, and one answer closes both: make the shape itself configurable, and push that logic back into the form and rating builders, so a new investigation type is defined rather than released.

Fig. 4. A report per client, and one configurable shape. Drawn.
Fig. 4. A report per client, and one configurable shape. Drawn.
Fig. 5. The form builder that made the configurable shape possible: a new investigation type is defined rather than released. Staging environment, mock data.
Fig. 5. The form builder that made the configurable shape possible: a new investigation type is defined rather than released. Staging environment, mock data.

Then integrity. Anomaly detection was last because it needs a baseline, and the baseline is the accumulated history of what real visits look like. Calibration ran roughly two to three months.

Then sideways. The same infrastructure carried the adjacent work: demand letters, skips and collect, litigation, TeleCI.

04Solution

The record starts at the address, not at the desk.

A mobile app for iOS and Android. Agents receive and accept assignments, then work each task through a fixed sequence: driving, transfer presentation, disposition, complete. Fields are structured and validated at the point of capture. Photographs are geotagged. Time on task is recorded as the work happens rather than reported afterwards.

Fig. 6. One agent’s route as the office sees it.
Fig. 6. One agent’s route as the office sees it.
The same task on the phone: transfer presentation.
The same task on the phone: transfer presentation.
And disposition. Staging environment, mock data.
And disposition. Staging environment, mock data.

The investigator fills the form because it is the fastest way to finish the job. The evidence is what falls out of that: the geotag, the timestamp, the activity log, the distance driven between one address and the next. The office sees the same record at the same moment. Nothing is retold, so nothing is lost in the retelling.

In the office: live task tracking with position, route, distance and ETA, grouped by contract. Bulk assignment and endorsement upload. A report builder where every field is shown or hidden per report, with saved layouts and exportable presets. Written assessment aggregated from captured fields. In-app delivery, composed and sent from inside the platform, compressed and encrypted. Workforce management. An audit trail carrying every change with operator, timestamp and before-and-after values. New investigation types and criteria defined by the operation itself.

Fig. 8. Endorsement management across the whole book. Borrower fields are masked at source. Staging environment, mock data.
Fig. 8. Endorsement management across the whole book. Borrower fields are masked at source. Staging environment, mock data.

A short-cut visit gives itself away three ways: a disposition closed far from the target address, a run of tasks closed impossibly fast, and no movement between two separate addresses. None proves anything alone. Each raises a ticket with the evidence attached, and a person reads it.

Fig. 9. The concern queue. Every flag is a ticket a person reads.
Fig. 9. The concern queue. Every flag is a ticket a person reads.
One ticket, opened: the threshold, the measurement and the gap between them.
One ticket, opened: the threshold, the measurement and the gap between them.

Detection is the easy half. The hard half is choosing where the line sits. A threshold set too tight floods the queue with honest work until reviewers stop opening it, and a system nobody reads is worse than no system, because it looks like assurance. Set too loose it catches nothing and looks identical from the outside. Every rule is a number the operation owns, with a history of who changed it, which is why calibration ran two to three months rather than two to three weeks.

Fig. 7. Filled marks are tickets raised. The calibration question is never how much it detects, but how much a reviewer will still open. Illustrative, not measured.
Fig. 7. Filled marks are tickets raised. The calibration question is never how much it detects, but how much a reviewer will still open. Illustrative, not measured.
Fig. 10. Every rule is a number the operation owns, with a history of who changed it. Staging environment, mock data.
Fig. 10. Every rule is a number the operation owns, with a history of who changed it. Staging environment, mock data.

The office sees 835 agents in real time without a supervisory layer.

Visibility became a property of the record rather than of someone watching: 835 of the 978 agents on the platform report their position as they work. Proof is captured as a by-product: the investigator fills the form because it is the fastest way to finish the job, and the geotag, the timestamp and the activity log come with it.

05Outcome
  1. 780,000accounts completedworked and closed since launch
  2. 30,000 to 40,000field visits a weekall services, around 5,000 a day
  3. 10 to 25visits per agentin a single day

S.P. Madrid operations, across all OpenCI services. A company in the same group as texxen, stated as a related party. Screens are captured from a staging environment carrying mock data, and diagrams are drawn. No production record appears here.

what has been done, and for whom