# Aasa24 - Mobile Lending App with a Visa Credit Card Source: https://ordergroup.co/case-studies/aasa24-mobile-lending-app/ Last updated: 2026-10-10 > Aasa24 case study: a digital lending platform and mobile lending app in React Native for a KNF-regulated lender, with Visa card management and 47 releases. Table of Contents Project summary What we built Loan application Visa credit card Security and compliance Sales and marketing Why build with us Results FAQ Published October 10, 2026 ![Aasa mobile app – home screen and scheduled maintenance notice on two iPhones](https://ordergroup.co/media/images/aasa_maintenance.2e16d0ba.format-webp.fill-2880x1620.webp) FINTECH MOBILE LENDING REACT NATIVE # Aasa24 - Mobile Lending App with a Visa Credit Card Time to launch <6 months Releases 47 Development 3+ years Products 2 Client: [Aasa Polska S.A.](https://aasapolska.pl/) · Fintech Services: [Custom Software Development](https://ordergroup.co/services/software-development/custom-software-development/), [Mobile Apps](https://ordergroup.co/services/software-development/mobile-apps-development/) · [Fintech Software Development Services](https://ordergroup.co/fintech-software-development/) Case study: Aasa Polska, mobile lending Aasa24 takes a customer from the loan calculator to the signed agreement, repayments and a Visa credit card, all in one app for iOS and Android. We built the first public version in less than 6 months and have shipped 47 production releases since. ## Project summary In 2023 Aasa Polska needed a native app that would take over the whole loan process from its website and hotline, and later carry a new card product. The hard part was pace. Regulations and the loan offer change every few months, and from 1 January 2024 lending institutions in Poland came under the supervision of the Polish Financial Supervision Authority (KNF), while the project was already running. Work started in May 2023, and the first public release followed in November 2023. Aasa Polska S.A. is a Warsaw-based lending company with Scandinavian roots, operating in Poland since 2012 and entered in the KNF register of lending institutions under number RIP000127. ![Mobile banking app – virtual card dashboard and PIN setup screen on iPhone](https://ordergroup.co/media/images/aasa_app_card_1x_OuDeh2x.format-webp.width-2880.webp) ## Aasa24 covers three areas: Loans: application, agreement and repayments Visa credit card: application, PIN and limits Security, analytics and marketing tools ## What we built: a digital lending platform on iOS and Android Aasa24 leads the customer from the calculator, through the application and the signed agreement, to repayments, documents and harder moments such as payment holidays or refinancing. Customers choose from the Standard, Plus and Biznes loans, from PLN 1,000 to PLN 25,000 for 4 to 36 months (offer as of 10 September 2026). The native app is built in [React Native](https://ordergroup.co/services/software-development/mobile-apps-development/) for iOS and Android, with 84 screens covering more than 20 functional areas, and the same Order Group team [develops the backend](https://ordergroup.co/services/software-development/custom-software-development/) in parallel. We work in three stages: the loan MVP in 2023, a second stage with the card product in 2024-2025, and continuous development that runs to this day. Since November 2023 the app has had 47 production releases, and the code has changed in every month since the project started (as of September 2026). ## Mobile lending app: a loan application in 13 steps, open banking and an SMS signature Applying for a loan used to mean a multi-page form on the website or a call to the hotline. In Aasa24 it takes 13 short steps with a hint at each one, and the signed agreement arrives on the same phone. - The calculator uses sliders for amount and period, and Aasa changes its parameters in an admin panel, without an app store release. - The application takes 13 steps, fills in the address from the postcode and validates each field as the customer types. - An application started on the website continues in the app, exactly where the customer stopped. - Income is confirmed with a verification transfer or by logging in to the customer's bank ([open banking](https://ordergroup.co/glossary/open-banking/)), instead of a paper certificate. - The agreement is signed with an SMS code; the agreement, the [repayment schedule](https://ordergroup.co/glossary/repayment-schedule/) and the repayment history are available as PDFs. - After the payout the customer can pay an installment, repay early, take payment holidays, refinance or change contact details without calling the hotline. - More than 40 application and loan states are translated into plain messages, so the customer always knows which stage they are at. - Customers log in with a PIN, Face ID or Touch ID, Google, Apple or e-mail. ![Person holding phone](https://ordergroup.co/media/images/jonas-leupe-wK-elt11pF0-unsplash.format-webp.width-2880.webp) ## Card management app: a Visa credit card issued and managed in the app In the second stage Aasa introduced a card with a credit limit, and the whole card journey runs in Aasa24, from the application to everyday limits. A lending company's app now does what customers know from banking apps. - The card application includes online identity verification: a document scan and a face check, which the customer can retry. - The card is ready to pay at once: the PIN is set on the phone, and one button adds the card to Google Pay. - The customer can block and unblock the card, cancel it, and set daily and monthly limits; every change is confirmed with the PIN. - The card number and CVV are shown after the PIN and disappear after a moment or when the screen turns off. - Transaction history shows merchant names and filters, with PDF confirmations, statements, the repayment schedule and reminders about the minimum repayment. - The card is issued by an external, licensed card issuer in the Visa network, and we integrated the app with it. - The rollout went in stages: Android and a test group first, with features switched on remotely through feature flags, without a new version in the stores. ## Security and compliance with KNF requirements without slowing the customer down A [KNF-supervised lender](https://ordergroup.co/glossary/loan-institution/)'s app must protect data and money while staying out of the customer's way. Biometrics replace passwords, the PIN appears only where money is involved, and sensitive data hides itself. - Biometrics and an app PIN protect access; login data sits in the system's secure storage, and the app logs the customer out when the session is lost. - Card data is encrypted and decrypted on the device in our own native module, and the card PIN is never sent in plain text. - Identity is verified on several levels: KYC with a document scan, the PESEL (Polish national ID number) with an SMS code, and repeated or manual verification in difficult cases. - Screens with sensitive data are masked in analytics and session recordings, so neither the card number nor the PESEL reaches external tools. - Marketing consents and cookies are managed per channel in line with GDPR, and analytics starts only after consent. - External penetration tests were carried out, and the fixes were deployed in 2025. - We keep the app up to date with App Store and Google Play requirements on an ongoing basis. ![Smartphone with a padlock security screen on a desk (Unsplash, Dan Nelson)](https://ordergroup.co/media/images/photo-1584433144859-1fc3ab64a957.format-webp.width-2880.webp) ## The app as a sales channel: attribution, App Clip and marketing automation Aasa24 measures every step of the funnel, knows which campaign brought each customer, and lets Aasa's marketing team run its own communication. - The application funnel in Google Analytics and Firebase tracks about 50 events, from registration to the signed agreement. - AppsFlyer attributes campaigns, and the customer's source is passed on to the application. - Offline campaigns use a QR code: on iOS an App Clip opens straight from the code without installing the app and carries the source into the full app. - Deep links from ads, mailings and notifications open the right screen directly. - SALESmanago delivers push notifications and in-app chat, and the client's marketing team runs the campaigns. - Aasa's team edits the calculator, documents and messages in a panel. ## Why Aasa has worked with us since 2023: from an MVP to a permanent product team The project started as an MVP and became a permanent product partnership. The same core of developers has run the app since the first commit, so a new feature or a change forced by regulations never starts with onboarding new people. - A stable core of 3-4 mobile developers has worked on the app since 2023, supported by backend, DevOps, QA and a PM. - The team works in a rhythm of planning, daily meetings and retrospectives, with a code review of each of more than 800 pull requests. - Releases go out every 3-4 weeks on average, and production hotfixes take days. - CI/CD builds automatically to TestFlight, Firebase and Google Play, runs tests on every change and checks Apple certificates weekly, with an alert on Slack. - Four major React Native upgrades and the Android and iOS migrations went through without downtime for users. - More than 1,000 tasks ran in three streams: the build, the card and ongoing development. ![Order Group developers working at multi-monitor desks in an open-plan office](https://ordergroup.co/media/images/1180_r4x3.format-webp.width-2880.webp) ![Long-term platform support team (Unsplash)](https://ordergroup.co/media/images/photo-1551434678-e076c223a692fmj.format-webp.width-2880.webp) Time to launch **<6 months** From the first commit to the public release Releases **47** Production releases since November 2023 Development **3+ years** Continuous development since May 2023, as of September 2026 Products **2** Loans and a credit-limit card in one app Screens **84** In the iOS and Android app, with 5 login methods Code review **800+** Pull requests with code review, plus 160+ automated test files Answered by the team behind Aasa24 ## Building a lending app: questions we hear ![Mateusz Widenka](https://ordergroup.co/media/images/T02DHCC1Z-U039G6G3JS1-8e7d2cd80ccb-512.format-webp.webp) Mateusz Widenka Head of Delivery [Let's book a meeting](https://ordergroup.co/contact-us/) ### How long does it take to build a mobile app for a lending company? For Aasa24, less than 6 months passed from the start of work in May 2023 to the public release. The MVP covered the full loan process, with KYC, open banking and an agreement signed by SMS. ### Is React Native suitable for a financial app? Yes, as long as sensitive parts, such as card data encryption, live in native modules. Aasa24 has worked this way since 2023 and passed external penetration tests. ### How can a lending app verify a customer without a branch visit? With a document scan and a face check, a PESEL (Polish national ID number) confirmed by an SMS code, and income confirmed through online banking. ### Can a lending company offer a payment card in its own app? Yes, through a partner that issues the card. In Aasa24 the Visa card is issued by a licensed partner, Aasa Polska provides the credit limit, and the whole service sits in one app. ### How do you prepare a lending app for changes in consumer credit law? Offer parameters, documents and messages should be managed from a panel, and the team has to ship changes within weeks. The EU Consumer Credit Directive (CCD2) is to apply from 20 November 2026, and the Polish implementing act is still in progress. ### How does Order Group work with Aasa? As a [permanent product team](https://ordergroup.co/fintech-software-development/) that has developed the app and the backend since 2023, with releases every 3-4 weeks. Related case studies ## More fintech and mobile work [Show all Case Studies](https://ordergroup.co/case-studies/) - [RAW Cyber - Secure Custom Android Operating System](https://ordergroup.co/case-studies/raw-cyber-custom-android-os/) Even with the challenging demand, the team was able to provide designs and other OS features already. The team managed to deliver on time and they understand the specifics of the security industry. ![Maciej Łata](https://ordergroup.co/media/images/Maciej-Lata_Iigdcym.2e16d0ba.fill-140x140.format-webp.webp) Maciej Łata [Project Manager, RAW Sp. z o.o.](https://clutch.co/profile/order-group#review-1621505) [](https://www.linkedin.com/in/maciej-%C5%82ata-956a4548/) [![RAW Cyber - Secure Custom Android Operating System](https://ordergroup.co/media/images/RAW_Cyber_n0fZboI.format-webp.width-1280.webp)](https://ordergroup.co/case-studies/raw-cyber-custom-android-os/) - [Monetor - A Web Application for Analysing Business FX Risk](https://ordergroup.co/case-studies/monetor-currency-risk-management-software/) The team is doing a tremendously good job and they are evolving with us throughout the process. ![Henric Jonsson](https://ordergroup.co/media/images/henric_jHDE923.2e16d0ba.fill-140x140.format-webp.webp) Henric Jonsson [Head of Business Development, Monetor](https://www.linkedin.com/in/henric-jonsson/) [![Monetor - A Web Application for Analysing Business FX Risk](https://ordergroup.co/media/images/Monetor_MpBAYWZ_CwCbCSJ.format-webp.width-1280.webp)](https://ordergroup.co/case-studies/monetor-currency-risk-management-software/) - [BizBot - There's No Successful App Without Solid UX](https://ordergroup.co/case-studies/bizbot-fintech-ux-design/) Order Group invests time to define the scope and ask clarifying questions. Their channels of communication lead to smooth remote project management. ![Didrik Martens](https://ordergroup.co/media/images/Didrik-Martens.2e16d0ba.fill-140x140.format-webp.webp) Didrik Martens [BizBot CEO](https://www.bizbot.com/) [![BizBot - There's No Successful App Without Solid UX](https://ordergroup.co/media/images/BizBot_NYrzFbs.format-webp.width-1280.webp)](https://ordergroup.co/case-studies/bizbot-fintech-ux-design/) ## Related articles [Product & discovery March 22, 2022 4 min read Why Is Flexibility Such a Valuable Trait in Software Development?](https://ordergroup.co/blog/flexibility-software-development/) [Energy Updated February 22, 2023 4 min read Why Does Cybersecurity in the Energy Sector Matter?](https://ordergroup.co/blog/energy-sector-cybersecurity/) [Software engineering January 4, 2022 6 min read How to Build Your Own CMS and Why You Might Need One](https://ordergroup.co/blog/custom-cms-development/) ## Planning a lending or card product? Your message goes to ![Filip Szamborski](https://ordergroup.co/media/images/Filip_dTWHyBo.2e16d0ba.fill-432x432.format-webp.webp) Filip Szamborski Co-founder & CEO [](https://www.linkedin.com/in/filip-szamborski/) SO FAR WE HAVE WORKED WITH BRANDS LIKE: - [![AASA24](https://ordergroup.co/media/images/aasa24-mono.max-208x64.format-webp.webp)](https://ordergroup.co/case-studies/aasa24-mobile-lending-app/) - [![BizBot](https://ordergroup.co/media/images/bizbot-mono_StdJIUN.max-208x64.format-webp.webp)](https://ordergroup.co/case-studies/bizbot-fintech-ux-design/) - ![Avafin](https://ordergroup.co/media/images/avafin-mono.max-208x64.format-webp.webp) - ![Wonga](https://ordergroup.co/media/images/wonga-aplikacja-pozyczkowa-mono_.max-208x64.format-webp.webp) Thank you for your message. We read every message ourselves and get back to you within 48 hrs on business days. Something urgent? [hello@ordergroup.co](mailto:hello@ordergroup.co)