Home › Insights › Case Studies › Palisis
Case Study Travel Technology

Scalable mPOS Solution with PCI DSS Compliance for a Global Travel Tech Leader

Palisis

Key Challenges

  • Consistent UX across varied screen sizes, resolutions, and lighting conditions
  • High API latency and battery consumption with offline-first sync requirements
  • IoT device compatibility — card readers, scanners, printers across Android fragmentation
  • Securing transaction data and API credentials to meet PCI DSS compliance
  • No centralized logging or performance visibility at scale

Our Approach

Kansoft adopted a structured, engineering-first approach to address business and technical challenges:

  • Discovery & Alignment — Conducted stakeholder workshops to define requirements and success metrics
  • Experience-Led Design — Built adaptive UI frameworks optimized for multi-device environments (Custom software development)
  • Performance Engineering — Reduced system load through optimized API orchestration (API & integration development)
  • Robust Validation — Executed rigorous testing across devices and IoT integrations
  • Scalable Architecture — Designed systems to support future growth and transaction scale (Cloud & DevOps alignment)
  • End-to-End Delivery — Managed the complete lifecycle from design to deployment with continuous monitoring

Our Solution

Adaptive UI & experience layer

  • Developed reusable, responsive UI components ensuring consistency across devices
  • Optimized touch interaction standards (48x48 dp) for improved usability

Performance Optimization

  • Implemented threshold-based API calls to minimize unnecessary requests (API Optimization)
  • Enabled offline-first architecture with local caching and auto-sync capabilities

IoT & hardware integration

  • Created a comprehensive device compatibility framework
  • Enabled seamless interaction with card readers, barcode scanners, and printers

Security & Compliance

  • Applied AES encryption and token-based authentication
  • Secured API keys via server-side mechanisms
  • Ensured full compliance with PCI DSS standards (Cloud infrastructure & security)

Data, analytics & monitoring

  • Centralized log management with batch processing
  • Integrated real-time analytics using Firebase
  • Enabled scalable event tracking and performance insights (Data Platform & BI alignment)

Key Integrations

  • Payment Gateway: Adyen
  • ERP Systems: SAP, Oracle
  • CRM Platforms: Salesforce, HubSpot
  • IoT Devices: Card readers, barcode scanners, printers

Business Impact

  • 25% improvement in user satisfaction through enhanced UI/UX
  • 30% reduction in latency, improving transaction efficiency
  • 95% device compatibility across IoT ecosystem
  • 100% PCI DSS compliance ensuring secure transactions
  • 40% faster issue resolution through real-time monitoring and analytics

Why Kansoft for travel technology

  • Domain Expertise — Deep understanding of travel workflows including bookings, ticketing, and in-transit payments
  • Engineering Excellence — Strong capabilities in building scalable, integration-heavy platforms
  • Security-First Approach — Proven expertise in payment security and global compliance
  • Integration Leadership — Seamless connectivity across ERP, CRM, payment gateways, and IoT ecosystems
  • Future-Ready Solutions — Architectures designed to scale with evolving business needs

Client Overview

Palisis, a leading travel technology company, aimed to modernize its mobile Point of Sale (mPOS) ecosystem to meet the evolving needs of a global customer base. From seamless integrations with booking systems to optimizing payments across devices, Kansoft delivered a scalable, secure, and high-performance mPOS solution tailored for a global travel technology enterprise.

  • Industry Travel Technology
  • Technology Stack Figma, SQLite, Room Database, Firebase Analytics, AES Encryption, SSL/TLS, Adyen, SAP, Salesforce
  • Services Used Custom software development, API & integration development, Cloud & DevOps, Data & AI, SaaS product development
FAQ

Questions about this engagement

How was PCI DSS compliance achieved on the mobile devices?

Transaction data was protected with AES encryption and token-based authentication, and API keys were moved to server-side storage rather than being held on the device. The platform meets PCI DSS in full.

Does the app keep working when a device loses connectivity?

Yes. The architecture is offline-first: transactions are cached locally and synced automatically once the connection returns, which matters for ticketing in transit and at remote sites.

Which point-of-sale hardware does it support?

Card readers, barcode scanners and printers, through a device compatibility framework built to absorb Android fragmentation. Coverage across the client's IoT ecosystem reached 95%.

Which business systems does the platform integrate with?

Adyen for payments, SAP and Oracle on the ERP side, and Salesforce and HubSpot for CRM, alongside the connected point-of-sale hardware.