SPID

Interbank transfers in USD within Mexico for corporations and financial institutions. Same robust architecture, adapted for dollar operations between Mexican bank accounts.

What is SPID?

SPID (Sistema de Pagos Interbancarios en Dólares) is the dollar settlement system for USD transfers between Mexican bank accounts, bypassing the international correspondent-banking network. Operational since 2016, with an 08:00–18:00 (Mexico City) operating window on business days. It serves corporate treasuries, maquilas, USD payroll for executive personnel, and USD commercial settlements between Mexican entities.

What is InterPago?

InterPago is the integration layer between your institution’s core banking system and the interbank payment systems. For SPID, we cover the full cycle: message handling, digital signature, personas-morales validation, USD balance management, electronic receipts, and reconciliation. The platform is delivered production-ready and connects to your core without requiring you to rewrite it.

We build on the official specification, not on third-party interpretations. Every component is modular, observable, and audit-ready from day one.

Problems we solve

Mid-day certificate rotation

A certificate expiring during the operating day creates a queue and rejections. We implement overlapping rotation with preload, with no traffic interruption.

Balance race conditions

Peak loads (payroll, end-of-day) can cause projected-balance inconsistencies. Per-shard processing and atomic reservations eliminate the condition.

Receipts out of sync on reversals

Reversing an operation when the receipt was already issued requires careful state handling. Our state engine guarantees consistency between payment, reversal, and receipt.

Late acknowledgments and double charges

An ack outside the window can trigger retry and double charge. Idempotency by tracking key plus persistent dedup eliminates the risk.

Post-deploy payment-flow simulation

Every deployment is validated against the simulator before touching production — synthetic end-to-end payments — and only promotes if all flows pass.

One-click switch between primary and backup

Failover and failback between primary and backup channel from a single button on the operations dashboard — no manual scripts, no cross-team coordination.

Reconciliation with integrated external systems

Cross-reconciliation across the various systems integrated with InterPago — a single dashboard shows breaks by system, counterparty, or transaction type.

Main features

The platform is designed for high volume, high availability, and traceability — these are the architectural components your team will encounter in every implementation.

01

Authentication & Authorisation

SSO with your corporate identity provider (SAML / OIDC), service identity via mTLS, role-based access control, and identity propagation across the entire processing chain.

02

Security & Key Custody

Encryption at rest and in transit. Private-key custody in HSM/Vault — never exposed on disk. Automated secret rotation.

03

Immutable Logs & Traceability

Immutable logs, structured events, and end-to-end trace per transaction. OpenTelemetry-compatible.

04

Reporting & Reconciliation

Pre-built operational and regulatory reports. Multi-source reconciliation engine that identifies breaks by counterparty and transaction type.

05

Recovery & Resilience

Automated failover, journal replay, idempotent retries. Documented and measurable RTO/RPO targets.

06

Multiple Endpoints & Integrations

Simultaneous connection to multiple cores, counterparties, and regulators. Reusable adapters — no bespoke code per new destination.

07

Message Transformations

Protocol mapping (ISO 20022, legacy and custom formats), schema evolution, and lossless normalisation between formats.

08

Configurable Validations

Schema, business-rule, compliance, and counterparty validations — all modifiable without touching code.

09

Circuit Breakers, Throttling & Backpressure

High-volume resilience patterns — circuit breakers per channel and counterparty, adaptive throttling, backpressure to prevent cascading failures.

10

Dynamic Workflow Orchestrator

Orchestration of payments, validations, retries, and compensations defined as a flow — modifiable hot, no redeploy, with visibility into every step.

11

Customisable Rule Engine

Business rules configurable by your team: account validation, per-counterparty limits, cut-offs, routing. Production changes without touching code.

12

Modular Architecture for Distribution

Components independently deployable across data centres or cloud regions, with cross-site replication and consistency for HA and fault isolation.

13

Real-Time Analytics

Automated detection of operational anomalies — rising returns/rejections, throughput drop, latency degradation, counterparty pattern deviation. Actionable alerts, not just dashboards.

Compliance & controls

Every component is designed to pass regulatory inspections and internal audits — not as an add-on, but as a core part of the platform.

Audit & Traceability
01

Per-Transaction Trace and Audit

Immutable log of every operation, structured events, and end-to-end trace, ready to present to auditors.

02

Regulator-Aligned Retention Policy

Immutable retention per regulator-mandated periods, with automated lifecycle to cold storage.

Operational Controls
03

Maker-Checker

Dual human validation on sensitive operations: operator initiates and reviewer approves before execution.

04

Dual Key Control

Dual custody of cryptographic keys and critical secrets — no individual has exclusive access.

05

Secure Sessions and Segregation of Duties

Authenticated sessions with expiry, RBAC with clear boundaries between development, operations, treasury, and compliance.

Security & Privacy
06

Digital Signature on Every Message

Cryptographic signature on every outbound and inbound message; verification mandatory before any processing.

07

Restricted PII Access

Personally identifiable data masked by default in logs, dashboards, and reports; full access only to authorised roles.

08

Sanctions and Watch-List Integrations

Pre-built hooks for OFAC, UN, internal, and specialist provider lists — configurable update cadence.

Reporting & Continuity
09

Regulatory Reports on Official Cadence

Automated generation in mandatory format and cadence; direct submission to official platforms.

10

Incident Reporting, RCA and Submissions

Reporting templates, structured Root Cause Analysis process, and on-time submissions per regulatory SLAs.

11

Regular Business-Continuity Drills

Periodic contingency drills against the simulator, with evidence of results ready for audit.

Ready to modernize your payment operations?

Whether you're starting from scratch or modernizing a legacy system, we'll help you get there — securely, on schedule, and with no obligation until you're ready.

Request a Demo sales@interpago.com.mx
sales@interpago.com.mx Raise a Ticket