Integrations & API

Connect CEFCore with your existing tools and workflows through enterprise integrations and our robust API.

Authentication & Identity

OpenID Connect SSO

Staff sign in through your organization's OpenID Connect identity provider (authorization code flow with PKCE), with an email-domain allowlist and just-in-time user provisioning. Sessions use short-lived JWT access tokens with refresh token rotation.

✓ Active

SAML 2.0 SSO

Single Sign-On via SAML 2.0 with any standards-compliant identity provider, configured per organization.

✓ Supported

API Key Authentication

Scoped API keys for customer portal access, limited to the key holder's own entities, with SHA-256 hashed storage.

✓ Active

Financial Integrations

Bank Statement Import

Import bank activity from BAI2, CAMT.053, MT940, OFX/QFX and CSV files, with incoming payments matched to loans and notes and routed to staff review when a match is uncertain. Plaid connector code exists, but Plaid bank feeds are not currently available: tenant setup is default-off, and no Plaid Link flow or verified Sandbox connection is provided.

✓ Available

ACH / NACHA File Generation

Builds NACHA-formatted ACH files for loan payment collections and note payments, with maker-checker approval, for your staff to upload to your bank. CEFCore does not transmit files to a bank. Returns are recorded from your bank's return files or reports.

✓ Available

1099 Tax Reporting

IRS Form 1099-INT preparation for investor interest, recipient copies, and an XML export. Forms are filed with the IRS by your team; CEFCore does not e-file.

✓ Available

Accounting Exports

CSV export of the trial balance, profit & loss and subledger-to-GL reconciliation for use in your accounting system or spreadsheets. There is no live QuickBooks connection.

✓ Available

Loan Funding Wires

Loan funding requests with wire instruction validation, two-person approval, held-back fee netting and GL posting. The wire itself is released through your bank.

Custom Integration

DocuSign

Intake of completed DocuSign application envelopes into CRM and the approval queue, plus archiving of executed documents. Documents are sent and signed in your own DocuSign account.

Custom Integration

Enterprise Infrastructure

PostgreSQL Database

PostgreSQL 16 with row-level security, per-fund data isolation, and nightly automated backups.

✓ Active

Redis Caching

Redis-backed rate limiting and caching. Token bucket rate limits protect API endpoints.

✓ Active

Notifications

In-app notifications for approvals, maturities, delinquencies and system alerts. Outbound email notifications are currently turned off.

✓ Active

RESTful API

CEFCore provides a comprehensive REST API for programmatic access to your data and operations. Build custom integrations, automate workflows, and connect with third-party tools.

API Features

  • •RESTful architecture with JSON responses
  • •JWT bearer tokens and scoped API key authentication
  • •Token bucket rate limiting per user, IP address and endpoint
  • •Idempotency keys for safe financial operations
  • •Per-entity data scoping via the x-entity-id header
  • •Immutable audit trail for financial and administrative changes

API Endpoints

  • •Loans: Origination, servicing, payments, accruals
  • •Investor Notes: Management, interest, cash flows
  • •General Ledger: Double-entry journal entries
  • •Cash: Receipts, disbursements, reconciliation
  • •CRM: Church and contact management
  • •Reports: Custom report builder with templates

Need a Custom Integration?

Enterprise customers can request custom integrations tailored to their specific needs. Our team will work with you to build seamless connections with your existing systems.

Integration Support

Documentation

Comprehensive guides and tutorials for all integrations and API endpoints

Developer Support

Dedicated support team for API, authentication, and integration questions

Professional Services

Custom integration development and onboarding for Enterprise customers