FOR CIOs & CISOs — ARCHITECTURE BRIEF

Your Board Wants AI Fraud Detection.
Every Vendor Wants Your Data.

FraudGuard runs 6 AI-powered fraud detection engines entirely inside your SAP S/4HANA. No GPU procurement. No data egress. No 18-month implementation. One MTA file, 12 minutes, and your accounts payable pipeline has real-time AI fraud detection — without a single byte of data leaving your system.

12 Min
Full Deployment
Zero GPU
Infrastructure
0 Bytes
Leave SAP
SOC 2 + GDPR
+ ISO 27001
SOC 2 Type II
GDPR Art.25
ISO 27001
Zero GPU
Zero Data Egress
Four Dilemmas, Four Resolutions

The CIO's Four Dilemmas — Solved

Your board read about AI-powered fraud detection. Your CISO wants zero data egress. Your CFO wants ROI in 90 days. Your procurement team wants it deployed yesterday. Here is how FraudGuard resolves all four constraints simultaneously.

DILEMMA 01

Build vs. Buy

The Problem

18 months, $2M+ custom development, 5+ data scientists, a system your team cannot maintain after the consultants leave.

FraudGuard Resolution

12-minute MTA deployment, a fraction of traditional cost. Pre-trained on 50K+ fraud signatures. Maintained by Zynoviq. Your team manages zero ML infrastructure.

DILEMMA 02

GPU Cost Explosion

The Problem

$50K-500K/year in NVIDIA GPU clusters before a single prediction runs. 12-week procurement lead times. Cloud GPU billing surprises.

FraudGuard Resolution

CPU-only inference across all 6 engines. <2GB memory per engine. Runs on standard SAP BTP Cloud Foundry allocation. Minimal infrastructure cost.

DILEMMA 03

Data Sovereignty

The Problem

External API calls, data egress to vendor clouds, GDPR exposure, board-level risk. Every AI vendor wants your transaction data on their infrastructure.

FraudGuard Resolution

100% on-premises within your SAP BTP tenant. Zero data extraction. Zero external API calls for inference. Your HANA, your data, your AI.

DILEMMA 04

Integration Complexity

The Problem

Middleware, ETL pipelines, API gateways, custom authentication, 6-month integration projects. Each new tool expands your attack surface.

FraudGuard Resolution

One MTA on SAP BTP. Inherits your existing XSUAA authentication, Event Mesh subscriptions, and HANA HDI containers. Auto-configures on deploy.

Technical Architecture

Architecture Deep Dive

Four layers. Zero new infrastructure. No new VMs. No new network topology. FraudGuard deploys as a BTP service alongside your existing SAP landscape.

Layer 1

SAP Transaction Layer

Fiori Launchpad and SAP GUI serve as the user entry points. Transactions flow through standard T-codes — MIRO (invoice verification), FB60 (vendor invoices), ME21N (purchase orders), VF01 (billing documents). No modifications to existing transaction flows.

SAP Fiori Launchpad
SAP GUI
MIRO / FB60 / ME21N / VF01
Standard Business Events
Layer 2

SAP Event Mesh

Pre-commit business events are published to SAP Event Mesh with <10ms delivery latency. FraudGuard subscribes to transaction events in real time. No polling, no batch processing, no ETL. Pure event-driven architecture.

Pre-Commit Event Publishing
<10ms Event Delivery
Topic-Based Subscriptions
At-Least-Once Delivery Guarantee
Layer 3

FraudGuard Engine Layer

Six parallel detection engines run on CPU. Each engine applies its specialized algorithms independently. Results are combined through a weighted ensemble scoring model. Total inference time: <500ms across all 6 engines.

6 Parallel Detection Engines
CPU-Only Inference
Weighted Ensemble Scoring
<500ms Total Inference
Layer 4

Decision Layer

Ensemble scores map to three actions: BLOCK (auto-reject, score >0.85), REVIEW (human queue, score 0.50-0.85), ALLOW (pass-through, score <0.50). Thresholds are fully configurable per engine, per company code, per vendor group.

BLOCK / ALLOW / REVIEW Actions
Configurable Thresholds
Per-Company-Code Rules
SHAP Explainability on Every Decision

No New Infrastructure. Period.

No new VMs. No new network topology. No new firewall rules. FraudGuard deploys as a standard BTP service using a sidecar architecture: a Node.js CAP service handles SAP integration and event routing, while a Python ML sidecar runs the 6 detection engines. Both run in the same Cloud Foundry space. Both use your existing HANA Cloud instance.

Node.js CAP ServicePython ML SidecarSingle CF SpaceExisting HANA Instance

Data Flow: What Happens When an Invoice is Posted

1
Invoice Posted
User posts invoice in MIRO/FB60
2
Event Published
SAP Event Mesh fires pre-commit event
3
6 Engines Analyze
Parallel CPU inference in <500ms
4
Ensemble Score
Weighted combination of all 6 results
5
Decision Returned
BLOCK / REVIEW / ALLOW sent to SAP
For CISOs — Security Architecture

Security Your CISO Will Actually Approve

Every security capability FraudGuard provides — from zero data egress to tamper-proof audit trails — is designed so your CISO can approve deployment in 48 hours, not 6 months.

Zero Egress

Zero Data Egress

All inference happens on your SAP BTP tenant. Zero data transmitted to Zynoviq or any external service. The only outbound call: a 32-character license validation ID. No business data. Ever.

AES-256

AES-256 Encryption

Data at rest encrypted in HANA Cloud with AES-256. Data in transit protected by TLS 1.3. HSM-compatible key management with automated 24-hour key rotation. Zero plaintext secrets anywhere in the stack.

Native IDP

SAP-Native Identity

Inherits your existing Identity Provider — SAML 2.0, OAuth 2.0, OpenID Connect. No new credentials. No separate user directory. XSUAA role inheritance. Your existing SSO covers FraudGuard on Day 1.

Explainable AI

SHAP Explainability

Every AI decision comes with a human-readable SHAP explanation. No black boxes. Auditors see exactly why each transaction was flagged. GDPR Article 22 compliant — automated decisions are always explainable.

SHA-256

Tamper-Proof Audit Trail

SHA-256 hash-chained audit trail. Every detection, every decision, every override logged with immutable cryptographic proof. 7-year retention. SOX-compliant evidence packaging for external auditors.

Certified

Compliance Certifications

SOC 2 Type II independently audited. ISO 27001 certified. GDPR Article 25 compliant. HIPAA-ready for healthcare. PCI-DSS Level 1 for payment processing. NIST Cybersecurity Framework aligned.

Zero data sent to Zynoviq. Zero data sent to any cloud.

Your HANA. Your data. Your AI.

SOC 2 Type IIISO 27001GDPRHIPAAPCI-DSS L1NIST CSF
Performance Benchmarks — CPU Only

GPU-Class Performance. Zero GPUs.

Every benchmark below runs on standard CPU infrastructure. No NVIDIA. No AMD. No GPU cloud subscriptions. All 6 engines complete inference within SAP's 500ms pre-commit processing window.

End-to-End Latency (All 6 Engines)

P50
320ms
P95
450ms
P99
480ms
P99.9
498ms
All percentiles within SAP's 500ms pre-commit processing window

Per-Engine Performance

Duplicate Payment

47K invoices in 3.2s batch

156ms single

Contract Leakage

200 contracts validated in 8s

40ms per contract

Pricing Fraud

2,300 SKUs analyzed in 1.2s

0.5ms per SKU

Three-Way Match

15K matches/day capacity

240ms per match

Transfer Pricing

14-country OECD validation

890ms per validation

Tare Weight

Statistical baseline build

<200ms per check

Infrastructure Requirements

Memory<2GB per engine
ComputeCPU-only (zero GPU)
Uptime99.97% SLA
StorageExisting HANA Cloud

Cost Comparison

GPU-Based Competitors
$50,000/month

NVIDIA A100 clusters + cloud compute + MLOps

FraudGuard
Contact Sales for Pricing

Standard BTP infrastructure — all 6 engines included

Dramatically lower infrastructure cost
12-Minute Deployment Playbook

From Download to Live Detection in 12 Minutes

No architecture review board. No 6-week procurement cycle. No custom integration project. Your Basis team can deploy FraudGuard before lunch — and have real-time fraud detection running on production transactions by the afternoon.

0-2 minDownload

Download MTA from SAP BTP Cockpit

Single .mtar binary containing all 6 FraudGuard engines, Fiori dashboard, HANA HDI containers, XSUAA roles, Event Mesh subscriptions.

2-4 minDeploy

Deploy with One Command

cf deploy zynoviq-sap-plugin-platform.mtar — Cloud Foundry handles service creation, binding, routing, and health checks automatically.

$ cf deploy zynoviq-sap-plugin-platform.mtar
4-8 minConfigure

Service Bindings Auto-Configure

XSUAA authentication, Event Mesh subscriptions, and HANA HDI containers bind automatically. Zero manual configuration files.

8-10 minInitialize

Fraud Signatures & Baselines Load

FraudGuard loads 50K+ fraud signatures, builds behavioral baselines from your historical transaction data. Models ready without training.

10-12 minLive

First Transaction Flows Through

First real transaction analyzed by all 6 engines. Dashboard live in Fiori Launchpad. Alerts configured. You are protected.

Before vs. After: IT Team Impact

Category
Before
With FraudGuard
Timeline
18 months
12 minutes
Cost
$2M+ consulting + infra
Contact Sales
Model Training
3-6 months
Zero (pre-trained)
Hardware
GPU clusters
Standard CPU
Data Science Team
5+ FTEs
Zero

“Your CISO approved in 48 hours. Your team deployed before lunch.”

The fastest enterprise AI fraud detection deployment in history.

0
Architecture Reviews Required
0
ABAP Transports Required
1
CF Command to Deploy

The Fastest Enterprise AI Fraud Detection
Deployment in History.

Six engines. Real-time pre-commit detection. 99.1% accuracy. Zero GPU. Zero data egress. Deployed in 12 minutes. Your board gets AI-powered fraud detection. Your CISO gets zero risk. Your CFO gets a fraction of competitors' cost. Everyone wins.

12 min
Deploy
Zero GPU
Infrastructure
0
Data Egress
23:1
ROI Ratio
99.1%
Accuracy
SOC 2 Type IIISO 27001GDPRSAP BTP NativeZero GPU

Explore FraudGuard for other stakeholders