Kobana

The debtor sorts it out alone — without exposing the debt to anyone else

A secure link with an expiration date, identity verification before showing amounts, an agreement simulator and online acceptance. And if the link ends up in the wrong hands, "that's not me" cuts off all contact with one click.

Debtor Portal
Debtor portal — open items with updated amounts and a payment button
30 days
link validity
SHA-256
token stored only as a hash
4 digits
identity verification
30 min
session after verification

From link to closed negotiation, without tying up your team

1

The operator issues the link

With one click from the customer record, or automatically in the dunning message. Valid for 30 days, with revocation and rotation.

2

The debtor confirms their identity

Before seeing any amount, they enter the last 4 digits of their tax ID (CPF/CNPJ). Until then, the portal shows only the first name and the creditor.

3

They review and negotiate

They see open charges, simulate an agreement within the active offer, and accept it with IP and terms recorded.

4

Everything gets logged

Views, verification, simulation, acceptance and invalid attempts all go into the access log.

Debtor portal — identity confirmation with the last 4 digits of the document

Before any amount, the portal shows only the first name and the creditor — and asks for the last 4 digits of the document.

Secure self-service for both the debtor and the creditor

Secure by Construction
A token valid for 30 days, revocable and rotatable, stored in the database only as a SHA-256 hash.
  • A database leak doesn't expose valid links
  • Immediate revocation by the operator
  • Reissue without affecting history
Identity Verification
Amounts only appear after confirming the last 4 digits of the document. A 30-minute session after verification.
  • Pre-verification shows only first name / company name
  • 5 attempts every 15 minutes
  • Anti-enumeration with uniform responses
Masked PII
Document and email appear masked (***8900, jo***@domain) even after verification.
  • Minimal exposure of personal data
  • Aligned with LGPD
  • No third-party data on screen
Agreement Simulator
Discount and installments always stay within the creditor's active offer. A tampered proposal from the browser is rejected on the server and logged.
  • Real-time simulation
  • Acceptance records IP and terms
  • Agreement created with installments instantly
"That's Not Me"
Whoever receives the link by mistake cuts off all contact with one click — no need to validate someone else's document.
  • Third-party flag on the record
  • Suppression across all channels
  • Links automatically revoked
Complete Access Log
Every view, verification, simulation, acceptance and invalid token recorded — evidence of who saw what, and when.
  • Rate limit on navigation and actions
  • Tampered attempts logged
  • Responsive: works well on mobile
Agreement simulator with installments within the creditor's active offer

The agreement simulator only presents combinations within the offer defined by the creditor.

Real use cases

Payment without a rep

The dunning message carries the portal link. The debtor confirms their identity, sees the updated amount and settles it — without tying up your team.

Agreement at 2 a.m.

The simulator works around the clock. The debtor accepts an installment plan at 11 p.m. on Saturday; your team finds the agreement already created on Monday.

Link forwarded by mistake

The email was old and the link reached someone else. One click on "that's not me" and all contact is suppressed — without exposing the debt to the third party.

Frequently asked questions

Self-service that protects both sides

See the full debtor portal: verification, simulation, acceptance and the log of every access.