Category
15 articles
Carrier APIs are often scoped as a label-printing feature, yet the real contract spans manifests, asynchronous events, exception taxonomies and returns. This article argues for treating UK parcel integration as a reconciliation system with an explicit event model, ownership and a peak-ready test plan.
Integration failure often starts not with a broken link but with a producer that quietly outpaces its consumer. This article argues that queue depth, retry budgets and consumer lag belong in the service contract, not only on an operations dashboard.
TLS certificates are often treated as housekeeping until an endpoint stops trusting another. A governed renewal discipline treats them as integration controls: owned, inventoried, scheduled around UK bank holidays and change freezes, evidenced by automation, and proven through failure testing.
Postcodes, VAT rates, company numbers and currency codes are often handled as fixed lookups, yet their authority sits outside the organisation. This article sets out a practical way to treat externally maintained reference data as governed integration dependencies, with clear ownership, change signals and failure behaviour that protects transactions.
TUPE transfers are usually managed as an HR and legal programme, but the interfaces remain and the operational knowledge often leaves with the outgoing team. A minimum handover ledger can turn the transfer into a controlled integration event rather than an unplanned knowledge loss.
Integration audits often stop at APIs and file transfers, leaving embedded vendor scripts outside the governance frame. Yet payment widgets, chat tools, analytics tags and consent code form a broad dependency surface that can read page content, call endpoints and fail without warning. This article sets out a practical control model for inventorying those scripts, mapping their reach, testing their behaviour and assigning clear ownership.
The PSTN withdrawal is often framed as a telecoms procurement task. For many UK organisations it is an integration migration: a set of undocumented analogue interfaces that carry alarms, telemetry and escalation behaviour. This article sets out an evidence-led audit that finds those dependencies before the dial tone disappears.
Integration designs rarely document outbound connectivity, yet an unlisted firewall rule can decide whether a release succeeds. This article argues that egress permissions deserve the same contract discipline as APIs, and sets out how UK organisations can use firewall and proxy logs to expose hidden SaaS, payment and data-transfer dependencies before they stall delivery.
Software supply-chain rules have made a bill of materials for libraries and containers routine, yet few UK organisations can list the interfaces their business actually depends on. This article sets out a pragmatic, evidence-led route to an integration bill of materials — built from gateway configurations, certificates, contracts and spend data rather than from memory — and explains what it is worth during audits, supplier transitions and incident response.
Making Tax Digital for Income Tax has now been through enough quarterly cycles for finance teams to see where the real fragility sits. The lesson of 2026 is that MTD is not a compliance add-on but a recurring integration dependency, and it needs the same contracts, error handling and evidence trails as any other live system interface.
External model access has moved from experimentation to production dependency for many UK organisations. This article sets out the controls that make an AI endpoint governable: pinned versions, cost and rate-limit guardrails, fallback paths, data protection evidence and observability that survives the provider changing the service underneath you.
SaaS contracts are still too often signed before anyone has tested the API that will carry the organisation's data. Integration capability belongs in procurement, with answers written into the contract rather than discovered during onboarding.
UK organisations often treat address matching as a precursor to a master data programme. A narrower pattern — a governed crosswalk, deterministic matching and controlled fuzzy fallback — can deliver most of the value without the programme.
The Data (Use and Access) Act is often framed as a legal and regulatory change, but its practical obligations concentrate at system boundaries. This opinion piece argues that audit trails, purpose-bound APIs and revocable access are integration architecture decisions, not compliance paperwork.
Most UK organisations can account for every software licence but not for the thousands of interfaces holding their systems together. Treating those links as tracked, depreciating assets — and auditing them on a four-week cycle — turns an invisible liability into a fundable remediation plan.