webFLEX API integration services (field sales / OpenData)

1. Daily ERP order ingestion

A consumer-goods distributor in Tirana runs Microsoft Dynamics 365 in head office and webFLEX in 40 vans. Each evening our worker calls /v1/webflex/orders?since=..., normalises customer codes, and posts the orders into the Dynamics sales-order entity. Cancelled or amended lines are detected by comparing the order_version field, so duplicates never reach finance.

2. Fiscalized invoice reconciliation

Each fiscalized invoice carries an Invoice Identification Code (IIC) and Fiscal Identification Code (FIC) issued via logifis. The integration mirrors header + lines + IIC/FIC into the warehouse and joins them against the Self-Care portal export so finance can spot any rejected invoice flagged after Albania's November 2024 tax-administration enhancement, without ever editing the original receipt.

3. flexboard route enforcement

Sales managers plan visits in flexboard and push them into webFLEX overnight. Our pipeline reads back the actual GPS-tagged check-ins, computes plan-vs-actual deltas, and emits a webhook to Slack when a high-value pharmacy or supermarket is missed two days in a row. This is OpenData applied to physical execution, not just numbers.

4. Med-rep prescription analytics

Pharmaceutical clients use the med-rep module to log doctor visits and discussed products. We export the call history and link it to anonymised IMS-style prescription data so compliance teams can demonstrate, line by line, that promotion of regulated SKUs follows the local code of conduct.

5. Multi-tenant BI mart

For groups operating across Albania, Kosovo, and North Macedonia, we land webFLEX exports into a multi-tenant warehouse (BigQuery, Snowflake, or ClickHouse). A row-level-security model isolates each operating company while letting the group CFO query consolidated KPIs through a single OpenFinance-style API gateway.

Authenticated session bootstrap

// Step 1 — exchange agent credentials for a session token
POST /api/v1/webflex/auth/login
Content-Type: application/json

{
  "tenant": "distributor-tirana",
  "agent_code": "AG-014",
  "device_id": "and-9f3c-...-b2",
  "secret": "<rotated_pin>"
}

200 OK
{
  "access_token": "eyJhbGciOi...",
  "refresh_token": "rft_4d8...",
  "expires_in": 3600,
  "permissions": ["orders.read","invoices.read","visits.read"]
}

Order & invoice export

// Step 2 — pull incremental orders since a watermark
GET /api/v1/webflex/orders?since=2026-05-08T00:00:00Z&limit=500
Authorization: Bearer <ACCESS_TOKEN>

200 OK
{
  "data": [
    {
      "order_id": "ORD-220419-00031",
      "client_code": "C-1099",
      "agent_code": "AG-014",
      "currency": "ALL",
      "lines": [
        {"sku":"PEPSI-1L","qty":12,"price":140,"discount_rule":"PROMO-FRIDAY"}
      ],
      "fiscal": {"iic":"X4...","fic":"K9...","qr":"https://efiskalizimi-app.tatime.gov.al/..."}
    }
  ],
  "next_cursor": "ORD-220419-00031"
}

Webhook for visit completion

// Step 3 — receive a real-time visit webhook
POST https://your-stack.example.com/hooks/webflex
X-Webflex-Signature: sha256=...

{
  "event": "visit.completed",
  "agent_code": "AG-014",
  "client_code": "C-1099",
  "planned_at": "2026-05-09T10:00:00+02:00",
  "completed_at": "2026-05-09T10:14:21+02:00",
  "geo": {"lat": 41.3275, "lng": 19.8189},
  "outcome": "ORDER_PLACED",
  "linked_order": "ORD-220419-00031"
}

Compliance & privacy

Albania's data protection regime was fully overhauled by Law No. 124/2024 "On Personal Data Protection", which entered into force on 31 January 2025 and is harmonised with the EU General Data Protection Regulation (GDPR). Our pipeline maintains a record of processing activities, supports right-to-access requests, and emits structured consent logs that the Information and Data Protection Commissioner can demand on short notice. Penalties under the new regime now mirror GDPR levels — up to 2% or 4% of global annual turnover — so cutting corners is not an option.

For fiscal flows, the export layer treats logifis-fiscalized invoices as immutable. Original IIC and FIC values are preserved verbatim so that any cross-check against the Albanian General Directorate of Taxes remains valid; we never re-issue or rewrite a fiscal record.

Data flow / architecture

The pipeline is intentionally short, so audit is easy:

1. webFLEX client (Android) — captures orders, invoices, visits, cash-ins.
2. flexboard / logifis backend — authoritative store; emits webhooks and paginated REST.
3. OpenData ingestion worker — token refresh, schema normalisation, deduplication.
4. Customer warehouse / ERP — BigQuery, Snowflake, Postgres, Dynamics, SAP, or Odoo.
5. API output layer — read-only OpenAPI-documented endpoints for downstream BI, partner portals, and audit tools.

Unified B2B commerce and mobile order-taking platform; teams running Pepperi alongside webFLEX usually want consolidated order exports and shared promotion logic.

Retail-execution and merchandising app; pairing it with webFLEX requires reconciling visit logs against the same client master.

Wholesale order-management app popular with SMB distributors; data overlap covers products, customers, and pricing tiers.

Outside-sales mapping and territory-management; integration value sits in mapping route plans onto webFLEX visit outcomes.

Mobile retail-execution and audit; complements webFLEX where photo audits feed back into KPI dashboards.

Field sales CRM with order capture; teams migrating from Skynamo often need a one-time webFLEX backfill of historical orders.

SFA/DMS suite popular in South Asia; works with webFLEX in groups that operate across Albania and Indian-affiliated distribution arms.

Mobile order-taking app for small distributors; typical overlap is rep activity and basket-mix reporting.

B2B e-commerce ordering portal; complements webFLEX when customers want to self-serve between agent visits.

Salesforce add-on for territory and route planning; pairs naturally with webFLEX when route data needs to land in Salesforce CRM.

Deliverables checklist

• OpenAPI 3.1 specification for every exported entity
• Protocol-analysis report covering token, refresh, and webhook flows
• Runnable source for orders, invoices, and visits (Python + Node.js)
• Unit and integration test suite with sandbox fixtures
• Compliance pack: GDPR/Law 124/2024 checklist, RoPA template, retention policy
• Operational runbook: token rotation, watermark recovery, replay strategy

About us

OpenFinance Lab is an independent studio focused on protocol analysis and OpenData integration for fintech and field-sales applications. Our engineers come from payments, distribution ERP, and security backgrounds, and we have shipped data bridges for clients across the Western Balkans, the Gulf, and Southeast Asia. We deliver runnable source code rather than slide decks, and we charge in two simple ways: source-code delivery from $300 (pay after delivery upon satisfaction), or pay-per-call API billing on our hosted endpoints with no upfront fee.

Engagement workflow

1. Scope confirmation: target screens (orders, invoices, visits, med-rep), volume estimates, ERP destination.
2. Protocol and auth-flow analysis (2–5 business days).
3. Build, schema design, and internal validation against sandbox tenant (3–8 business days).
4. Documentation, sample clients, and test suites (1–2 business days).
5. First production drop typically lands within 5–15 business days; client-side fiscal approvals may extend it.

Contact

For a quote or to share your target app and integration requirements, use our contact page:

Contact page

Two engagement models — source-code delivery from $300 or pay-per-call hosted API access.