# Active Tasks

> Last Verified: 2026-02-17 | Owner: John

# Drop — Active Tasks

## Open Tasks

### High Priority
- **#1001** — Drop Norge Tech build (BankID + Nets + Norwegian QR)
- **#1002** — Drop Norge GTM & regulatory (Finanstilsynet, merchant network)

### Medium Priority
- **#830** — Investigate support for users under 18 (15-17) with parental consent (Vipps model)
- **#1255-#1263** — 9 Drop-related tasks (autowork background tasks)

## Recently Completed
- **Bank remediation Phase 1-3** — 25 tasks completed in one session
  - New services: screening.ts, str.ts, data-retention.ts, secrets.ts
  - New APIs: admin/screening, admin/str, user/rectification, user/restriction, user/objection, cron/retention
  - Security: CSP nonce, dynamic linking PSD2, JWT RS256, CI/CD with Trivy
  - Docs: behandlingsprotokoll, rammeavtale, gebyrskjema, 4 DPAs, /personvern page
  - Infra: PG migrations, secrets management, DR test plan
  - Tasks #1221-#1244 completed

## Remaining Work
- **Alem-owned:** B1-B11 (business/legal tasks)
- **External dependencies:** E1-E3 (third-party integrations)
- **Integration tasks:** A1-A5 (blocked on contracts)

## Task Categories
1. **Technical Implementation** — Core features, APIs, database
2. **Security & Compliance** — GDPR, PSD2, security audits
3. **Business Development** — Partnerships, regulatory approval
4. **Documentation** — User docs, API docs, compliance docs
5. **Testing & QA** — Automated tests, load testing, security testing