Key Decisions

Last Verified: 2026-02-17 | Owner: John

Drop — Key Decisions

Strategic Decisions

Pass-Through PSD2 Model (2026-02-08)

Decision: Drop will NOT hold customer funds. All money remains in users' bank accounts. Rationale: Avoids e-money licence requirement, reduces regulatory burden, faster to market. Implementation: AISP (read balances) + PISP (initiate payments) via Open Banking.

Rebrand from Zica to Drop (2026-02-08)

Decision: Rename product from "Zica" to "Drop" for cultural sensitivity. Rationale: "Zica" has negative connotations in some cultures. Status: Complete — domain getdrop.no secured.

Target Market Expansion (2026-02-08)

Decision: Drop is for ALL Scandinavia residents, not just diaspora. Rationale: Larger addressable market, avoid pigeonholing product. Messaging: General-purpose payment app with low fees.

Banking Partnership Strategy (2026-02-09)

Decision: Pursue agent model under SpareBank 1 licence (70/30 revenue split). Status: Updated pitch sent 2026-02-16, awaiting response. Fallback: Direct PSD2 integration with multiple banks.

Technical Decisions

Tech Stack

• Frontend: Next.js 16 + React 19 + Tailwind v4 (modern, fast, scalable)
• Backend: Next.js API Routes (monolith simplicity for MVP)
• Database: SQLite (zero-ops, sufficient for MVP scale)
• Auth: JWT in httpOnly cookies (secure, stateless)
• Hosting: Vercel (zero-config, global CDN)

Feature Flagging

Decision: Cards feature behind feature flags. Rationale: Requires banking partner, not critical for MVP. Implementation: Environment variable toggle.

Compliance Decisions

Age Restriction: 18+

Decision: Enforce minimum age 18 via BankID validation. Rationale: PSD2 compliance, reduces KYC complexity. Future: Investigate 15-17 with parental consent (task #830).

Data Retention

Decision: Implement 7-year transaction retention for AML compliance. Status: Implemented in data-retention.ts service.

GDPR Rights

Decision: Full GDPR compliance with rectification, restriction, objection APIs. Status: Implemented user/rectification, user/restriction, user/objection endpoints.

Design Decisions

UI Source of Truth

Decision: Figma Make export is single source of truth for UI. Location: mockups/figma-make-export/ (10 screens, Vite+React) Rule: Always check Make export before implementing UI changes.

Bilingual Support (NO/EN)

Decision: Norwegian primary, English secondary. Implementation: i18n with language toggle.