Skip to main content
Advanced Search
Search Terms
Content Type

Exact Matches
Tag Searches
Date Options
Updated after
Updated before
Created after
Created before

Search Results

964 total results found

Database Schema

Backend

Bilko Database Schema Status: IMPLEMENTED Last verified: 2026-05-20 Canonical backend: apps/api Kotlin/Ktor service Database: PostgreSQL on GCP Cloud SQL for deployed environments Schema source of truth: Flyway SQL migrations + Exposed table mappings This do...

staleness
needs-review

Security Audit

Security Audits & Reports

Drop Security Audit (originally FontelePay) Rebrand note: FontelePay was renamed to Drop. This audit predates the backend implementation and PSD2 pass-through architecture. Many issues identified here (localStorage PIN, client-side auth) have been addressed i...

staleness
needs-review

Security QA Audit

Security Audits & Reports

Drop App Security & QA Audit Report Date: 2026-02-11 Auditor: John (AI Director) Scope: Next.js 16 fintech app with SQLite database, JWT auth, 24 API routes HISTORICAL NOTE (2026-03-03): This audit was performed against the pre-ADR-014 codebase which used SQL...

staleness
needs-review

Regulatory Map

Legal & Compliance Regulatory Framework

Drop Regulatory Map v2 Norwegian Financial Services Regulatory Framework Date: 2026-02-12 Prepared for: ALAI Holding AS / Drop Payment App Scope: All regulations applicable to a payment app serving ALL residents of Scandinavia App model: Pass-through payments ...

staleness
needs-review

Compliance Gap Analysis

Legal & Compliance Regulatory Framework

Drop Gap Analysis v2 Regulatory Compliance Gap Assessment Date: 2026-02-12 Prepared for: ALAI Holding AS / Drop Payment App Source code reviewed: /Users/makinja/ALAI/products/Drop/src/drop-app/src/ Security rapport: /Users/makinja/ALAI/products/Drop/security/d...

staleness
needs-review

License Application Prep

Legal & Compliance Regulatory Framework

Konsesjonssøknad — Forberedelse Dokument: Forberedelse til søknad om konsesjon som betalingsforetak Hjemmel: Finansforetaksloven (LOV-2015-04-10-17), betalingssystemloven (LOV-1999-12-17-95) Virksomhet: ALAI Holding AS, org.nr 932 516 136 Produkt: Drop — betal...

staleness
needs-review

Business Plan (Regulatory)

Legal & Compliance Regulatory Framework

Virksomhetsplan — Drop (ALAI Holding AS) Dokument: Virksomhetsplan for søknad om konsesjon som betalingsforetak Formål: Vedlegg til konsesjonssøknad til Finanstilsynet Virksomhet: ALAI Holding AS, org.nr 932 516 136 Produkt: Drop (getdrop.no) Versjon: 1.0 Dato...

staleness
needs-review

Compliance Gap (Feb 2026)

Legal & Compliance Regulatory Framework

Drop Compliance Gap Analysis — Overnight Sprint 2026-02-16 TL;DR Readiness: 8/100 (per gap-analysis-v2.md, 2026-02-12) We have more than we think: 14 substantive legal draft documents (6,238 lines total) 36 API endpoints, security hardened (0 CRITICAL, 0 HIG...

staleness
needs-review

Privacy Policy

Legal & Compliance Privacy & Data Protection

Personvernerklæring for Drop Sist oppdatert: 2. mars 2026 Behandlingsansvarlig: ALAI Holding AS, org.nr. 932 516 136 Kontakt: [email protected] Nettsted: https://getdrop.no 1. Innledning Denne personvernerklæringen beskriver hvordan ALAI Holding AS («vi»,...

staleness
needs-review

DPIA Assessment

Legal & Compliance Privacy & Data Protection

Vurdering av personvernkonsekvenser (DPIA) — Drop Dokument-ID: DPIA-DROP-001 Versjon: 1.0 Dato: 12. februar 2026 Utarbeidet av: ALAI Holding AS Behandlingsansvarlig: ALAI Holding AS, org.nr. 932 516 136 Status: Godkjent 1. Innledning og bakgrunn 1.1 Formål De...

staleness
needs-review

Data Processing Protocol

Legal & Compliance Privacy & Data Protection

Behandlingsprotokoll — Drop (ALAI Holding AS) Dokument: Protokoll over behandlingsaktiviteter (GDPR artikkel 30) Behandlingsansvarlig: ALAI Holding AS, org.nr. 932 516 136 Kontakt behandlingsansvarlig: [email protected] Personvernombud: [email protected] Prod...

staleness
needs-review

Outsourcing Policy

Legal & Compliance Privacy & Data Protection

Utkontrakteringspolicy — Drop Dokument-ID: UTKONTR-DROP-001 Versjon: 1.0 Dato: 12. februar 2026 Eier: ALAI Holding AS, org.nr. 932 516 136 Klassifisering: Intern Regulatorisk grunnlag: DORA (EU) 2022/2554 art. 28-30, Finanstilsynets retningslinjer for utkontra...

staleness
needs-review

AML Procedures

Legal & Compliance AML & Risk

Hvitvaskingsrutiner — Drop (ALAI Holding AS) Dokument: Internrutiner for tiltak mot hvitvasking og terrorfinansiering Hjemmel: Lov om tiltak mot hvitvasking og terrorfinansiering (hvitvaskingsloven, LOV-2018-06-01-23) Virksomhet: ALAI Holding AS, org.nr 932 51...

staleness
needs-review

AML Risk Assessment

Legal & Compliance AML & Risk

Risikovurdering — Hvitvasking og terrorfinansiering Dokument: Virksomhetsinnrettet risikovurdering, jf. hvitvaskingsloven §6 Virksomhet: ALAI Holding AS, org.nr 932 516 136 Produkt: Drop — betalingsformidling og pengeoverføringer Versjon: 1.0 Dato: 2026-02-12 ...

staleness
needs-review

Suitability Assessment

Legal & Compliance AML & Risk

Egnethetsvurdering — Fit & Proper Dokument: Rutiner for egnethetsvurdering av styre, ledelse og nøkkelpersoner Hjemmel: Finansforetaksloven §§3-5 til 3-7 (LOV-2015-04-10-17) Virksomhet: ALAI Holding AS, org.nr 932 516 136 Produkt: Drop — betalingsformidling og...

staleness
needs-review

DPA Template

Legal & Compliance Data Processing Agreements

Data Processing Agreement (DPA) Between: Data Controller: ALAI Holding AS, Org. No. 932 516 136 ("Controller") Data Processor: [PROCESSOR NAME], [Org. No.] ("Processor") Effective Date: [DATE] Product: Drop payment services (getdrop.no) 1. Background and Pu...

staleness
needs-review

DPA — Swan

Legal & Compliance Data Processing Agreements

Data Processing Agreement — Swan Between: Data Controller: ALAI Holding AS, Org. No. 932 516 136 ("Controller") Data Processor: Swan SAS ("Processor") Effective Date: [DATE] Product: Drop payment services — Banking-as-a-Service (BaaS) This DPA supplements t...

staleness
needs-review

DPA — Sumsub

Legal & Compliance Data Processing Agreements

Data Processing Agreement — Sumsub Between: Data Controller: ALAI Holding AS, Org. No. 932 516 136 ("Controller") Data Processor: Sumsub Limited ("Processor") Effective Date: [DATE] Product: Drop payment services — KYC/Identity Verification This DPA supplem...

staleness
needs-review