Search Results

KYC/AML Flow -- Low-Level Design Document: LLD-KYC-AML Status: Approved Last updated: 2026-02-21 Author: Standards Architect Applies to: Drop v1.0 (PSD2 pass-through model) Regulatory basis: Hvitvaskingsloven (LOV-2018-06-01-23), GDPR (Personopplysningsloven) ...

Low-Level Design: Bank Account Linking Flow Version: 1.0 Date: 2026-02-21 Author: Banking Architecture Team Status: Approved Applies to: Drop — AISP Consent & Bank Account Linking 1. Overview Bank account linking is the process where a Drop user connects thei...

Flow: QR Payment Document: LLD-002 Version: 1.0 Date: 2026-02-21 Author: Frontend Architect (AI Agent) Status: Draft Scope: End-to-end QR payment flow covering camera handling, merchant resolution, payment confirmation, SCA, and error states for both web and m...

Low-Level Design: Remittance Flow Version: 1.0 Date: 2026-02-21 Author: Banking Architecture Team Status: Approved Applies to: Drop — Cross-Border Money Transfer (PISP) 1. Overview Remittance is Drop's core feature — sending money from a Norwegian bank accoun...

Flow: Merchant Onboarding Document: LLD-006 Version: 1.0 Date: 2026-02-21 Author: Frontend Architect (AI Agent) Status: Draft Scope: Merchant registration, business verification, QR code generation, merchant dashboard, transaction monitoring, and settlement 1...

Flow: Transaction History Document: LLD-003 Version: 1.0 Date: 2026-02-21 Author: Frontend Architect (AI Agent) Status: Draft Scope: Transaction list rendering, filtering, pagination, transaction detail view, receipt download, and dispute initiation 1. Overvi...

Flow: Profile & Settings Document: LLD-004 Version: 1.0 Date: 2026-02-21 Author: Frontend Architect (AI Agent) Status: Draft Scope: Profile page, personal information display, KYC status, settings management, GDPR data export, and account deletion flow 1. Ove...

Flow: Notifications Document: LLD-005 Version: 1.0 Date: 2026-02-21 Author: Frontend Architect (AI Agent) Status: Draft Scope: Push notification delivery, in-app notification center, notification types, read/unread state, deep linking, and permission handling ...

Architecture Decision Record — ADR-013 Project: Drop ADR Number: ADR-013 Title: Neonomics as Open Banking Aggregator for AISP/PISP Version: 1.0 Date: 2026-02-23 Author: Petter Graff, Senior Enterprise Architect Status: Proposed Reviewers: Alem Bašić (CEO), Jo...

ADR-001: Consolidate to Single Backend Status: Accepted Date: 2026-02-12 Deciders: John (AI Director), Alem (CEO) Category: Architecture Context The Drop codebase contained two competing middleware implementations creating confusion about which was authoritat...

ADR-002: Separate FontelePay from Drop Repository Status: Accepted Date: 2026-02-12 Deciders: John (AI Director) Category: Architecture Context FontelePay is an earlier iteration of the payment concept that predates the Drop rebrand. It resided at src/fontele...

ADR-003: Adopt PSD2 Pass-through Model (No Wallet) Status: Accepted Date: 2026-02-12 Deciders: Alem (CEO), John (AI Director) Category: Architecture Context The original Drop codebase implemented a wallet model where: Users had a local balance stored in the ...

ADR-004: JWT Storage in httpOnly Cookies Status: Accepted Date: 2026-02-21 Deciders: John (AI Director) Category: Security Context Drop is a financial application handling payment initiation, bank account data, and personal information. Secure token storage i...

ADR-005: Monolith-First Architecture Status: Accepted Date: 2026-02-21 Deciders: John (AI Director), Alem (CEO) Category: Architecture Context Drop needs to go from concept to demo-ready product as quickly as possible. The team is small (1 human CEO + AI agen...

ADR-006: SQLite for Development, PostgreSQL for Production Status: SUPERSEDED by ADR-014: PostgreSQL-Only Architecture (2026-03-03) Date: 2026-02-21 Deciders: John (AI Director) Category: Database Context Drop requires a database strategy that supports rapid ...

ADR-007: BankID as Sole Authentication Provider Status: Accepted Date: 2026-02-21 Deciders: Alem (CEO), John (AI Director) Category: Security Context Drop is a financial application operating under PSD2 in Norway. PSD2 mandates Strong Customer Authentication ...

ADR-008: Hono v4 for Mobile API Status: Accepted Date: 2026-02-21 Deciders: John (AI Director) Category: Backend Context Drop has two client platforms with different API needs: Platform Auth Pattern Token Storage API Style Deployment Web (Next.js) Cook...

ADR-009: Custom Feature Flag System Status: Accepted Date: 2026-02-21 Deciders: John (AI Director) Category: Backend Context Drop needs feature flags for several reasons: Gradual rollout: Cards feature requires a card issuing partner before activation -- mus...