| Tool | Role | API Status |
|---|---|---|
| SamSap | Client data repository | 🔴 No public API found anywhere. Critical unknown — need docs or vendor contact before architecture can be finalised. |
| Asana | Project management | 🟢 Fully public API, webhooks, OAuth 2.0 |
| Google Sheets | Risk assessment | 🟢 Sheets API v4, service account supported |
| Elliptic | Transaction monitoring | 🟡 Public API confirmed (developers.elliptic.co), HMAC auth. Enterprise contract required. Alert suppression endpoint coverage needs verification under their contract. |
| Fireblocks | Trade registration | 🟢 Public API, RSA JWT auth, webhooks v1+v2 confirmed |
| Google Drive | Document storage | 🟢 Drive API v3, service account supported |
Only what was explicitly said on the call. Nothing inferred.
Assumes AI-assisted development (Claude Code + Codex). ~2x productivity multiplier applied to dev hours.
| Role | Hours | Rate | Cost |
|---|---|---|---|
| Partners (consulting — kickoff, architecture, review, client calls) | 10h | $200/h | $2,000 |
| Dev — AI-assisted (traditional ~200h ÷ 2x multiplier) | 100h | $60/h | $6,000 |
| AI tooling — Claude Code Max + API overflow (~$800/mo × 2.5mo) | — | — | $2,000 |
| Base build cost | $10,000 | ||
| +25% custom premium (zero replicability — full cost on this client) | +$2,500 | ||
| Total build cost | ~$12,500 / €11,500 | ||
| Floor check (≥ €10K/yr) | ✓ PASS — €14,400/yr |
| Y1 revenue | €4,500 + (€1,200 × 10mo) = €16,500 |
| Y1 margin | €16,500 − €11,500 = +€5,000 |
| Y2 annual profit (~€780/mo support cost) | ~€6,600/yr |
| Client ROI | (€40K − €14.4K) / €14.4K = 1.8x ✓ |
Being sent to Ops Lead via external scoping doc. None block sending the proposal — scope caveat covers them.
| # | Full question (sent to client) | Why it matters | Blocking? |
|---|---|---|---|
| 1 | Can you share SamSap's API documentation, or connect us with their technical team? We could not find public documentation anywhere. | Critical — architecture changes significantly if no API exists | Yes — scope caveat |
| 2 | Does your risk model need to stay in Google Sheets, or are you open to the same logic living inside the system we build? | ~5-10h either way — Sheets API is clean. Low risk. | No |
| 3 | Can you confirm API access for Asana and Fireblocks? | Almost certainly yes — low risk | No |
| 4 | When your team clears an exposure, who should be able to add it to the whitelist? And at what level: per entity (e.g. "Gazprom"), per exposure type (e.g. "Russia country risk"), or per client-entity pair? | Affects filter engine complexity and admin UI scope | No |
| 5 | Roughly how many new client onboardings start each month? (We know you have ~40 active — we are asking about monthly intake going forward.) | Sizes the system correctly for growth | No |
| 6 | How would you describe Wincent's regulatory role? For example: crypto asset manager, broker, compliance service provider, or something else. | Audit trail requirements — affects v1 spec | No |
| 7 | Does your board have a preferred format for proposals? We typically send a web page but can export to PDF or Word if that works better for your approval process. | Proposal format for board submission | No |
| 8 | Do you have specific requirements for how client data is stored and handled — data residency, retention policies, or audit trail depth? | Architecture decision: EU-only infra, GDPR logging, MiCA compliance scope | No — but shapes v1 spec |
Need answers before the proposal goes out. Please reply with yes/no or your pick on each.