DiscoveryResearch, planning, and compliance

Discovery Overview ​

This section contains strategic planning documents, compliance research, and technical discovery work for the Wedissimo platform. These documents inform architectural decisions, compliance requirements, and feature planning.

GDPR Compliance ​

As a two-sided marketplace operating in the EU/UK, Wedissimo must comply with GDPR regulations for both couples (customers) and vendors (service providers). The compliance strategy addresses:

• User Rights - Access, rectification, erasure, and data portability
• Data Processing - Lawful basis, consent management, and legitimate interests
• Cross-User Dependencies - Handling data relationships between couples and vendors
• Business Data Retention - Balancing user rights with legal/financial obligations
• Technical Measures - Encryption, access controls, and data minimization

Security & Privacy ​

The security strategy covers:

• Authentication - Multi-strategy auth (sessions, tokens, magic links)
• Authorization - Role-based access control with Spatie Permission
• Data Protection - Encryption at rest and in transit
• Audit Logging - Activity tracking and compliance monitoring
• Incident Response - Breach notification and remediation procedures

Payment Processing ​

Payment system research includes:

• Stripe Integration - Payment processing and subscription management
• PCI Compliance - Secure handling of payment information
• Multi-Currency - Support for international transactions
• Invoicing - Automated invoice generation and delivery
• Refunds & Disputes - Handling payment disputes and chargebacks

Third-Party Services ​

Integration planning for:

• Google Places API - Location search and autocomplete
• Typesense - Full-text search engine
• Cloud Storage - S3/GCS for media files
• Email Delivery - Transactional and marketing emails
• Analytics - User behavior and marketplace metrics

Document Status ​

These documents represent research and planning work. Implementation status varies:

• ✅ Implemented - Security strategy, authentication, search
• 🚧 In Progress - GDPR compliance, payment systems
• 📋 Planned - AI integration, advanced analytics

Next Steps ​

• Review GDPR compliance requirements
• Understand security measures
• Explore payment system options