Build User-Friendly Web Application

Full Stack Developer Requirement Document
Web Application with User & Admin Portal
We are looking for a Full Stack Developer or a development team to build a secure, scalable, and user-friendly web application that includes both a User Portal and an Admin Portal with the following scope:
Core Features
1. User Registration & Account Management
o Sign up/login with email and mobile
o Password reset, OTP verification
o Role-based user access
2. Document Upload
o Upload documents in multiple formats (PDF, JPG, PNG)
o Auto-compress and convert files to permissible size/format
3. Asset & Nominee Data Entry
o Predefined forms for data entry of asset & nominee details
4. Biometric Image Authentication
o Capture user image on blink detection
o Compare with previously uploaded photo (facial recognition)
5. Event-Based Communications
o Trigger SMS, Email, WhatsApp messages on predefined events
6. Auto-Compilation of Documents
o Combine uploaded documents + asset/nominee details into predefined report/document
7. Payment Gateway Integration
o One-time and subscription-based models
o Auto-debit via e-mandate
o Payment via Razorpay
________________________________________
Technology Stack (Preferred)
• Frontend: Next.js (React)
• Backend: Node.js or Python (Django / FastAPI)
• Database: PostgreSQL / MySQL
• Hosting: VPS with scalability options (Docker/Kubernetes readiness is a plus)
• API Format: REST (JSON over HTTP, versioned APIs)

________________________________________
3rd Party Integration Requirements
• Communication: SMS, WhatsApp, Email APIs
• Payments: Stripe, Razorpay (subscription & mandate setup)
• Auth & Security: Google Authenticator, Email OTP, OAuth 2.0
________________________________________
Security & Compliance
• AES-256 encryption for sensitive data (at rest & in transit)
• Role-Based Access Control (RBAC)
• Multi-Factor Authentication (MFA)
• GDPR, PCI DSS, ISO 27001 compliance
• Logging & audit trails for all actions (login, upload, changes)
• OAuth 2.0, token expiry, IP whitelisting (admin)
• Daily backups & disaster recovery plan
• Explicit consent logging for policies and data usage. Data retention/deletion policies per compliance standards.
________________________________________
Performance & Quality
• 99.9% uptime commitment
• Page load time under 3 seconds
• Scalable to handle high volumes of users/documents
• Cross-device compatibility (desktop, tablet, mobile)
• Code quality tools (SonarQube etc.)
• Code coverage >80%
• Microservices architecture
• API SLA and proper HTTP status conventions
________________________________________
UI/UX Guidelines
• Responsive and accessible design
• Uniform color scheme and typography
• Compatibility with screen readers & keyboard navigation
• All images/media to be royalty-free or licensed
• Comprehensive validation (server-side and client-side)
________________________________________
Handover & Documentation
• Deliverables:
o Source Code:
 Frontend (React.js)
 Backend (Node.js (Express/NestJS) or Python (Django/FastAPI).
 Database Scripts (DDL/DML)
 Deployment Scripts
o Code Quality Reports (Frontend/Backend)
o Documentation:
 API Specifications
 Low-Level Design (LLD)
 Deployment Guide
• Process:
o Architecture approval before development starts
o Weekly progress meetings
o Phase-wise code walkthroughs
o Final handover of all source code, documents, configurations
________________________________________
Quality & Development Standards
1. Microservices-based backend
2. Logging for transaction and error tracing
3. API/Token-based authentication and secure headers
4. Role-based module access (RBAC)
5. Minimum 80% code coverage with testing
6. Form and input validation on both ends
7. Fully responsive layout and design
8. REST APIs with proper HTTP standards
9. Normalized database schema with ORM
10. Documentation of APIs and system architecture