Product roadmap

Current roadmap progress

A public view of what is complete, what is in active delivery, and what is planned next for VAT Engine across compliance, reporting, integrations, billing, and advanced VAT workflows.

Start with docs Read changelog

Workstreams: 15; Public delivery areas
Completion: 74%; 90 tasks complete
Active work: 1; Items moving now
Planned: 31; Items in later phases

Complete

Core VAT Engine

Calculation primitives, tax classes, money handling, and historical rate support.

Done: 8
Active: 0
Planned: 0

EU VAT calculation for B2C destination-based flowsComplete
Prices-include-VAT logicComplete
Accurate rounding and Money domainComplete
Tax classes for standard, reduced, books, and related categoriesComplete
High-performance calculation APIComplete
Historical and future rates support through validity windowsComplete
Clean domain architecture for calculator, money, and errorsComplete
Transaction date support for RFC3339 and YYYY-MM-DD inputsComplete

Complete

VAT Rates & Rules Management

Provider abstraction, cache layers, deterministic lookup, and TEDB-backed data.

Done: 9
Active: 0
Planned: 0

RateProvider abstractionComplete
In-memory VAT rates providerComplete
PostgreSQL-backed VAT rates providerComplete
Redis cached rate provider with positive and negative cacheComplete
Rate validity windowsComplete
Deterministic rate resolution with ambiguity handlingComplete
Public rate lookup API at GET /v1/vat/ratesComplete
EU TEDB data curated into tax classes and VAT rates for 27 EU countriesComplete
Tax class grouping and UI categoriesComplete

Complete

Observability & Reliability

Production-grade health, tracing, metrics, shutdown, and error behavior.

Done: 7
Active: 0
Planned: 0

Health and readiness checksComplete
Request ID and distributed tracing through X-Request-IDComplete
Prometheus metrics for requests, duration, and in-flight trafficComplete
Graceful shutdown with configurable timeoutComplete
Production-grade logging with Zerolog and INFO/DEBUG levelsComplete
Structured error codes and domain errorsComplete
Production vs local environment configurationComplete

Complete

Audit & Compliance Foundation

Immutable transaction records and threshold-ready compliance storage.

Done: 7
Active: 0
Planned: 0

Transaction persistence in vat_transactionsComplete
Immutable VAT calculation records schemaComplete
Per-country aggregation readinessComplete
VAT thresholds tableComplete
Per-country threshold configurationComplete
Validity period supportComplete
Audit-friendly data modelComplete

Complete

Authentication & Account Management

Secure user lifecycle, two-factor authentication, recovery, and sessions.

Done: 6
Active: 0
Planned: 0

User registration and email verificationComplete
User login with email and passwordComplete
Two-factor authentication with TOTPComplete
Backup codes for 2FA recoveryComplete
Password reset and recovery flowComplete
Session management and idle timeoutComplete

Complete

Security & Compliance

Browser, account, and edge protections for the SaaS and API surfaces.

Done: 9
Active: 0
Planned: 0

CSRF protection with rotating tokensComplete
Rate limiting for brute-force protectionComplete
Timing attack mitigationComplete
Bot detection with honeypot controlsComplete
Account enumeration preventionComplete
Password hashing with bcryptjsComplete
Security headers including CSP and HSTSComplete
Activity logging for audit trailsComplete
GDPR cookie consent and privacy controlsComplete

Complete

API & Dashboard Alpha Launch

Self-service API key management, usage tracking, and developer documentation.

Done: 8
Active: 0
Planned: 0

API key generation and managementComplete
Per-key sliding-window rate limitingComplete
Usage tracking and analytics dashboardComplete
Key lifecycle for generate, rotate, and revokeComplete
Batch audit loggingComplete
Backend API integration testingComplete
API documentation portal with FumadocsComplete
Developer getting started guideComplete

Complete

TEDB SOAP API Integration

Automated EU TEDB sync, review tooling, and SME threshold data.

Done: 7
Active: 0
Planned: 0

Automated VAT rate sync through VatRetrievalServiceComplete
SOAP client for EU TEDB APIComplete
Rate diff engine for detecting changesComplete
CLI sync tool with dry-run and apply modesComplete
Admin panel sync UI for status, preview, apply, and historyComplete
Scheduled sync with change alertsComplete
SME threshold data from SMERetrievalServiceComplete

Complete

Compliance Logic

Account-wide reporting, registration-aware OSS monitoring, SME eligibility, and threshold alert delivery.

Done: 15
Active: 0
Planned: 0

Auto-logging calculations to vat_transactionsComplete
Transaction query APIComplete
Historical data exportComplete
EU distance-selling threshold logic for EUR 10,000 OSSComplete
Threshold check API for turnover vs country limitsComplete
Per-country and per-period aggregationComplete
ECB-normalized aggregation with conversion coverageComplete
VAT registration threshold lookup APIComplete
SME eligibility engine for domestic Art. 284 checksComplete
Multi-store and multi-channel v1 source tagsComplete
Managed source catalog for stores and channelsComplete
Threshold progress trackingComplete
Registration-aware OSS Overview and Union OSS coverage guidanceComplete
Threshold alerts through the in-app inbox and verified-recipient SMTP emailComplete
Source catalog follow-ups for aliases, backfill, and broader report reuseComplete

Complete

OSS / IOSS Reporting

Registration management, filing-prep previews, locked return history, corrections, IOSS monthly summaries, and accountant exports are shipped; SAF-OSS and broader filing-state linkage remain ahead.

Done: 11
Active: 0
Planned: 0

OSS / IOSS registration management with conflict-aware cleanup guidanceComplete
Customer-account filing-prep surfacesComplete
OSS quarterly summariesComplete
Country-level VAT breakdownsComplete
IOSS-ready data model for imports under EUR 150Complete
CSV and JSON exports for accountantsComplete
Accountant-friendly reporting formatComplete
Multi-jurisdiction reportingComplete
Locked return periods and export historyComplete
IOSS monthly summariesComplete
Corrections workflowComplete

In progress

E-commerce Integration Foundation

Shared connector storage, secure tokens, webhook queues, and review workflows.

Done: 0
Active: 1
Planned: 5

Integration storage and encrypted token recordsIn progress
Raw-body webhook inbox and sync jobsPlanned
Canonical committed-order importerPlanned
Source aliases and product tax mappingPlanned
Imported-event review queuePlanned
Privacy retention and masked diagnosticsPlanned

Planned

E-commerce Integrations

Platform connectors after the shared commerce ingestion foundation is ready.

Done: 0
Active: 0
Planned: 6

Shopify integration for order syncPlanned
Magento 2 integration for order syncPlanned
Sylius 2 integration for order syncPlanned
WooCommerce integrationPlanned
Headless and custom shop integrationPlanned
Multi-platform aggregationPlanned

Planned

Notifications & Webhooks

In-app inbox and threshold alerts are shipped; broader delivery channels, retries, and preferences are still ahead.

Done: 2
Active: 0
Planned: 6

In-app notification centerComplete
Threshold alert delivery through in-app and verified-recipient emailComplete
Email alerts for SME eligibility changes and future categoriesPlanned
Webhook delivery with retry and HMAC signingPlanned
Configurable notification channels for email, webhook, and in-appPlanned
Notification preferences and quiet hoursPlanned
Expanded notification history and audit logPlanned
Billing event notifications for trial and payment eventsPlanned

Planned

Billing & Multi-language

Basic Stripe-managed subscription access is in place; usage billing, localization, and team features remain ahead.

Done: 1
Active: 0
Planned: 6

Stripe billing integrationPlanned
Subscription management through Stripe Customer PortalComplete
Usage-based billing for API callsPlanned
Multi-language UIPlanned
Localized error messages through Accept-LanguagePlanned
Multi-language documentation portalPlanned
Invoicing and billing historyPlanned

Planned

B2B & Advanced Compliance

Enterprise VAT treatment, multi-entity reporting, and regional expansion.

Done: 0
Active: 0
Planned: 8

B2B VAT and reverse-charge logicPlanned
VAT number validation through EU VIES and national registriesPlanned
Multi-entity VAT reportingPlanned
Custom product-to-tax-class mapping rulesPlanned
CLI tools and automationPlanned
Regional expansion beyond the EUPlanned
Tax rule exceptions and custom configsPlanned
CN/CPA code mapping for automated product classificationPlanned