RSRV Car Service Reservation Platform - Statement of Work (SOW) Client: Kwabena O.B Region: United States Date: 10/10/2025 Delivery Window: 3–6 months (MVP Phase) Confidentiality: Covered under NDA 1. Project Overview RSRV is a car service reservation platform designed to let users schedule and pay for rides with verified drivers. Unlike on-demand ridesharing, the system focuses on advance bookings, reliability, and a seamless reservation experience. The MVP will include Rider, Driver, and Admin interfaces, Square-based payments, notifications, and secure data handling. 2. Core Objectives • Deliver a secure and scalable car reservation platform ready for U.S. launch. • Simplify the booking and payment process through Square integration. • Maintain data privacy, operational efficiency, and clear trip management for both drivers and administrators. 3. Core Features Rider App: Account creation, trip scheduling, Square payment, booking history, notifications. Driver App: Login, view assigned trips, status updates (on route, started, completed), earnings view. Admin Console: Manage users, bookings, pricing, view analytics, issue refunds. 4. Technical Specifications Frontend: Flutter (cross-platform) Backend: Node.js (NestJS) Database: PostgreSQL + Redis cache Payments: Square API (In-App Payments SDK + Webhooks) Hosting: Google Cloud Platform (preferred) or AWS alternative Maps: Google Maps API for pickup/drop-off selection CI/CD: GitHub Actions + Terraform for infrastructure as code 5. Security Requirements • TLS 1.3 for all communications. • OAuth 2.1 + Firebase Auth for authentication. • Role-based access control for admins and drivers. • No card data storage — all transactions via Square. • Encryption at rest using GCP KMS. • Log redaction for personally identifiable information (PII). • Penetration testing prior to launch. 6. Non-Functional Requirements Availability: 99.9% API latency: <400ms User scalability: 10,000 concurrent sessions Data retention: 6 months for trip logs, deletable on request Compliance: GDPR/CCPA readiness 7. Deliverables & Milestones Milestone Deliverable Duration M1 Setup & Wireframes 2 weeks M2 Rider App (Booking + Square Payment) 4 weeks M3 Driver App (Trip & Earnings Management) 4 weeks M4 Admin Console (Dashboard + Reports) 3 weeks M5 Security & Cloud Deployment 2 weeks M6 Testing, Pen-Test, & Final Delivery 2 weeks 8. Documentation & Handover Deliverables include full source code, API documentation, deployment scripts, security audit report, and user manuals. All intellectual property will transfer to the client upon final payment. 9. Intellectual Property All source code, design assets, and infrastructure configurations are the exclusive property of RSRV (Kwabena Osei Boakye) upon payment. Developer retains no reuse or resale rights. 10. Confidentiality & NDA The developer agrees to confidentiality, non-disclosure, and data deletion post-project. No client data shall be stored or reused for other projects. A mutual NDA must be signed prior to kickoff. 11. Acceptance Criteria • Successful booking flow using Square payments. • Verified driver trip management. • Functional admin console with reporting. • TLS, OAuth, and secure API tests passed. • All deliverables documented and deployed. • No high or critical vulnerabilities. 12. Termination & Warranty • Either party may terminate with a 14-day written notice if milestones are unmet. • A 60-day bug warranty period applies post-handover. • Critical bugs fixed at no additional cost within warranty period.