PETRO-DISCOVERY
Enterprise Solution Architecture

Petroleum Trading Platform Clarification Document

Client Discovery, Architecture Gaps, Business Rules & Prioritized Risk Evaluation

20 Gaps

Architecture Level Red Flags

111 Questions

Total Client Clarifications

20 Questions

Priority Meeting Focus

10 Integration

Third-Party Matrix Points

Executive Assessment Summary

Yeh document project architecture level par strong hai, lekin development phase me enter karne se pehle critical business rules, compliance protocols, API integrations, aur exact user actions clear nahi hain. Development start karne se pehle scope creep ko roknay ke liye aur exact quotation ke liye niche diye gaye gaps ko address karna mandatory hai.

Scope Creep Warning: Technical design finalized hai, lekin workflows aur API providers ka clear na hona timeline aur cost budget ko exceed kar sakta hai. Client se confirmation sheet fill karwana zaruri hai.

Internal Red Flags & Architecture Gaps (20 Critical Doubts)

Internal development team ke liye 20 major architectural gaps identify kiye gaye hain:

1. Workflow & Regulatory Compliance Gaps (Doubts 1-5)
  • 🔴 Doubt 1: Exact Business Workflow Missing: Architecture level overview hai, lekin end-to-end petroleum trading workflow deep-level par missing hai.
  • 🔴 Doubt 2: AML Provider Undefined: OFAC/EU/UN/OpenSanctions mentioned hain, lekin live commercial API provider specified nahi hai.
  • 🔴 Doubt 3: OCR Provider Unclear: AWS Textract ya Google Document AI mein se final provider selected nahi hai.
  • 🔴 Doubt 4: AI Model Undefined: GPT-4 / Claude me se konsa engine use hoga aur data privacy training policy kya hogi?
  • 🔴 Doubt 5: Fraud Detection Mechanism: Fraud score / authenticity score calculate karne ki third-party engine clear nahi hai.
2. Business Logic & Trading Engine Gaps (Doubts 6-10)
  • 🔴 Doubt 6: Risk Scoring Rules Missing: Country, Financial, Trading weights aur exact algorithm missing hai.
  • 🔴 Doubt 7: Matching Rules Incomplete: Weighted criteria mention hain par min-max limits aur exception handling logic missing hai.
  • 🔴 Doubt 8: Pricing Formula Incomplete: Freight, insurance, storage, taxes calculation exact formulas undefined hain.
  • 🔴 Doubt 9: Payment Settlement Integration: Payment lifecycle status tracking hai ya actual banking API integration?
  • 🔴 Doubt 10: Marketplace Identity Visibility: Buyer-seller direct visibility hogi ya fully anonymous escrow matching?
3. Technical, Storage & Apps Scope (Doubts 11-20)
  • 🔴 Doubt 11: Document Templates Missing: ICPO, LOI, FCO, SPA, TSA, CPA ke sample templates client se praapt nahi hue hain.
  • 🔴 Doubt 12: E-Signature Integration: DocuSign/AdobeSign Phase 3 me hai ya initial phase me required hai?
  • 🔴 Doubt 13: Mobile Apps Scope Ambiguity: Client, Executive & Sales ke liye 3 alag native apps banani hain ya single Flutter role-based app?
  • 🔴 Doubt 14: Vessel Tracking Depth: Standard status tracking or real-time live IMO AIS vessel tracking API integration?
  • 🔴 Doubt 15: Regulatory Jurisdiction: Primary hosting aur jurisdiction compliance (GDPR, UAE, US SEC) kaunsa hai?
  • 🔴 Doubt 16: Data Migration Scope: Existing client database, active trades, aur legacy PDFs migrate karne hain ya fresh setup?
  • 🔴 Doubt 17: Multi-Currency & FX engine: FX conversion API real-time integrate honi hai ya manual fixed rate?
  • 🔴 Doubt 18: Multi-Language Scope: System multi-lingual hai ya English-only core UI?
  • 🔴 Doubt 19: Reporting Engine Requirements: Custom BI report builder chahiye ya predefined static exportable PDF/Excel templates?
  • 🔴 Doubt 20: User Load & Volume Scale: Operational users aur clients ki exact volume expectation kitni hai?

Detailed Client Discovery Questionnaire (111 Questions Breakdown)

Client se clarify karne waale poore 111 questions ko modules ke under divide kiya gaya hai:

1. Business Understanding & User Roles (Q1 - Q7)
  • Q1. Platform ka primary objective kya hai?
    Internal petroleum trading? External marketplace? CRM? Ya combination?
  • Q2. Current business process manual flow kya hai?
    Lead → KYC → Approval → Negotiation → Contract → Payment → Closing stages details.
  • Q5. Exact User Roles kaun-kaun se honge?
    Super Admin, Co-CEO, MLRO, Operations, Sales ke alawa Logistics/Finance require hain?
  • Q7. Client Types exact kya hain?
    Buyer, Seller, Broker, Intermediary ke onboarding forms same honge ya different?
2. KYC, Document OCR & AML Screening (Q8 - Q34)
  • Q10 & Q11. Multi-level Directors & UBO Depth
    Structural ownership tree Company A → Company B → Individual UBO kitni depth tak capture karni hai?
  • Q17. OCR Workflow Strategy
    Kya OCR auto-save karega ya Review-before-Save UI (OCR → Extract → User Review → Confirm)?
  • Q19 & Q20. AML / Sanction Screening APIs
    Selected AML provider kaunsa hai? Subscription aur Sandbox credentials active hain?
  • Q24. Continuous Automated Monitoring
    Status approval ke baad background automated daily/monthly re-screening required hai?
3. Risk Scoring, CRM & Marketplace (Q31 - Q43)
  • Q31. Risk Score Formula & Weights
    Weights details: Country (%), KYC (%), AML (%), Financial (%), History (%)?
  • Q39 & Q40. Marketplace Product & Pricing Rules
    Anonymous listing ya visible buyer-seller identity? Fixed pricing ya price ranges?
4. Petroleum Products & AI Engine (Q44 - Q59)
  • Q44. Petroleum Products Scope
    EN590 10PPM, Diesel D6, Jet A-1, Crude Oil ke alawa Master Configurable list chahiye?
  • Q52. Trade Match Approval Rules
    AI match auto-generate direct contract karega ya Salesperson human intervention mandatory hai?
5. Trade Management, Logistics & Security (Q60 - Q111)
  • Q64. Payment & Banking Scope
    Actual API Payment Gateway integration chahiye ya manual payment proof attachment & status tracking?
  • Q68. Document Automation Templates
    Legal templates for ICPO, LOI, FCO, SPA, TSA, CPA client kab provide karega?
  • Q89. Mobile App Architecture
    3 separate native apps or 1 cross-platform app (Flutter) with Role-Based Access Control?
  • Q99 & Q100. Compliance & Data Hosting
    Data hosting location requirement: UAE, EU (GDPR) or USA?

First Client Meeting - Top 20 Priority Questions

Agar meeting me samay kam ho, toh yeh 20 questions sabse pehle discuss karne hain:

1
End-to-End Flow: Onboarding se trade closing tak ka exact manual workflow kya hai?
2
User Roles: System me total user roles aur unki granular permissions matrix kya hai?
3
KYC Fields: Mandatory vs optional KYC fields aur country-specific formats kya hain?
4
Compliance Standard: Regulatory rules aur jurisdiction (UK, UAE, US, EU) konsi hai?
5
AML Provider: Selected AML/Sanction screening provider kaunsa hai aur API keys ready hain?
6
OCR Engine: OCR verification provider (AWS Textract / Document AI) final ho gaya hai?
7
AI Fraud Engine: Document fraud detection ka exact business criteria kya hai?
8
Risk Score Rules: Risk score ka mathematical formula aur approval/rejection limits kya hain?
9
Matching Engine Rules: AI buyer-seller matching thresholds aur min-max parameters kya hain?
10
Pricing & Spread Formula: Freight, insurance, storage aur tax calculation formula kya hain?
11
Marketplace Anonymity: Buyer aur seller ek doosre ki identity dekh sakte hain ya completely anonymous matching hogi?
12
Post-Match Workflow: Match score generate hone ke baad exact human-in-the-loop action kya hoga?
13
Trade Authorization: Trade creation, negotiation aur approval ka exact permission workflow kya hai?
14
Payment Scope: Actual banking/SWIFT API integration hai ya manual payment proof attachment & status tracking?
15
Legal Document Templates: ICPO, LOI, FCO, SPA, TSA, CPA documents ke sample templates ready hain?
16
E-Signature Specs: E-signature (DocuSign/AdobeSign) Phase 1 me integrate hona hai ya Phase 3 me?
17
Logistics Tracking: Live Vessel IMO tracking Phase 1 ka part hai ya future scope hai?
18
Mobile Apps Scope: 3 alag applications chahiye ya single role-based application?
19
Scale Expectations: Expected monthly users, active trades, documents aur AML screening requests kitni hain?
20
Phase Deliverables: Mandatory features list for Phase 1 MVP vs Phase 2 & Phase 3?

Third-Party Integration Matrix

Client ke sath fill karwane ke liye Provider Responsibility Matrix:

Integration Type Provider Candidate API Available? Phase Target Client Dependency
OCR Verification AWS Textract / Google Doc AI TBD Phase 1 Document Formats
AML / Sanctions ComplyAdvantage / LexisNexis / OpenSanctions TBD Phase 1 API Credentials & Cost
AI Engine OpenAI Enterprise / Claude API Yes Phase 1 Data Privacy Policy
SMS OTP Twilio / Infobip Yes Phase 1 Account Subscription
E-Signature DocuSign / Adobe Sign TBD Phase 3 Template Mapping
Vessel Tracking MarineTraffic / Spire AIS No Phase 3 API Plan Selection

Client Pre-Development Deliverables List

Meeting ke baad Client ko yeh items provide karne ki request bhejni hai:

Category Required Input / Document Format Expected Impact Area
Business Workflow End-to-End SOP & Approval Hierarchy PDF / Flowchart Core Architecture & Roles
KYC / Compliance Final Onboarding Form & Risk Metric Rules Excel / Word KYC Form Engine & Risk Score
Trade Legal Templates ICPO, LOI, FCO, SPA, TSA, CPA Templates DOCX Files Document Automation Engine
Integrations AML & Vessel Tracking API Specs/Keys API Keys / Docs Third-party Services Pipeline
Volume Estimation User Scale, Monthly Trades & Storage Projection Metrics Sheet AWS Infrastructure & Pricing