WebisoftWebisoft
Prepared for NovarkConfidential

Tokenization Platform
Settlement / DALP Integration

A Phase 0 MVP scope of work for Novark's investor and issuer apps, built on Settlement's DALP platform — with two team options, pricing, and a clear view of what Settlement handles versus what we build.

Novark·Webisoft·$375K–$425K CAD·Time & Materials

Contact William Marchand, Webisoft Technologie Inc.

Section 01

Overview

Webisoft proposes to design and build Novark's two-sided real-world-asset and digital-securities tokenization platform — an Investor app and an Issuer/Admin app — on Settlement's Digital Asset Lifecycle Platform (DALP) rather than a custom blockchain stack.

Novark needs two coordinated products. The Investor app lets holders discover, subscribe to, and manage tokenized real-world assets and digital securities; the Issuer/Admin app gives Novark's team the controls to onboard issuers, configure offerings, and administer the asset lifecycle end to end. Both apps share a single Novark backend that holds business logic, identity and compliance state, and the data model that ties investors, issuers, and instruments together. This Scope of Work covers the Phase 0 MVP — the foundational build that puts both apps and that backend into production.

Rather than stand up and maintain a bespoke blockchain stack, the platform is built on Settlement (SettleMint) and integrated through its DALP API. Settlement provides the tokenization, ledger, and asset-lifecycle primitives as a managed vendor capability, which keeps Novark out of the business of operating low-level chain infrastructure. The engineering weight therefore sits in two places: the Novark backend that owns Novark's logic and data, and the DALP integration that connects it to Settlement. Across the 88 Phase 0 stories, 49 route from the frontend through the Novark backend and 35 route from the frontend to DALP, with the remainder mixed — so the majority of the build is the Novark backend plus the DALP integration layer, not custom protocol work.

This quote is scoped to Phase 0 — the 88-story, 353-point MVP that delivers the Investor app, the Issuer/Admin app, the Novark backend, and the DALP integration as a working platform. Phase 1 (33 stories / 134 points) and Phase 2 (9 stories / 36 points) are presented as roadmap context only; they are not included in this engagement's pricing or commitment and are sized here purely to show the path beyond the MVP. The numbers, team options, and timeline below describe Phase 0 exclusively, on a Time & Materials basis.

MVP Investment

$375K / $400K–$425K

CAD · lean / faster

Delivery Timeline

3.5–6

months

Phase 0 Scope

88

stories / 353 pts

Team Options

2

staffing models

Section 02

What Settlement handles vs. what we build

Platform & Architecture

The system is split across two trust boundaries. Settlement/DALP is the platform of record: it owns authentication, identity, claims and compliance attestations, and every token and blockchain operation, including on-chain transaction reads. It is the source of truth for who a user is, what they are permitted to assert, and what has happened on-chain. Webisoft does not rebuild any of this — we integrate against it. The Novark backend is the application layer Webisoft builds on top of DALP: it holds the encrypted PII that DALP deliberately does not store, runs the app-specific workflows and business logic, exposes admin tooling and permissioning, and orchestrates the third-party services the product depends on. In short, DALP is the identity and chain substrate; Novark is the product.

The two communicate through a clean, event-driven contract rather than shared state. The frontend talks to whichever side owns the data — DALP for auth, identity, and on-chain reads; Novark for everything app-specific — and the two backends stay in sync by publishing and consuming domain events. This keeps PII isolated inside Novark's encrypted store, keeps key material and chain authority inside DALP, and gives each side an independent deployment and scaling envelope.

The bulk of the build is the Novark backend plus its DALP integration: of the 88 Phase 0 stories, 49 route Frontend to Novark Backend and 35 route Frontend to DALP (the remainder mixed), so most of the delivered surface area is the Novark application layer wired correctly to the DALP platform.

Integration model

Settlement / DALP handles

  • Auth and sessions — BetterAuth runs on DALP
  • Identity and system/profile records — the canonical user record
  • Claims and compliance attestations
  • Token and blockchain operations — create, manage, transfer
  • On-chain transaction reads

Novark backend (we build)

  • PII database — encrypted personal data DALP does not store
  • App-specific workflows and business logic
  • Admin tools and permissioning
  • Domain events and notifications
  • Third-party integrations and orchestration

Third-party services

FusionAuth / BetterAuth

Authentication and OIDC

SumSub

KYC / identity verification

Twilio

Phone / SMS verification

S3 / object storage

Documents and avatars

Event-driven by design: all 130 stories declare a domain event (e.g. user.registered, user.email_verified) with an explicit publisher — DALP Auth, DALP, or Novark Backend — and a defined payload, so every state change is a contract, not an assumption.

Section 03

88 stories · 353 story points

Phase 0 MVP Scope

Phase 0 ships the platform's foundational product surface: 88 user stories totaling 353 story points, organized into seventeen epics that together deliver a complete primary-issuance workflow from investor onboarding through issuer administration. The scope is deliberately clustered into three themes — Onboarding & Identity, Investor Experience, and Issuer & Admin — so that each delivers an end-to-end slice of value rather than disconnected features.

Onboarding & Identity

98 pts

How a user creates an account, signs in securely, completes identity and compliance checks, and manages their profile and security settings — registration, login, email/phone/KYC verification via SumSub, suitability and TOS, and profile with avatar, 2FA and password management.

Investor Experience

104 pts

Everything an investor sees and does post-onboarding — discovering opportunities, reviewing offerings and documents, tracking holdings and activity, and managing their wallet — across the landing/opportunities pages, dashboard, token page, documents, updates, wallet, and transaction history.

Issuer & Admin

151 pts

The tools issuers and operators use to launch and configure tokens, administer the ongoing token lifecycle, maintain the cap table, onboard existing investors in bulk, and execute operational transfers — create token, manage token, cap table, issuer dashboard, import users, and operational transfers.

EpicThemeStoriesPoints
Manage TokenIssuer & Admin1047
Verification (email, phone, KYC, suitability, TOS)Onboarding844
Create TokenIssuer & Admin531
Import UsersIssuer & Admin729
Profile (avatar, 2FA, password)Onboarding828
Cap TableIssuer & Admin722
RegistrationOnboarding420
Token PageInvestor720
UpdatesInvestor520
Landing / OpportunitiesInvestor620
DashboardInvestor516
DocumentsInvestor416
Operational TransfersIssuer & Admin414
Issuer DashboardIssuer & Admin18
WalletInvestor37
LoginOnboarding26
TransactionsInvestor25
Phase 0 MVP total88353
Section 04

How the estimate splits

Implementation Buckets

The build divides into five workstreams. Most of the weight sits in the Novark backend and the DALP integration; the frontend tracks the Figma designs, and QA/DevOps runs throughout.

Frontend app

Build the Figma implementation, the investor flow, and the issuer/admin screens, calling DALP directly where possible and routing to the Novark backend otherwise.

Backend app (Novark)

Build the Novark APIs, the encrypted PII database, profile data, admin workflows, notifications, and the event bus.

DALP / Settlement integration

Wire up auth, wallet, identity, claims, token operations, and transaction reads against the DALP API.

Third-party services

Integrate FusionAuth/BetterAuth, SumSub, Twilio, and S3/object storage.

QA / DevOps

Stand up environments, test data, staging, deployment, and monitoring.

Section 05

Two staffing options

Team & Delivery

Two team compositions bracket the engagement, both including dedicated QA. AI-assisted workflows let us keep the team small for the scope. Both deliver the same Phase 0; the difference is pace.

Lean team + QA

Standard pace · ~4.0–4.5 FTE

  • Frontend Engineer1
  • Backend Engineer1
  • Blockchain / DALP Integration Engineer0.5–1.0
  • Project Manager / Tech Lead0.25
  • QA Engineerpart-time

Timeline

5–6 months · 20–25 weeks

Planning envelope

$375K CAD

A lower monthly burn and a tighter headcount keep the engagement affordable. The trade-off is a slower pace, stretching delivery across 5–6 months before the product is validated.

Faster team + QA

Recommended

Accelerated pace · ~5.75–6 FTE

  • Frontend Engineer2
  • Backend Engineer1
  • Blockchain / DALP Integration Engineer1
  • Project Manager / Tech Lead0.5
  • QA Engineerpart-time

Timeline

3.5–4.5 months · 14–17 weeks

Planning envelope

$400K–$425K CAD

Adding a second frontend engineer and a dedicated DALP integration engineer compresses the schedule to 3.5–4.5 months, getting to validation sooner. Recommended: quicker delivery shortens time to market and de-risks the build at a comparable total cost.

Roles

Frontend Engineer

ReactTypeScript

Translates Figma designs into a responsive, functional UI.

  • Implement investor and issuer user flows
  • Build dashboards, token galleries, and profile management screens

Backend Engineer

Node.jsPostgreSQL

Builds the core Novark application logic, APIs, and database.

  • Manage PII and sensitive user data securely
  • Implement admin workflows, notifications, and event handling

Blockchain / DALP Integration Engineer

DALP SDKREST / GraphQL

Connects the platform to the Settlement/DALP infrastructure.

  • Integrate authentication, identity, and wallet services
  • Implement token and blockchain operations via DALP

Project Manager / Tech Lead

JiraAgile

Oversees execution, planning, and technical guidance.

  • Manage sprints and the timeline
  • Serve as the primary technical point of contact

QA Engineer

Automated + manual testing

Ensures quality and stability through rigorous testing.

  • Develop and execute test plans
  • Validate functionality against user stories near milestone deliveries
Section 06

Time & Materials · CAD

Investment

All figures in CAD on a Time & Materials basis. The estimate is built on a transparent daily rate: $800 / day / person across 20 working days / month = $16,000 / person / month. Two staffing models bracket the engagement.

OptionTimelineMonthlyRangeEnvelope
Lean team + QA5–6 months$64K–$72K$320K–$432K$375K
Faster team + QARec3.5–4.5 months$92K–$96K$322K–$432K$400K–$425K

Recommendation

We recommend the faster team with QA at approximately $400K CAD. It buys momentum and quicker validation, and — importantly — it is not dramatically more expensive than the lean team, because the higher monthly burn is offset by a compressed schedule: the same scope is delivered in less calendar time, so the total lands in a comparable range while the product reaches a testable state sooner.

Best case

DALP cleanly handles most auth, identity, token and claim flows, keeping the work close to the calibrated baseline.

Risk case

DALP gaps require backend wrappers, custom permissions, or workaround flows, which would push effort toward the upper end of the ranges.

These ranges are pending technical validation of the story-point calibration; the next step converts them into a committed schedule.

Section 07

MVP first; Phase 1 & 2 as extensions

Roadmap

P0The quote

88 stories · 353 pts

Phase 0 — MVP

The foundational build: the Investor app, the Issuer/Admin app, the Novark backend, and the DALP integration delivered as a working platform. This is the only phase covered by the quote.

P1Roadmap

33 stories · 134 pts

Phase 1 — extension

Deepening the cap table, opportunities, transactions and documents. Scoped here for planning, not included in the Phase 0 quote.

P2Roadmap

9 stories · 36 pts

Phase 2 — extension

Withdrawals, fundraising and secondary-market flows. Scoped here for planning, not included in the Phase 0 quote.

Indicative sequencing

All phases combined (P0 + P1 + P2, ~523 points): lean team 7–9 months, faster team 5–6 months. Lead with the MVP; treat Phase 1 and Phase 2 as roadmap extensions.

Section 08

Our recommendation

On Settlement

Build on Settlement/DALP for the MVP and do not invest in a replacement now. The bulk of our effort goes into the Novark backend and integrations we own regardless, while Settlement removes the need to build authentication, identity, claims, and token/blockchain plumbing from scratch. Replacing Settlement should be treated as a separate strategic project, not part of the MVP.

Integration vs. replacement

Integrating with Settlement lets us ship the MVP on existing, proven auth/identity/claims/token infrastructure, whereas replacing it would mean rebuilding that entire stack before we deliver any user-facing value.

Lock-in assessment

The dependency on Settlement is concentrated in auth, identity, claims, and token operations — a bounded, well-understood surface rather than a pervasive coupling, which keeps the lock-in manageable and explicit.

Architectural flexibility

We keep DALP behind a thin integration/adapter layer and retain ownership of the PII database and application logic, so the rest of the system depends on our interfaces rather than on DALP directly.

Migration as a separate project

Replacing Settlement should be a distinct strategic initiative scoped on its own terms and timeline — not folded into the MVP — and the adapter boundary ensures any future migration stays contained.

Section 09

What we'd resolve before locking the schedule

Risks & Open Questions

Risks & mitigations

Story-point calibration is unvalidated

Our estimates rest on story-point assumptions we have not yet validated, so the timeline is presented as a range until we calibrate against real team velocity.

DALP capability gaps

Gaps in DALP may force backend wrappers, custom permission models, or workaround flows — mitigated by isolating DALP behind the adapter layer so any compensating logic lives in one place.

Settlement lock-in

Dependence on Settlement for auth, identity, claims, and token operations is a real concentration risk — mitigated by the adapter boundary that confines that dependency to a single, replaceable seam.

Third-party readiness

Delivery depends on the readiness and credentials of SumSub, Twilio, and FusionAuth — mitigated by securing sandbox access and API credentials early so integration risk surfaces before the build.

Compliance scope

The scope of encrypted PII and GDPR obligations is not yet fully defined — mitigated by confirming compliance expectations up front so data handling is designed to requirements rather than retrofitted.

Open questions / access needed

  • Final Figma access
  • DALP / Settlement sandbox access
  • API credentials and documentation for SumSub, FusionAuth, and Twilio
  • Hosting / cloud environment confirmation
  • Whether Webisoft owns backend architecture decisions
  • Admin permissions and who can issue claims
  • Compliance expectations for encrypted PII / GDPR
Section 10

Next Steps

Three steps to turn this into a committed plan.

1

Share access and credentials

Share Figma, DALP/Settlement sandbox access, and third-party credentials (SumSub, FusionAuth, Twilio) so integration work can begin.

2

Confirm the team option

Confirm the preferred team option — lean or faster — so staffing and scope are locked.

3

Validate story-point calibration

Validate the story-point calibration against real velocity to convert the timeline range into a committed schedule.

Direct contact: william@webisoft.com

Webisoft · Montreal, QC · webisoft.com

Confidential — Novark · Settlement / DALP Integration Platform