VAT and Sales Tax for .NET SaaS, Done Right
Tax is where naive SaaS billing quietly breaks. Here is how to get EU cross-border VAT, US sales tax, and historical invoice integrity right in a .NET SaaS — with real Granit code.
compliance
11 posts with the tag “compliance”
SEPA Payments in .NET Without a Payment Gateway
Recurring EU billing does not require a US payment gateway. Here is how a provider-agnostic design collects a finalized invoice over SEPA — no Stripe, no Mollie, no Cloud Act exposure — and stays retry-safe end to end.
IP Geolocation in .NET: Local MaxMind vs Remote API
Turning a client IP into a city has two answers in .NET — a local MaxMind database or a remote lookup API — and each hides a trap. Here is the honest trade-off between offline speed and online freshness, the GDPR problem nobody mentions, and how to run both behind one resolver.
FAPI 2.0 in .NET: Financial-Grade Security with One Flag
FAPI 2.0 is the security profile required by Open Banking, healthcare APIs, and government identity systems. Most teams think conformance takes months. Granit's OpenIddict server, BFF, and resource server implement every requirement — one flag enables the full profile.
Multi-Regulation Cookie Consent: GDPR, CCPA, LGPD
Shipping to the EU means opt-in. Shipping to California means opt-out. Shipping to Brazil means opt-in again. Most teams hardcode GDPR and call it done. Here is how Granit resolves the right consent model automatically — per tenant, per request, without a line of conditional logic in your application code.
Soft Deletes and Audit Trails with EF Core Interceptors
Stop sprinkling CreatedAt assignments across repositories and IsDeleted = false across queries. Five interceptors and one global filter make compliance the default — and ExecuteUpdate the only thing left to watch for.
Observability in .NET 10: Serilog + OpenTelemetry to Grafana
Wire Serilog, OpenTelemetry and the Grafana LGTM stack into a .NET 10 app in one call. Structured logs, distributed traces, metrics — all OTLP, all sovereign.
Building SOC 2 Type 2-Ready SaaS with Granit
Enterprise customers ask for a SOC 2 Type 2 report before signing. Here is how Granit's modules map to the five Trust Service Criteria — and what the framework cannot replace.
How Granit Helps You Ship NIS 2-Ready .NET Applications
NIS 2 is now law across the EU. Here is what it requires from your .NET stack — and how Granit's supply chain pipeline and embedded security modules cover the key obligations out of the box.
Crypto-Shredding: GDPR Erasure Without Deleting a Single Row
Physical deletion breaks audit trails, conflicts with legal holds, and fails on append-only systems. Crypto-shredding solves all three: destroy the key, and the ciphertext becomes random noise. Here is how Granit implements it.
GDPR by Design: Privacy Patterns in a .NET Framework
GDPR compliance is not a checkbox. It is an architectural constraint that must be enforced at the framework level. Here is how Granit implements data minimization, right to erasure, and pseudonymization by default.