Field notes.
§061
2026-09-09
Abhiraj Sakargaye
Does Your MVP Need CCPA/CPRA Compliance? What It Costs, By Trigger.
Most MVPs don't meet the CCPA/CPRA threshold at launch, but the trigger is consumer count, not revenue: 100,000 California consumers or households a year is enough, regardless of income. A baseline DIY setup runs $500-$5,000/year, a real program with a built opt-out flow runs $10,000-$25,000, and a dedicated privacy function runs $40,000+/year. CPRA removed the 30-day cure period, so a violation can draw a penalty with no warning shot.
- compliance
- cost
- mvp
- privacy
- ccpa
§060
2026-09-07
Naman Barkiya
Does Your MVP Need EU AI Act Compliance? What It Costs, By Risk Tier.
Most MVPs only owe EU AI Act transparency compliance — disclosing an AI chatbot or labeling AI-generated content — which costs $500-$3,000 one-time. An MVP whose AI scores or decides hiring, credit, insurance, or education outcomes falls under Annex III 'high-risk' rules instead, with conformity-assessment and quality-management-system costs the EU's own impact assessment puts at 193,000-330,000 EUR to set up.
- compliance
- cost
- mvp
- ai
- eu-ai-act
§059
2026-09-03
Naman Barkiya
Marketplace MVP: Supply First or Demand First?.
Build the harder side of a marketplace MVP first — usually supply, because real listings, inventory, or providers are expensive to fake, while demand can be simulated by hand for the first few weeks. Once one side looks credible (fifteen to thirty real listings, not two), the other side is two to ten times easier to bring on, because there's finally something worth showing up for.
- mvp
- marketplace
- scoping
- process
§058
2026-09-01
Naman Barkiya
AI Writes 95% of the Code Now. The Bottleneck Moved..
AI coding agents removed the typing bottleneck, not the decision bottleneck: 25% of YC's W25 batch had codebases that were 95%+ AI-generated, yet Andrew Ng says the constraint in AI startups moved to product management — deciding what to build, in what order, for whom. The fix isn't a faster coding tool, it's a one-page scope document before the agent starts.
- ai
- product
- mvp
- scoping
§057
2026-08-30
Abhiraj Sakargaye
Does Your MVP Need GDPR Compliance Before Your First European User Signs Up?.
GDPR applies the moment your product processes personal data from anyone in the EU or UK — not when you sign a paying customer, and not because of where your company is incorporated. A lean, DIY-tooled setup runs $500-$5,000 a year; a real program with legal review and signed DPAs runs $10,000-$30,000; a dedicated Data Protection Officer runs $50,000+ a year.
- compliance
- cost
- mvp
- gdpr
§056
2026-08-28
Naman Barkiya
Does Your MVP Need PCI Compliance Before You Can Take a Card?.
You almost never need full PCI DSS at MVP stage. If your app hands card data straight to a processor like Stripe and never touches the raw card number, you qualify for SAQ-A — the lightest self-assessment tier, roughly $300-$5,000 a year. Full Level 1 DSS with a paid QSA assessment runs $50,000-$250,000+ a year and only applies past roughly 6 million transactions annually.
- compliance
- cost
- mvp
- payments
§055
2026-08-26
Naman Barkiya
Does Your MVP Need SOC 2 Before Your First Enterprise Deal?.
Most MVPs do not need SOC 2 on day one. You need it the day a specific enterprise buyer's procurement team asks for the report — usually your first $30,000+ contract with a company that has its own security review. Budget $8,000-$20,000 and 4-8 weeks for a SOC 2 Type 1; a Type 2 runs $15,000-$40,000 plus a compliance platform at $10,000-$30,000 a year.
- compliance
- cost
- mvp
- enterprise
§054
2026-08-24
Abhiraj Sakargaye
Does Your Healthcare MVP Need to Be HIPAA Compliant?.
An app needs HIPAA compliance only if it creates, stores, or transmits Protected Health Information for a covered entity or its business associate. If it does, plan on 20-50% more than a comparable non-regulated build: a lean HIPAA-compliant MVP runs $35,000-$90,000 versus $25,000-$60,000 for the same scope without PHI — the gap is architecture and audit trail, not a form filed at the end.
- healthcare
- compliance
- cost
- mvp
§053
2026-08-22
Abhiraj Sakargaye
Vibe-Coded MVP With Real Users: Rescue the Code or Rewrite It?.
A vibe-coded MVP with real users is worth an audit, not an automatic rewrite: a $3,000-$15,000, one-to-two-week audit tells you whether you need a $15,000-$60,000 rescue or a $50,000-$150,000+ rewrite — and rewrite only wins if the audit finds the core data model or auth layer is unsound.
- ai
- vibe-coding
- technical-debt
- mvp
§052
2026-08-20
Naman Barkiya
4 builds, 4 cuts: what we didn't ship, and why each cut held.
Across four shipped builds — ONETAPP, SIT Manager, Tirth, and HospiHealth — we cut a mobile app, a leaderboard and API, a mid-build feature, a full booking platform, and a marketplace, all before or during the build rather than after launch. None of the four cuts has been reversed; the discipline is timing the cut before the feature is built, not deciding whether to build it at all.
- case-study
- mvp
- scoping
- postmortem
§051
2026-08-18
Naman Barkiya
6 AI app builders founders use to prototype an MVP.
For a first MVP in 2026, Bolt.new and Lovable are the fastest way to get a clickable, working product in front of a real user; Replit Agent and Base44 build a real backend without writing it yourself; v0 and Cursor are code generators for founders who already have a developer reviewing the output. Pick by the question you're answering, not by which tool trended last, and expect to graduate off it once you have paying customers, a feature the visual editor can't express, or you're spending more hours fighting the generated code than you spent building it.
- ai
- no-code
- mvp
- tools
§050
2026-08-16
Naman Barkiya
Alvera Restore build postmortem: a foot lotion brand that couldn't look like a medicine cabinet.
Alvera Restore is a CBD-adjacent foot lotion line launched for a US podiatry clinic. We built an approachable, everyday identity instead of a clinical one, then designed a compliant packaging system across multiple bottle formats before touching label art — because a compliance floor decided after the label ships is a compliance floor you re-litigate on every new SKU.
- case-study
- brand
- packaging
- compliance
- healthcare