Good fit
One technical founder building a paid, multi-tenant AI product with Git, a terminal and TypeScript.
Source kit for technical founders
Build your paid AI SaaS on a connected foundation.
Login, subscriptions, usage credits and model spend checks are wired together. Own the source and deploy it yourself.
Live offer · checkout open
Live offer: €149 for the first 20 completed purchases, then €249. Delivery is manual within two business days.
- €149 proposed founding price
- Full source for your own products
- 12 months of updates
- 60 minutes setup help
One request. Every check.
Original animated walkthrough with synthetic English narration and English captions. Illustrated flows; the audit-screen exhibit uses recorded demo data.
From payment to model usage, one recorded flow.
The reference product connects commercial access to each tenant-attributed model request.
Payment
A verified Stripe event grants the buyer's subscription entitlement and whole-number credits.
Credits
The ledger attributes grants and usage to the organization without a mutable balance column.
Model request
The gateway screens, redacts and checks configured limits before calling a provider.
Usage record
Reported usage and cost are reconciled, audited and charged according to the documented outcome.
The whole kit. Not a compliance add-on.
One codebase with everything below already wired together; you build your product on top.
AI gateway
Every provider call goes through one gateway: screened, selected patterns redacted, limits checked and outcomes logged.
Accounts & teams
Sign-up, organizations, roles, 2FA: the boring parts, already wired.
Billing & credits
Stripe subscriptions and credit packs. Money in, metered, attributed per user.
Audit ledger
Every gateway call past input validation is recorded; the app role can only append and read those rows.
Safety layer
Pattern-based PII redaction and prompt-injection screening run before provider calls; neither catches every case.
Compliance pack
AVV, subprocessor list, checklists. Templates your lawyer reviews, not writes.
Agent skills
Your coding agent gets sanctioned paths instead of free rein.
App shell
A working product UI on day one: chat, settings, admin.
Docs & runbooks
Deploy, update, the key-leak morning: written down.
Opinionated by design. Check the fit first.
Zollwerk is a source foundation for builders who want to own and operate the stack.
Poor fit
Prompt-only builders, managed-hosting buyers, agencies transferring source, or established products avoiding a foundation change.
Bring
Docker, Postgres, a Linux host, DNS, SMTP, Stripe and provider credentials. You operate the deployment.
Know the limits
EU hosting does not control provider location. Redaction can miss PII; spend pre-checks cannot reserve concurrent requests.
Enforced, not promised.
Instructions are advice; these rules are grants, lint errors and pre-checks.
The build that refuses
Your agent imports a provider SDK directly. The build fails.
You don't need to read this. Your coding agent will, and it can't talk its way past it.
The table that can't be rewritten
The app's runtime database role cannot update or delete the audit log. Database owners retain control.
The call that never happened
Over budget? The call is refused before it costs anything, and the refusal is recorded.
Built for the day something goes wrong.
The lawyer letter
A customer's Datenschutzbeauftragter sends the questionnaire. Your answers are files already in your repo.
→ proof: compliance packThe runaway bill
Configured budgets are checked before each call. Concurrent requests can still pass before earlier usage is recorded.
→ proof: the blocked call aboveThe agent incident
Your agent agrees to the rule, then breaks it. Here, breaking it fails the build.
→ proof: the failing build aboveRepository evidence: enforced invariants, acceptance criteria and automated tests are included in the source.Read the specification →
Buyer-facing contracts, architecture, guides and runbooks ship with the kit. The internal working specification is not published.
One package. Proposed in advance.
FOUNDING EDITION
€149
first 20 buyers, if adoptedSTANDARD
€249
after the founding allocationLive offer. The first 20 completed purchases are €149; later purchases are €249. Delivery is manual within two business days. The seller and tax setup follow the existing Moko-Verse checkout configuration.
License: One natural-person developer may use delivered source in unlimited products they own. No redistribution, resale, client work or source transfer without a separate written license. Delivered versions remain usable; standard release access lasts 12 months.
Support: 60 minutes total of asynchronous setup help within 30 days after delivery. Bug reports are triaged separately, without a fix-time promise.
Refund draft: 14 days, subject to mandatory rights and the digital-delivery process. Terms require founder adoption before sale.
FAQ
Is this legal advice?
No. Zollwerk is software and document templates: technical building blocks. Review with your lawyer; distrust any vendor at this price who says "guaranteed compliant".
What exactly is proposed?
Full source for one developer's own products, the reference app, documentation and 12 months of standard releases. Delivered versions remain usable afterward.
How do refunds work?
A 14-day refund is proposed, subject to mandatory rights and the final digital-delivery process. The draft is not yet an adopted sales term.
Why not my agent + a free boilerplate?
Your agent scaffolds shapes fast; it won't build constraints it has to live inside. The enforcement layer, and the negative tests proving it bites, is what you're buying.
I'm on Supabase / Prisma / Vercel.
One deliberate stack: Postgres, Drizzle and Docker on a Linux host. The app-role restriction depends on database permissions that the owner controls.
Can I use it for client work or transfer it?
Not under the proposed standard license. Client work, redistribution, resale and source transfer require a separate written license.
What support is included?
Up to 60 minutes total of asynchronous setup help within 30 days after delivery. Bug reports are triaged separately without a fix SLA.
Who's behind this?
I'm Mohsin Kokab. I build Zollwerk in the open, sold through our family business (details in the Impressum). The captures show historical product fixtures, not customer results. · kokab.dev