# Commercial release requirements

The application is independent and self-hostable. Before professional sale:

1. Operate a SHiRE-controlled licensing service with signed, device-bound licence tokens.
2. Use Stripe Checkout and Customer Portal for subscriptions; process subscription state only through server-side webhooks.
3. Replace browser local storage with an encrypted database and authenticated API.
4. Add organisation tenancy, password hashing, MFA, account recovery and session revocation.
5. Add encrypted backups, audit retention and export/deletion controls.
6. Complete privacy, security, legal and dental-regulatory review for every market where it is sold.
7. Do not advertise unvalidated clinical or manufacturing capabilities.

Recommended plans: Trial, Professional Monthly, Professional Annual, Laboratory Team and SHiRE OS Included.
