NFR register
All non-functional requirements with measurable thresholds. These are acceptance criteria — any system that does not meet these targets is not production-ready.
| Code |
Requirement |
Threshold |
Parent |
| NFR-001 |
Onboarding completion rate, standard-risk customers |
≥ 80% |
BG-001 |
| NFR-002 |
End-to-end onboarding time, p90 |
≤ 5 minutes |
BG-001 |
| NFR-003 |
Cross-border wallet transfer settlement, p99 |
≤ 2 minutes |
BG-002 |
| NFR-004 |
Insight card refresh after qualifying event |
≤ 60 seconds |
BG-003 |
| NFR-007 |
Credit decision for standard-risk applications |
≤ 10 seconds |
BG-006 |
| NFR-012 |
Postgres write latency, ledger posting p99 |
≤ 10ms |
SG-001 |
| NFR-013 |
Postgres read latency, balance query p99 |
≤ 5ms |
SG-001 |
| NFR-014 |
Snowflake write-back for operational models |
≤ 60 seconds |
SG-002 |
| NFR-015 |
CDC pipeline data availability, Neon Postgres commit to Snowflake p99 |
≤ 5 minutes |
SG-003 |
| NFR-018 |
API gateway latency overhead per request |
≤ 5ms |
SG-005 |
| NFR-021 |
Fraud scoring inference latency p99 |
≤ 200ms |
SG-007 |
| NFR-025 |
Domestic NPP/real-time payment confirmation to customer |
≤ 5 seconds |
SG-009 |
Availability & resilience
| Code |
Requirement |
Threshold |
Parent |
| NFR-019 |
RTO / RPO for Tier 1 services (ledger, payments, KYC) |
RTO ≤ 4h / RPO ≤ 1h |
SG-006 |
| NFR-020 |
Payment and account service availability, monthly |
≥ 99.95% |
SG-006 |
Automation & quality
| Code |
Requirement |
Threshold |
Parent |
| NFR-005 |
Customer requests resolved without human agent |
≥ 85% |
BG-004 |
| NFR-006 |
Interest accrual posted to all deposit accounts |
By 23:59 daily |
BG-005 |
| NFR-008 |
Capital/liquidity metrics available after material event |
≤ 5 minutes |
BG-007 |
| NFR-010 |
Regulatory submissions produced without manual intervention |
≥ 90% |
BG-009 |
| NFR-011 |
Policies in register with no automated system satisfaction |
= 0 |
BG-010 |
| NFR-016 |
Front-end bundle size, gzipped, customer mode |
≤ 500kb |
SG-004 |
| NFR-017 |
Time to interactive on 4G mobile, customer home screen |
≤ 2 seconds |
SG-004 |
| NFR-022 |
Transaction categorisation auto-rate at 0.85 confidence (6 months) |
≥ 85% |
SG-007 |
Security
| Code |
Requirement |
Threshold |
Parent |
| NFR-009 |
Component library divergence between customer and back office modes |
= 0 |
BG-008 |
| NFR-023 |
MTTD for anomalous access events via SIEM |
≤ 5 minutes |
SG-008 |
| NFR-024 |
Audit log record mutability |
= 0 modifications allowed |
SG-008 |
Delivery & deployment
DORA metrics are the acceptance criteria for the engineering delivery system. These thresholds define a high-performing team. See environments and deployment framework.
| Code |
Requirement |
Threshold |
Parent |
| NFR-026 |
dev CI pipeline execution time p95 (lint → smoke tests) |
≤ 10 minutes |
DT-010 |
| NFR-027 |
UAT pipeline execution time p95 (deploy → all gates pass) |
≤ 20 minutes |
DT-010 |
| NFR-028 |
Deployment frequency per active repo to prod |
≥ 1 per week |
DT-010 |
| NFR-029 |
Mean time to recovery (MTTR) from a failed prod deploy |
≤ 30 minutes |
DT-007 |
| NFR-030 |
Change failure rate (prod deploys requiring rollback) |
≤ 5% |
DT-007 |