
The build that refuses
Your agent imports a provider SDK directly. The build fails.
You don't need to read this. Your coding agent will, and it can't talk its way past it.
EU AI-SaaS starter kit
Gateway, billing, audit, safety, compliance pack. One self-hosted kit for EU founders building with AI coding agents.
30 seats · ships September 2026
Recorded from the current build; re-recorded from the release build in September.
One codebase with everything below already wired together; you build your product on top.
Every model call goes through one door: budget-checked, redacted, logged.
Sign-up, organizations, roles, 2FA: the boring parts, already wired.
Stripe subscriptions and credit packs. Money in, metered, attributed per user.
Every AI call recorded, including the blocked ones. Append-only.
PII redaction and prompt-injection screening before anything leaves your servers.
AVV, subprocessor list, checklists. Templates your lawyer reviews, not writes.
Your coding agent gets sanctioned paths instead of free rein.
A working product UI on day one: chat, settings, admin.
Deploy, update, the key-leak morning: written down.
Instructions are advice; these rules are grants, lint errors and pre-checks.

Your agent imports a provider SDK directly. The build fails.
You don't need to read this. Your coding agent will, and it can't talk its way past it.

The app's own database role cannot edit the audit log. Not policy. Permissions.

Over budget? The call is refused before it costs anything, and the refusal is recorded.
A customer's Datenschutzbeauftragter sends the questionnaire. Your answers are files already in your repo.
→ proof: compliance packBudgets are checked before the spend, not after. No four-figure surprise.
→ proof: the blocked call aboveYour agent agrees to the rule, then breaks it. Here, breaking it fails the build.
→ proof: the failing build aboveThe full specification ships with the kit.

0 of 30 pre-sale seats claimed, counted by hand, last updated 2026-09-01
License: One-time. Single developer, unlimited projects. Lifetime updates via git.
Refund: 14-day withdrawal right (Widerruf), and refundable until delivery on top.
No subscription. No hosted lock-in. Prices final under §19 UStG, no VAT line.
Checkout opens with the pre-sale; the button goes live when the first seat can actually be bought.
No. Zollwerk is software and document templates: technical building blocks. Review with your lawyer; distrust any vendor at this price who says "guaranteed compliant".
A private GitHub repo with the full source, the full specification, and lifetime updates via git upstream.
Every pre-order is refundable until delivery, on top of the 14-day withdrawal right. If the kit cannot ship, every cent comes back. You risk the wait, never the money.
Your agent scaffolds shapes fast; it won't build constraints it has to live inside. The enforcement layer, and the negative tests proving it bites, is what you're buying.
One deliberate stack: Postgres, Drizzle, Docker on an EU VPS. The append-only guarantee needs you to own your database roles; that's the reason, and it's a real trade-off.
Single developer, unlimited projects, client projects included.
September 2026. Month-level on purpose; a precise date would be invented.
I'm Mohsin Kokab. I build Zollwerk in the open from Munich, sold through our family business (details in the Impressum). Everything on this page is captured from the real repo, and every pre-order is refundable until delivery. · kokab.dev