Day one on Meridian Hours and I wrote zero app code — just the calls that are expensive to change later. Apple IAP before Stripe, Drizzle over Prisma (I want SQL I can read in review), Supabase Auth to keep the vendor count down, EU-only hosting, field-level encryption for client and invoice details. A tool that bills people by the hour has to be trustworthy before it’s clever.