← Back to demo Vat-app

Roadmap

Where Vat-app has been and where it's going. We build in the open — this page is updated as things ship.

What's been built

April 2026
Project started
Discovered that Finnish VAT returns must be filed monthly even when there is nothing to report. Built a proof of concept that called Vero's sandbox API and got a real response back.
April 2026
Production API access granted
Applied for and received a production software key from Vero's API portal. Registered the product officially.
May 2026
Production certificate issued
Navigated Vero's PKI certificate service. Got a production certificate for Taikamaatio Oy. Passed acceptance testing — Tuotantolupa myönnetty.
26 May 2026
First automated production filing
GitHub Actions filed a real VAT return to Verohallinto automatically. UniqueIdentifier 20019213921171. The automation works.
v0.1.0
26–27 May 2026
Database, encryption, dashboard
Moved company data and certificates to Supabase. Implemented master key + per-company session key encryption. Built the live dashboard showing the VAT calendar and filing history.
v0.1.0
27 May 2026
Server-side certificate generation
Built two Supabase Edge Functions that generate a private key and CSR, call Vero's PKI API, retrieve the signed certificate, and store everything encrypted. No terminal required for onboarding.
v0.1.0
27–28 May 2026
Full signup flow wired
Three-step onboarding flow connected to real backend. Company inserted to database, Suomi.fi authorisation guide inline, certificate generated automatically from TransferID and TransferPassword. Auto-deployment via GitHub Actions SSH.
v0.2.0
28 May 2026
Welcome screen after onboarding
Personalised post-onboarding landing — company name, Y-tunnus, filing frequency, next run date, and the specific period that first run will file for. The flow now has a proper ending.
v0.3.0
28 May 2026
Sprout illustration
The abstract botanical in the hero was replaced with a proper sprout — roots, stem, leaves. Drawn by Gemini, processed and positioned by Claude, judged by Mikael. Small and growing felt right.
v0.3.1
28 May 2026
Mobile positioning fix · index.html
One media query to shift the sprout's position on small screens — the roots were overlapping the logo text. Also locked the file name from index-test.html to index.html.
v0.3.2

What's coming

🧪
End-to-end onboarding test
Walk through the full signup flow with a real new company — Suomi.fi authorisation, certificate request, automatic generation. Find and fix whatever breaks.
Next up
📋
Manual filing from the dashboard
A "File now" button on unfiled calendar tiles, for months outside the automatic schedule. Useful for catching up on periods before automation started. Clicking confirms, calls a new Edge Function that decrypts the certificate and files directly to Vero, and updates the tile inline — no page reload needed. Only appears on months that haven't been filed yet. Manual filings are already recognised in the database via the trigger_type field and show as tagged in the submission log — the button will set this correctly so the history stays honest.
Next up
🧙
Naapurin Nettishamaani production certificate
Vat-app operates under Naapurin Nettishamaani (Y-tunnus 3010501-4) — already named throughout the signup flow and help pages. The remaining step is getting a production certificate in Naapurin Nettishamaani's name so it can file on behalf of other companies.
Next up
🔐
Passphrase gate for configuration changes
A passphrase that gates changes to your company's setup — never stored, required only when something changes. Adds a meaningful layer of security without affecting the automated filing.
Soon
🔔
Email notifications
A confirmation email after each successful filing with the Verohallinto reference number. And a heads-up if something goes wrong so you can file manually before the deadline.
Soon
📊
Real VAT figures
Currently Vat-app files zero-activity returns. For companies with actual VAT to report, we'll add support for real figures — sales, purchases, tax amounts.
Soon
🏦
Key Management Service (KMS)
Migrate certificate encryption from a master key to a proper KMS (AWS Secrets Manager or similar) for stronger per-customer isolation and audit logging.
Later
🔑
Proper login and accounts
Each company gets their own login and a personal dashboard showing only their own filing history and status.
Later
📅
Quarterly filing support
Some companies file VAT quarterly rather than monthly. The automation supports the schedule — the UI and onboarding will too.
Later
This is an early access product built by one person. The roadmap reflects genuine intentions, not marketing commitments. Things may move, change, or be replaced by better ideas. If you have a request or a question, reach out directly.
← Demo How it works License & terms Add your company →