Child product

Corporate exchange comes after the security base

The corporate version should reuse ExchangeCore, then add CSV import, admin controls, audit logs, exports, and stricter compliance workflows.

corporate-gift-exchange

Enterprise additions

1

Import

CSV employee import with validation and duplicate detection.

2

Rules

Department, manager, spouse, previous-year, and budget constraints.

3

Audit

Organizer actions, export history, and match generation events.

4

Export

Organizer reports without exposing private matches unnecessarily.

Do not launch too early

Companies raise the cost of access-control mistakes, email deliverability failures, and support edge cases.

Reusable modules

Groups, invitations, admins, matches, sessions, and notifications are the core.

Monetization

Corporate exchange is the clearest paid surface, but only after security and auditability are proven.

FAQ

Common questions

Why wait before launching corporate?

Corporate usage needs audit logs, stronger admin workflows, support tooling, and very clear authorization boundaries.

What can be reused?

Groups, invitations, matches, wishlists, sessions, notifications, and access policies should all be reused.