The founder arrived with Node.js + Handlebars already chosen. In the first conversation, before any contract, I recommended React + Node, not on preference, but because consent-driven UI and real-time WhatsApp would have broken the template approach by month 3.
The principle: the regulatory layer comes first. GDPR isn't a compliance checkbox, it's a data model. Consent, residency and audit logging were designed into the schema from day one, avoiding the 3 to 4 months of rework a compliance-as-afterthought build incurs.