• Database schema design, migrations and seed data
• A REST API with validation on every input
• Authentication and access control, done properly
• Swagger documentation, so your frontend or mobile team can work without asking you questions
• Tests on the parts that matter
• Deployment to your server or cloud, with CI so every push is checked