| NFR-PERF-001 | The system shall support responsive user workflows for common dashboard and mobile actions. | Medium | Needs Confirmation |
| NFR-PERF-002 | Sensitive endpoints such as login, OTP, and returns shall be rate-limited where configured. | High | Confirmed |
| NFR-AVL-001 | The system shall expose health checks for application and API availability. | High | Needs Technical Verification |
| NFR-AVL-002 | The system shall define RTO for service recovery. | High | Confirmed - Less than 1 hour |
| NFR-AVL-003 | The system shall define RPO wording clearly based on confirmed daily backups and the maximum acceptable data loss window. | High | Partially Confirmed - Needs Technical Wording |