Write the marketplace problem without naming a solution, then compare the routes

A marketplace seller software strategy framework should connect one observed merchant problem to a reversible decision. Use one authorised seller entity, one England operation, one named marketplace account and one job: keeping an approved product record, stock position and later order states aligned with the seller's source system.

Write the problem without naming a solution

State the affected product population, period, systems and evidence. Record the exact discrepancy or manual task and its consequence. Do not write "we need automation" or assign blame before investigating the event trail.

Map placed, authorised, captured, fulfilled, cancelled, returned, refunded, disputed and settled states separately. A marketplace notification, payment event and accounting entry may describe different moments. HMRC's VAT record guidance distinguishes supplies, adjustments, invoices and credit or debit notes. An accountant and VAT adviser must define the merchant's records rather than accepting a software label.

Compare a small set of routes

Include the current manual method, a configuration change, a buyer-built connection, a hosted service and a managed route where each can perform the same job. For every option, ask:

• who has seller and account authority;
• which product, stock, price and order fields move;
• how rejected, missing, late and duplicate events are handled;
• which party supports corrections and withdrawal;
• what evidence can be exported and restored; and
• how the seller returns to the accepted baseline.

Do not name or score a supplier without an exact current service dossier. A marketplace label does not establish contractual access or fitness.

Add the independent gates

The product record needs content, rights, safety and traceability evidence. OPSS publishes product safety alerts, reports and recalls, which can trigger a seller review or withdrawal. Absence from a notice is not safety approval.

The consumer journey needs its own check. The CMA's price-transparency guidance covers mandatory charges and pricing presentation. Consumer counsel must review the actual offer and total-price route. Privacy, PECR, accessibility, security and tax decisions remain with their respective specialists.

Treat every gate as non-compensating. Better catalogue handling cannot cure an inaccessible task, excessive access, unsupported safety claim or unreconciled refund.

Specify the evidence before testing

For each option, write the expected input, output, owner and stop rule. Use synthetic product, order, payment and customer references. Production writes, live purchases and customer messages remain disabled.

Define each measure with an eligible population, numerator, denominator, period, timezone, source, query version and uncertainty. Leave acceptance thresholds blank until the buyer has evidence for the consequence. Missing records stay missing rather than becoming a zero.

Add one evidence row for every exception. It should show the original record, attempted change, response, correction and person who closed it. That trail lets the buyer distinguish a mapping defect from an approval delay or unavailable marketplace interface without inventing a cause.

NCSC guidance for using SaaS securely addresses privileged access, monitoring and recovery copies. Test those controls for the actual configuration. The guidance does not certify a supplier.

Issue pass, hold or stop

The decision pack contains the observed problem, current baseline, route evidence, test record, costs, specialist approvals, rollback and exit proof. Assign a named owner and review date to every unknown.

Pass only the bounded route and configuration tested. Hold when evidence is incomplete. Stop if authority is absent, a product cannot be withdrawn, personal data is exposed, payment and accounting states cannot reconcile, an accessible journey fails or the export cannot be restored. Retaining the manual route is a valid outcome.

Set an expiry for the decision. A marketplace term, interface, safety notice, tax treatment or supplier release can make the earlier evidence stale and force the relevant gate to reopen.