Customer-Managed Operational Checklist

Operational checks for a customer-managed deployment.

Before sale

• Decide whether the product is B2B-only or also sold to consumers.
• Disclose price, payment, renewal, cancellation, refund and delivery.
• Prepare licence terms, the Customer-Managed Addendum, privacy and support policies.
• State what the vendor handles and does not handle.

Administrator distribution

• Provide installation and licence information only to administrators.
• The customer administrator issues QR codes and sends invitations through the customer mail environment.
• Do not include passwords, private keys, personal information or persistent API keys in QR codes.

Support

• Vendor remote login is not the default.
• Log submission is voluntary and controlled by the customer administrator.
• Mask personal data, secrets and credentials.
• Do not send certificate private keys, passwords or API keys.

Backups

• State customer-side backup responsibility.
• Document daily backups, weekly review and monthly restore tests.
• State that the vendor does not hold customer backups without a separate agreement.