Artifact Checklist

Know what is available before the review gets noisy.

This checklist helps buyers separate public trust materials, normal review topics, and the deeper guided diligence that makes sense after serious evaluation starts.

Checklist

Three layers of diligence artifacts

The right sequence keeps legal and security review grounded in real implementation questions.

Public now

Available without a call. Send these to a reviewer before the first meeting.

  • Security overview How access, tenant isolation, encryption and audit logging are structured.
  • Trust Center Current control posture in one place, including what is aligned versus independently audited.
  • OSCAL system security plan Machine-readable SSP for reviewers who ingest control data directly.
  • Subprocessor list Every third party that can process customer data, and what each one handles.
  • Procurement FAQ The questions security and legal reviewers ask first, answered up front.

Typical buyer review

Normal diligence topics. We cover these in writing during evaluation.

  • Role and company-scope model How company_id scoping and role membership keep one operator’s data out of another’s.
  • AI governance and advisory positioning Where AI suggests, where a human approves, and what is logged at each step.
  • Incident response and access review How incidents are detected and escalated, and how access is reviewed and revoked.
  • Migration sequencing and controls What moves first, what stays in your current PMS, and how cutover risk is bounded.

Guided diligence

Buyer-specific work once evaluation is serious. These are built for your portfolio, not published.

  • Implementation assumptions for your portfolio Door count, unit mix and current tooling mapped to a realistic rollout.
  • Architecture walkthrough A working session on data flow, retention and integration boundaries.
  • Risk mapping by current PMS What changes if you are on AppFolio, Buildium, Yardi or a mixed stack.
  • Buyer-specific trust and security Q&A Direct answers to your reviewer’s questionnaire, in their format.