Artifact Checklist

Know what is available before the review gets noisy.

This checklist helps buyers separate public trust materials, normal review topics, and the deeper guided diligence that makes sense after serious evaluation starts.

Checklist

Three layers of diligence artifacts

The right sequence keeps legal and security review grounded in real implementation questions.

Public now

Available without a call. Send these to a reviewer before the first meeting.

  • Security overviewHow access, tenant isolation, encryption and audit logging are structured.
  • Trust CenterCurrent control posture in one place, including what is aligned versus independently audited.
  • OSCAL system security planMachine-readable SSP for reviewers who ingest control data directly.
  • Subprocessor listEvery third party that can process customer data, and what each one handles.
  • Procurement FAQThe questions security and legal reviewers ask first, answered up front.

Typical buyer review

Normal diligence topics. We cover these in writing during evaluation.

  • Role and company-scope modelHow company_id scoping and role membership keep one operator’s data out of another’s.
  • AI governance and advisory positioningWhere AI suggests, where a human approves, and what is logged at each step.
  • Incident response and access reviewHow incidents are detected and escalated, and how access is reviewed and revoked.
  • Migration sequencing and controlsWhat moves first, what stays in your current PMS, and how cutover risk is bounded.

Guided diligence

Buyer-specific work once evaluation is serious. These are built for your portfolio, not published.

  • Implementation assumptions for your portfolioDoor count, unit mix and current tooling mapped to a realistic rollout.
  • Architecture walkthroughA working session on data flow, retention and integration boundaries.
  • Risk mapping by current PMSWhat changes if you are on AppFolio, Buildium, Yardi or a mixed stack.
  • Buyer-specific trust and security Q&ADirect answers to your reviewer’s questionnaire, in their format.