Skip to main content

Security and procurement

Diligence without guesswork.

Security, data and procurement review is assembled against the actual customer, site and product scope rather than a generic checklist.

Data location

Confirmed in scope

The proposed storage region, service provider processing locations and contractual position are confirmed for the engagement.

Review material: Processing boundary and subprocessor review

Organisation boundary

Evidence available

The access model and organisation scoping can be reviewed against supporting application and database evidence.

Review material: Architecture and data flow summary

Encryption

Evidence available

Transport and hosting controls are reviewed with the evidence available for the proposed customer scope.

Review material: Architecture and data flow summary

Identity and access

Confirmed in scope

Customer roles, access pathways and onboarding controls are confirmed for the pilot and reconsidered for any wider rollout.

Review material: Pilot onboarding and access plan

Device and connectivity

Confirmed in scope

The agreed device, connectivity pattern and workflow are validated before site use.

Review material: Device, connectivity and support plan

Export and integration

Separately scoped

Required export formats are confirmed for the pilot. Integration work remains a separate design and approval decision.

Review material: System boundary and required output schedule

Customer review material

Assembled for the actual pilot scope.

Start with the public documents, then request the evidence that depends on the proposed customer, site and workflow. Contractual documents remain controlled by FaultPilot's legal team.

  1. 01

    Read now

    Public website privacy and usage terms remain available without a diligence request.

    Open public legal documents
  2. 02

    Request against scope

    Architecture, processing boundary, access, device and contractual material is assembled for the proposed engagement.

  3. 03

    Close the review

    Questions, available evidence, accountable owners and unresolved gaps are kept explicit before site use.

  • Current architecture and data-flow summary
  • Subprocessor and processing-boundary review
  • Applicable customer and data-processing documents
  • Pilot device, connectivity and support plan
Request the review pack