We test the architecture, delivery, supplier, cost, ownership, security, or continuity evidence that could change a material business decision.
The charter fixes the decision, risk hypothesis, scope, exclusions, criteria, access, interviews, evidence request, conflicts, and decision date before review begins. The output records observation, criterion, evidence, consequence, confidence, options, owner, and closure evidence.
Use Vendor Due Diligence before a supplier commitment and technical due diligence for an investment or acquisition. The tech-audit decision guide helps select the right intervention.
Contract, service objective, architecture principle, policy, framework, or business requirement. The source of every evaluation stays visible.
Contracts, performance, architecture, access, data portability, skills, transition activities, and assumptions behind a vendor lock-in decision.
Each material action has an accountable person, review date or event, escalation path, residual-risk decision, and evidence required for closure.
These are the checkpoints we sign off before the next phase ships. Same criteria on every lane.
The proposal fixes the decision, risk hypothesis, scope, exclusions, criteria, evidence request, access, interviews, conflicts, finding fields, decision forum, and closure path. Specialist security, legal, certification, or remediation work is listed separately.
The schedule follows the systems, environments, access, interviews, sampling, specialist tests, evidence quality, draft challenge, and decision date. The proposal records those dependencies and the treatment of late or unavailable evidence.
The audit succeeds when the agreed evidence supports a decision, material uncertainty is visible, each accepted action has an accountable person, and closure requires a defined test, artefact, approval, transfer, or measured result.
The decision owner, people who control the relevant systems and evidence, affected operators, and any required security, finance, procurement, legal, or transaction specialists. Conflicts and access constraints are recorded before review.
Tell us what needs fixing
We read every brief and reply within one business day.
Prefer to talk first?or request a tech stack audit →or email us directly →
Not sure where to start? Send the stuck decision, workflow, or page. We will say whether you need a diagnostic call, a tech stack audit, or a different first step.