Tenants that appear without an order are still admissions
Self-serve signup sitting beside a sales-led onboarding application will create live accounts the commercial file never authorised. Completeness testing has to start from both doors.
Notes
From the file, after the walk.
Short pieces on the evidence we actually ask for when a SaaS onboarding application is treated as an admissions record.
Marking the checklist complete is not the same as provisioning
Onboarding applications often let a person tick the last box while invites, billing, or roles are still pending. The completion timestamp then misleads every downstream report.
PDPA questions that sit inside the signup screen
Onboarding applications collect names, emails, phone numbers, and sometimes identity documents before anyone has recorded a purpose. That is a data-protection fact as well as an admissions fact.
When staff complete onboarding on the customer’s behalf
Impersonation and “finish this checklist” tools are ordinary in customer success. They are also the easiest way to skip verification and to grant seats the order never listed.
Pending invites that never expire are still open doors
An invite sitting in someone’s inbox after the project ended is an access path. Onboarding applications that cannot age invites leave that path open by default.