Walkthrough

Six stops on the path into the product.

This is the sequence we reconstruct on an engagement. It is not a product tour. Each stop has a population, a join to another record, and a place where staff can override the flow.

Signup and source

We lock a population of signup attempts for the period and classify each by source: sales-led, self-serve, staff-created, or unknown.

What we look for: Create-source field, duplicate emails, test tenants mixed into production.

Verification

Email, phone, domain, or document checks are rebuilt from the event log, including failures, expiries, and staff overrides.

What we look for: Tenants created before verification completed; “verify on behalf” with no named actor.

Tenant and organisation

The organisation record is matched to the legal entity on the order. Trading names, group companies, and sandbox copies are separated.

What we look for: Two tenants for one order; one tenant covering two billed entities.

Invites and seats

Invites, roles, and seat counts at checklist completion are tied to the order form, including pending invites that never expire.

What we look for: Partner and personal mailboxes; elevated roles given “just for onboarding”.

Billing attach

We test whether a billing account, invoice entity, or prepaid flag was linked before the customer was marked live.

What we look for: Live tenants with no billing record; trial flags left on paying accounts.

First session and close

First login, staff impersonation, and the completion flag are compared. The walk ends with an exception log, not a dashboard screenshot.

What we look for: Completion ticked by staff; no customer login; impersonation without a reason code.

What you prepare

A dated extract of signups, tenants, invites, verification events, and completion flags. The order or CRM file for the same period. A test tenant we can walk without touching a live customer. A named owner for each override role.

We do not need production administrator passwords. We do need to know which environments exist — sandbox mixed into production is a finding we would rather see on day one.

What you receive

An exception log keyed to the six stops, sample evidence, and a written report. If you want the statutory auditor or an internal auditor to read it, say so in the scoping note and we write the procedures so they can sit on that file.

This walkthrough is the method. The work itself is scoped under the services list. Typical starting fees are shown there; nothing on this page is a checkout.

Ask us to walk your onboarding application

Name the application, the entity, and the period. If the path is not an admissions record we can examine, we will decline in writing rather than stretch the letter.

Book a walkthrough from the Subang desk