Free checklist

10 checks before your AI-built app touches real customer data

AI tooling will get you a working app fast. It will not tell you whether that app is safe to put in front of paying customers, whether one account can read another account's data, or whether a single bot can run up an unlimited bill.

Each check gives you a founder-level question, the evidence your developer or AI agent should be able to confirm, and a free self-test you can run yourself. Score each one out of 2, add up your total, and the last page tells you what to do next. Scoring takes about 15 minutes.

We'll use your email to send you the checklist. See our Privacy Policy.

What the 10 checks cover

  1. 1.Authentication and account recovery
  2. 2.Authorisation and user-data isolation
  3. 3.Secrets and sensitive data
  4. 4.Inputs, content and file uploads
  5. 5.API abuse, rate limits and cost controls
  6. 6.Database correctness and performance
  7. 7.Code structure AI can safely work with
  8. 8.Dependencies and generated-code hygiene
  9. 9.Errors, logs, monitoring and audit trail
  10. 10.Deployment, backups and rollback

This is a general educational checklist and a basic first-pass review. It is not a security audit, a penetration test, a certification, or a guarantee that your application is secure or production-ready.

Scored badly, or hit a lot of “not sure”?

That is the normal result, and it is what a 15-minute call is for. We will tell you which of these actually matter for your stage, what to fix first, and what can safely wait.

Book a free 15-minute call · software, AI and fractional CTO services for UK SMEs · fixed-price packages from £500