Developer resources
What to prepare before applications open.
The best audit is the one made boring by clear architecture, direct pricing, minimized data, and complete evidence.
Prepare these first
Complete inventories prevent surprises.
- SDK and service inventory with versions, data, purpose, retention, and subprocessors
- Data flow, permissions, accounts, and deletion
- Purchase catalog, currencies, random rewards, competition, timers, and events
- Notification catalog and subscription flow
- Remote flags, experiments, regions, server states, and test access
Never send casually
Minimize sensitive evidence.
- private signing keys or passwords
- production credentials or database exports
- player/customer records or child data
- unredacted support conversations
- third-party confidential material without authority