| Platform infrastructure, hosting and availability | I | I | A R — our platform, our estate, our responsibility |
| Backup and disaster recovery of the platform | I | I | A R — we run and test it; targets are set in your contract |
| Environment provisioning and AWS region selection | A — your data-residency decision | C | R — we provision in the region you choose |
| Platform security controls and patching | I | I | A R |
| Supplier qualification of Complere | A | R — coordinates the qualification and reviews our answers | R — we complete the questionnaire, supply the evidence, and answer findings |
| User requirements (URS) | A R | C | I |
| Configuration specification | A | R | C |
| Validation plan and risk assessment | A | R | C — VMP and RA templates ship with the pack |
| Data migration — extraction, mapping and load | A | R | C |
| Migration reconciliation and its approval | A — the customer approves the reconciliation | R | I |
| IQ / OQ execution | A | R | C — protocols ship with the pack; execution is a human activity |
| PQ / UAT | A R | C | I |
| Deviations and failed test scripts | A | R | C — escalate to us where the cause looks like a product defect |
| Product defect investigation and product CAPA | I | I | A R — the defect, its root cause and the fix are ours |
| Security incident affecting the platform | A for their own response | I | A R — investigation, containment, and notifying you and the customer |
| Availability incident | I | I | A R — restoration and status communication |
| Data-integrity event in a tenant | A | R — investigate with the customer | R where platform behaviour is implicated |
| Traceability review and approval | A | R | C |
| Validation Summary Report | A | R | I |
| Go-live authorisation | A R | C | I |
| Release-impact assessment | A | C | R — we state what changed and what it touches, ahead of the release |
| Vendor regression testing of the platform | I | I | A R — our release, our regression suite |
| Customer-specific regression after a release | A | R | C |
| Change control | A R | C | I |
| Periodic review | A | R | C |
| Inspection and audit support | A R | R — front line, in the room | C — evidence, architecture answers, escalation to a founder |
| Record retention and archival | A | I | R — the platform retains records per your contracted terms |