Installation checklist

Record product version, hosting platform, PHP/database versions, date and outcome. Complete before inviting employees:

• Composer platform requirements pass and migrations finish.
• HTTPS works; only backend/public is served.
• Secrets, logs, source, backups and private documents cannot be downloaded publicly.
• Debug/demo modes are off; keys are private and backed up.
• The explicitly configured administrator can sign in; the bootstrap password has been removed from configuration.
• Only the intended administrator and system bot were initialized; master data and enabled-module defaults are reviewed.
• Administrator and employee accounts reach the expected portals.
• Employee creation, attendance, leave and approvals work with expected roles.
• Uploads and authorized downloads work; unrelated employees cannot read private files.
• SMTP reaches an inbox; password recovery uses the correct hostname.
• Queue jobs run and workers survive reboot; failed jobs are reviewed.
• Import & Export preview makes no record changes; a permitted export completes on the default queue and only its requester can download it.
• Transfer cleanup is scheduled, expired files are removed and transfer history remains available.
• Cron, policy publication/reminders and optional-module schedules run.
• WebSocket features work when included.
• Mobile API/live integrations pass when included; mocks do not replace acceptance.
• A backup restores successfully to an isolated installation.
• The installation is activated from your CZ App Studio account.
• The Documentation link in the application footer opens the online manual.

Documentation publication is separate from customer-installation acceptance, secure bootstrap review and live integration verification.