# Installation checklist

Checks to complete before you invite employees to a new installation.

Record product version, hosting platform, PHP/database versions, date and outcome. Complete before inviting employees:

- [ ] Composer platform requirements pass and migrations finish.
- [ ] HTTPS works; only `backend/public` is served.
- [ ] Secrets, logs, source, backups and private documents cannot be downloaded publicly.
- [ ] Debug/demo modes are off; keys are private and backed up.
- [ ] The explicitly configured administrator can sign in; the bootstrap password has been removed from configuration.
- [ ] Only the intended administrator and system bot were initialized; master data and enabled-module defaults are reviewed.
- [ ] Administrator and employee accounts reach the expected portals.
- [ ] Employee creation, attendance, leave and approvals work with expected roles.
- [ ] Uploads and authorized downloads work; unrelated employees cannot read private files.
- [ ] SMTP reaches an inbox; password recovery uses the correct hostname.
- [ ] Queue jobs run and workers survive reboot; failed jobs are reviewed.
- [ ] Import & Export preview makes no record changes; a permitted export completes on the default queue and only its requester can download it.
- [ ] Transfer cleanup is scheduled, expired files are removed and transfer history remains available.
- [ ] Cron, policy publication/reminders and optional-module schedules run.
- [ ] WebSocket features work when included.
- [ ] Mobile API/live integrations pass when included; mocks do not replace acceptance.
- [ ] A backup restores successfully to an isolated installation.
- [ ] The installation is activated from your CZ App Studio account.
- [ ] The **Documentation** link in the application footer opens the online manual.

Documentation publication is separate from customer-installation acceptance, secure bootstrap review and live integration verification.