# Collection validation checklist

Use with any vendor before installing a collector.

- [ ] Exact release version, integrity/signing evidence and supported OS.
- [ ] Source application version, provider plan and account permissions.
- [ ] Field inventory and sample outbound payload from that build.
- [ ] Excluded content, paths and secrets; inspect all network destinations.
- [ ] Authorised viewers and whether individuals can inspect/correct records.
- [ ] Retention period, deletion workflow and proof, regional processing and incident contact.
- [ ] Missing data, duplicate/replayed records and policy expiry behavior.
- [ ] Credentials, rotation, revocation and loss-of-access behavior.
- [ ] Residuals, inferred links and incomplete coverage remain visible.
- [ ] Agree unknowns, owner and remediation date before collecting data.

Record: question | evidence requested | evidence received | verified build | limitation | owner | next check.


Version: 2026-09-09
Source: https://www.symentrio.com/resources
Method template only; no customer outcomes or provider prices.