Not included by default
- Fixing the defects found, unless a separate build or support scope is agreed.
- Formal accessibility certification or legal compliance sign-off.
- Penetration testing and security auditing.
- Load testing at production scale, which needs its own scope and environment.
