YEARLY CHECKLIST - year: ________     Owner: ________

REVIEWS
[ ] Operational annual review held on ________
[ ] Annual value review held on ________; decisions sent out

SOFTWARE
[ ] Site on the newest 6.0.x release (the maintained line)
[ ] PHP version still supported; upgrade window planned if not
[ ] Extensions: current, and unused ones removed
[ ] Custom work kept in extensions, so updates stay small (upgrade check clean)

CONTRACTS AND PROVIDERS
[ ] Host: service delivered as agreed; price and terms still right
[ ] Partner: service delivered as agreed; price and terms still right
[ ] Payment provider, mail, AI provider and other services: terms and fees compared
[ ] Exit terms known: how we would move to another host or partner

PEOPLE AND ACCESS
[ ] Access review signed; roles match the organization
[ ] Two-step sign-in in place as decided
[ ] New staff onboarded with the help pages; leavers' accounts gone

DATA PROTECTION (with your adviser, not legal advice)
[ ] Data inventory still complete (new forms, classes, extensions)
[ ] Retention periods still right; settings and backups match
[ ] Privacy notice and mail footer current
[ ] Request routine tested at least once

QUALITY
[ ] Accessibility checked on main pages and forms
[ ] Content audit of every section done during the year

STORE (if you sell)
[ ] VAT checklist done for the year end
[ ] Payment provider contract and card security obligations reviewed
[ ] Country ranking and shipping terms still match where orders come from

NEXT YEAR
[ ] Budget approved, including updates and a reserve
[ ] Campaign and peak dates in the calendar
[ ] Owners named for every action