What to change
A preview environment should follow an explicit reviewer-access policy. Ask the supplier to inventory every active preview hostname and demonstrate its behaviour while signed out. Remove accidental public references from production navigation and shared materials, but do not assume that hiding those links secures the preview. The owner should receive a working reviewer route and evidence that the intended restriction survives the next deployment.
A worked example
Illustrative example
Illustrative test: Share a harmless preview link with an authorised reviewer to test the intended access route.
How to check the result
Production links point to production, and preview access follows the agreed review process.
A mistake to avoid
A canonical declaration alone should not be treated as privacy protection.
Your action checklist
Use these checks to prepare a discussion with your team or supplier. Tick a check when you have recorded the decision or evidence, rather than when a feature has simply been promised.
Entries stay in this page and are not submitted to Kay & Co. Download your notes before leaving; the page does not save them.
Further reading
These primary sources provide additional context for the project decisions above.
Related decisions
Turn the brief into a working service
Kay & Co. can help you scope the work, design the experience and deliver the right solution for your organisation.
Explore marketing & search services or discuss your project.
Try the free Healthcare Digital Planner to find your starting priority.