Delivery starts after the product URL, controlled test access, and five highest-risk flows are confirmed. A staging environment and redacted fixtures are preferred. Never send personal passwords, payment-card details, production secrets, or unrestricted customer data.