E-invoice: choose the route with finance
Confirm the current HASiL rules that apply to your business with your finance or tax adviser. Then compare the MyInvois portal, an existing accounting integration and a direct API integration. List every source of invoice data, including POS, orders and manual records. A PDF generated by your system is not by itself a validated MyInvois submission.
Test the full invoice lifecycle
Agree field validation, access credentials, submission status and storage of official identifiers. Test rejected data, an unavailable service and duplicate submissions. Include the corrections and document types the business needs. Your finance team should be able to see outstanding work and reconcile it. Keep the implementation aligned with current official SDK documentation rather than copied sample code alone.
Privacy: map what the site actually does
List forms, analytics, payments, chat tools and accounts. Record the purpose, fields, providers, access and retention for each. Check what third-party tools load before a visitor makes a privacy choice. Ask only for information needed for the task and make the notice match the actual handling. A checkbox or privacy-page link alone does not establish compliance.
Prepare access and incident responsibilities
Give staff the access their role needs, plan account removal and test restoration from backups. Confirm provider processing, overseas transfers and retention with the appropriate adviser. Assign responsibility for data requests and incidents. Check current Commissioner guidance for obligations that apply to the organisation; this planning checklist is not a legal certification.
Funding: verify before committing
Distinguish a grant from financing or a provider discount. Confirm that applications are open, that the supplier and costs are eligible, and whether prior approval is required. A programme page remaining online does not prove funds are available. Prepare a written scope and budget that the business can assess without assuming an award. TCT does not claim approved-provider status or guaranteed funding.