# UAT checklist

CREST can tick this on staging or production after a backup exists. Record the date and the person who signed off at the bottom.

## Physician

- [ ] Start an agreement with a real email address and open the private link.
- [ ] The agreement text is readable, and every field has a label.
- [ ] Save a draft, leave, and return with the same link.
- [ ] Review the PDF, go back, change the address, and review again.
- [ ] Sign by typing or drawing, then submit.
- [ ] A second visit to the submitted agreement does not allow another signature.

## Rejection

- [ ] An admin rejects the agreement with a reason.
- [ ] The physician opens the new link, sees the reason, edits, signs again, and submits.

## Approval and survey

- [ ] An admin approves only after the CREST signature is saved in Settings.
- [ ] The physician opens the survey from the email, refreshes, and sees the same answers.
- [ ] Final submit shows the thank-you page.
- [ ] Opening the survey again says it has already been submitted.

## Admin

- [ ] The application list does not show a full PAN or account number. The detail page does.
- [ ] Reports exports an Excel file and warns that it contains personal data.
- [ ] Settings can turn reminders off and on, and can change the two intervals.
- [ ] Logout requires a signed-in admin. A logged-out visit to an admin page returns to login.

## Sign-off

Date:

Name: