Skip to checklist
Commerce Second OpinionDecision first. Delivery second.

Buyer control / evidence before commitment

Magento Consultant Due-Diligence Checklist

A sound consultant review starts with one buyer-owned decision question, one accountable decision owner, and evidence that another qualified reviewer can inspect. Test the acquisition facts, architecture, platform options, total-cost assumptions, proposal controls, and commercial conflicts before approving advice or implementation.

Use this as a decision gate. Ask the consultant to mark every item as confirmed, assumed, unknown, or out of scope. A polished recommendation is not ready for approval when important inputs remain hidden or unowned.

1. Fix the decision and its owner

Due diligence fails when a consultant receives a broad request such as “review our Magento setup” and nobody owns the resulting choice. Write the decision before collecting evidence.

  1. Name one accountable buyer. Record who owns the decision, who can approve spend, who gives technical sign-off, and who accepts business risk. Advice does not transfer accountability to the consultant.
  2. Write the decision question. Examples include whether to acquire a commerce asset, retain Magento, move to Adobe Commerce, choose another platform, or accept a supplier proposal.
  3. Define the decision boundary. State the brands, countries, storefronts, legal entities, channels, systems, data, and contract period inside the review.
  4. Set non-negotiable constraints. Record regulatory duties, launch dates, contractual limits, operating capacity, approved risk, and business capabilities that cannot be lost.
  5. Separate facts from judgments. Every material statement should be labelled as observed evidence, a buyer assumption, a consultant assumption, or a recommendation.
  6. Keep a decision log. Record the option chosen, options rejected, evidence used, unresolved questions, dissent, approval date, and facts that would reopen the decision.

2. Test an acquisition before valuing the technology

For an acquisition, confirm what the buyer will actually own and operate. Do not infer ownership from access to a storefront or repository.

Rights and contracts

Request the software asset register, source-code ownership, contributor and contractor assignments, platform and extension licences, hosting contracts, support terms, domain ownership, data-processing terms, renewal dates, termination rights, and assignment limits.

Operating ownership

Map which legal entity owns each account, repository, cloud subscription, domain, certificate, analytics property, payment relationship, integration credential, and vendor contract. Note every asset controlled only by a seller or third party.

Technology condition

Obtain platform and PHP versions, extension inventory, custom modules, frontend stack, repository history, deployment process, test coverage, release history, known defects, security obligations, performance reports, and upgrade constraints.

Data and compliance

Identify customer, order, catalog, product, pricing, consent, tax, analytics, and support data. Confirm ownership, lawful use, retention, transfer limits, deletion duties, residency, and the systems that are authoritative for each data set.

Acquisition red flags that need written resolution

Decision rule: price uncertainty explicitly. A missing contract, unclear right, or undocumented dependency is not a zero-cost assumption. It needs a condition, cost range, holdback, warranty, or a reason to stop the transaction.

3. Require architecture evidence, not a diagram alone

An architecture recommendation must connect business capabilities to systems, data, interfaces, operational ownership, and measurable constraints. A presentation diagram is only an index to the underlying evidence.

  1. Current-state system map. Show Magento or Adobe Commerce, frontend, content, search, payments, tax, ERP, PIM, CRM, identity, marketplaces, analytics, fulfilment, and reporting. Name the owner and purpose of each system.
  2. Capability map. Link required customer and operator capabilities to the system that provides them. Mark duplication, manual work, known limits, and capabilities with no clear owner.
  3. Data ownership map. For customers, products, prices, inventory, orders, refunds, content, and consent, identify the authoritative source, consumers, update direction, frequency, validation, retention, and reconciliation rule.
  4. Integration register. For every interface, record protocol, trigger, payload owner, authentication, volume, service expectation, error handling, retry rule, monitoring, support owner, and business effect of failure.
  5. Quality evidence. Request repository history, automated test results, dependency reports, performance measurements, accessibility findings, release data, and operational metrics. State the measurement date and environment.
  6. Constraint record. Document licence limits, data residency, security controls, peak demand, latency, content workflow, checkout rules, local markets, internal skills, and approved operational complexity.
  7. Target-state differences. Every proposed change should identify the current problem, expected benefit, systems affected, new dependency, new owner, migration need, validation method, and reversal difficulty.
Evidence test: select three important architecture claims and trace each one from the recommendation to a source artefact, named owner, measurement, and date. If the chain breaks, the claim is not ready for an investment decision.

4. Compare platform options on one requirements set

Platform selection should not start with vendor demos. Build one requirements set and apply it to every viable option, including the option to improve the current estate.

Minimum evidence for a comparable platform decision
Decision areaRequired comparisonReject weak evidence such as
Business fitWeighted capabilities, user journeys, markets, operating model, service expectations, and measurable success conditions.A generic feature grid with no priority, owner, or acceptance test.
Technical fitIntegration patterns, data ownership, extension needs, frontend choices, scale assumptions, security, compliance, and migration limits.A reference architecture that is not mapped to the buyer's systems.
Operating fitContent, merchandising, releases, support, observability, vendor management, internal skills, and new responsibilities.A build plan that omits the permanent operating model.
Commercial fitComparable total cost, contract limits, usage assumptions, renewal exposure, dependency concentration, and exit cost.A first-year quote presented as long-term cost.
Delivery fitSequence, dependencies, migration, parallel operation, testing, cutover conditions, benefit timing, and decision points.One fixed launch date without assumptions or confidence bounds.

Options the consultant should consider

Ask the consultant to justify the shortlist before scoring it. Depending on the buyer's requirements, the set may include improving the current Magento estate, upgrading within Adobe Commerce, selecting another managed commerce platform, or adopting a more composable architecture. Do not force an option into the final matrix when it fails a documented non-negotiable requirement. Record the reason for exclusion.

  1. Use the same definitions. Capabilities, demand, countries, contract length, service level, cost period, and risk scale must mean the same thing for every option.
  2. Expose weighting. The buyer approves criteria and weights before a preferred vendor is known. Run a sensitivity check to show whether a small weight change reverses the result.
  3. Verify decisive claims. A vendor statement, consultant experience, prototype result, contract term, and measured production result are different evidence types. Label them.
  4. Show trade-offs. State what the buyer gains, loses, must replace, and must newly operate under each option.
  5. Preserve the rejected paths. Record why they lost and which changed facts would make them viable later.

Use the separate platform decision matrix to make criteria, weights, proof, and reversibility visible.

5. Audit TCO over a defined period

Total cost of ownership is a model, not a quoted project total. Require a defined period, such as three or five years, and make the start date, currency, tax treatment, inflation, growth, usage, confidence, and contingency visible. Compare options over the same period.

Acquire and change

Include discovery, design, build, configuration, migration, integration, testing, accessibility, security, content preparation, training, parallel operation, transition, and contingency.

Own and operate

Include platform and extension licences, cloud services, retained operational work, support, monitoring, releases, testing, content and data operations, compliance, and vendor management.

Maintain and improve

Include upgrades, dependency change, defect correction, performance work, integration maintenance, automation, roadmap delivery, and the cost of postponed work.

Concentrate and exit

Include renewal exposure, volume tiers, proprietary services, data extraction, contract termination, knowledge transfer, reprocurement, migration away, and business disruption.

TCO assumption checks

Decision rule: reject an option comparison when its cost periods, scope, demand assumptions, or risk treatment differ. Normalise them before drawing a conclusion.

6. Review the proposal as a control document

A proposal should make obligations testable. Marketing language does not replace a scope baseline, evidence rules, or buyer rights.

Proposal clauses to confirm before approval
ControlWhat the proposal must stateBuyer test
ScopeDecision question, entities, systems, data, markets, deliverables, activities, and depth of technical review.Can both parties identify work that is inside and outside the engagement?
ExclusionsExplicit work, systems, data, validation, legal review, security review, and commercial analysis not included.Could an exclusion invalidate the recommendation or create an unpriced follow-on?
DependenciesBuyer inputs, access, interviews, vendor responses, third-party evidence, decision dates, and review turnaround.Is each dependency owned, dated, and linked to the effect of delay or absence?
AssumptionsFacts used before verification, their owners, confidence, and the condition that would change the work or conclusion.Can the buyer see which recommendation depends on each assumption?
Change controlHow a change is raised, assessed, approved, recorded, and reflected in outputs, timing, and cost.Can either party expand the brief without written buyer approval?
AcceptanceRequired deliverables, formats, evidence, review rounds, acceptance criteria, approver, correction period, and deemed-acceptance rule.Can the buyer reject an incomplete or unsupported output using objective criteria?
ExitTermination rights, completed output, work in progress, data return, access removal, knowledge transfer, and continuing licence rights.Can the buyer continue the decision with another adviser?

Demand portable outputs

The buyer should own or hold sufficient continuing rights to use the engagement output with another adviser or supplier. Require editable and readable formats, not only presentation slides or access to a supplier portal.

7. Record conflicts and implementation incentives

Do not describe any consultant as independent without defining the relevant commercial structure. Useful advice can come from different business models, but the buyer needs to see and control the incentives.

  1. Platform relationships. Ask for current partnerships, accreditation programmes, co-marketing, sales targets, rebates, licence resale, marketplace income, and non-public vendor access relevant to the options.
  2. Referral arrangements. Ask whether the consultant can receive money, credit, reciprocal work, or another benefit for referring a platform, supplier, extension, hosting firm, or specialist.
  3. Implementation interest. Confirm whether the consultant or a connected delivery business may bid for work created by the recommendation.
  4. Existing relationships. Record prior work for the buyer, seller, platform vendors, current suppliers, bidders, and investors that could shape access or judgment.
  5. Decision separation. Approve the advisory output before awarding implementation. Keep the right to run a separate competition or appoint another supplier.
  6. Change disclosure. Require prompt written disclosure when a new commercial relationship, referral, bidder, or delivery opportunity appears during the engagement.
Conflict test: ask the consultant to state how it could benefit from each recommendation and what control protects the buyer. Disclosure does not remove a conflict, but it makes the conflict governable.

8. Apply a final approval gate

Do not approve the recommendation until the accountable buyer can answer yes to the following questions.

  1. Decision: Is the exact decision, boundary, owner, approver, deadline, and success condition written down?
  2. Acquisition: Are ownership, contracts, rights, data duties, technical condition, dependencies, and unresolved liabilities visible?
  3. Architecture: Can important claims be traced to current evidence, named owners, measurements, and dates?
  4. Options: Were viable paths tested against the same requirements, assumptions, evidence standards, and cost period?
  5. TCO: Can the buyer inspect formulas, source inputs, uncertainty, adverse cases, internal costs, and exit costs?
  6. Proposal: Are scope, exclusions, dependencies, assumptions, change control, acceptance, exit, and correction duties enforceable?
  7. Portability: Can another qualified party review and continue the work using buyer-controlled outputs?
  8. Conflicts: Are platform, referral, resale, relationship, and implementation incentives disclosed and controlled?
  9. Uncertainty: Does the decision record show what is unknown, who owns it, its possible effect, and what would reverse the recommendation?

Stop condition: pause approval when a missing fact could change the platform choice, acquisition value, architecture, total cost, contractual duty, or ability to exit. Assign an owner and resolution date instead of converting the gap into an optimistic assumption.

Continue the decision process

Start with the main Magento consultant comparison. Then use the second-opinion brief to define the question, the decision matrix to compare options, and the independence method to inspect evidence and conflict profiles. Read about this publication and its editorial policy for scope and correction standards.