> ## Documentation Index
> Fetch the complete documentation index at: https://docs.starfort.io/llms.txt
> Use this file to discover all available pages before exploring further.

# PoC → production checklist

> Take a Starfort proof-of-concept to a production rollout with confidence.

A checklist for moving from a working proof-of-concept to production.

## 1. Structure

<Steps>
  <Step title="Organizations & projects">Create production [organizations and projects](/en/v1.2/admin/organizations-projects) separate from PoC ones. Confirm each project's **type** (Desktop Agent or API) matches its channel — it's fixed at creation — and that your per-type **project quotas** are set within the system allowance.</Step>
  <Step title="Roles">Grant the least-privilege [role](/en/v1.2/concepts/organization-hierarchy) each member needs.</Step>
</Steps>

## 2. Policies

<Steps>
  <Step title="Finalize policies">Lock down your [PII](/en/v1.2/admin/how-to/add-pii-policy) and [Topic](/en/v1.2/admin/how-to/add-topic-policy) policies.</Step>
  <Step title="Test with real cases">Send representative inputs and confirm PASS/MASK/BLOCK are correct (check [Opticon](/en/v1.2/admin/monitoring-opticon)).</Step>
  <Step title="Apply versions">Ensure each Guardian is pointed at the intended policy **version** — see [Version & apply](/en/v1.2/admin/how-to/version-and-apply-policy).</Step>
</Steps>

## 3. Integration

* **API projects** — issue per-environment [API keys](/en/v1.2/admin/api-keys) (named by caller), and make sure your app handles `MASK` (use `processed_content`) and `BLOCK`, plus [errors](/en/v1.2/api/errors).
* **Desktop Agent projects** — finalize [Control Profiles](/en/v1.2/admin/control-profiles) and make sure the right ones are assigned to the production project, choose your [Network Fail-Safe](/en/v1.2/admin/desktop-agent-settings), set the **Exit Password** and confirm the **Company Access Key** in [Desktop Agent settings](/en/v1.2/admin/desktop-agent-settings), then roll out to [Agent Users](/en/v1.2/admin/agent-users).

## 4. Operations

<Steps>
  <Step title="Monitoring">Confirm traces flow into [Opticon](/en/v1.2/admin/monitoring-opticon), decide who watches them, and set the **trace retention** that fits your data-lifecycle requirements.</Step>
  <Step title="Quotas">Set project and Agent User [limits](/en/v1.2/admin/desktop-agent-settings) for production scale.</Step>
  <Step title="Emergency plan">Make sure an **Owner** is available to reach the [Kill Switch](/en/v1.2/admin/kill-switch) — only Owners can toggle it.</Step>
  <Step title="Audit">Confirm governance changes are captured in the [Audit Log](/en/v1.2/admin/audit-log).</Step>
</Steps>

<Check>You're production-ready when policies are tested and versioned, credentials are scoped, monitoring is live, and your team knows the emergency procedure.</Check>