# What to send, and what not to

Sent to the customer with the intake page. The rule is the smallest set of documents that answers their questions.

## Send, if you have it

- **Money**: monthly management accounts for at least 12 months, split by line of business if you can.
- **Customers**: a list with last year's revenue, contract end dates and notice periods.
- **Service**: a complaints, ticket or feedback log with dates.
- **Plans**: the current business plan or strategy, and the latest budget.
- **Governance**: board or management minutes for the last three to four meetings.
- **People**: an org chart with roles, reporting lines and vacancies. Roles are enough.
- **Suppliers and tools**: supplier contracts with renewal dates, and the software you pay for, with owners.
- **Policies**: the handbook sections on IT, data and expenses.
- **Prices**: your current price list, with its date.

## Do not send

- **Anything with an individual's pay, health or personal details.** Payroll, sickness records, personnel files.
- **Customer personal data.** Names and contact details of your customers' staff or residents.
- **Passwords, keys, tokens or bank logins.** Not in a document, not in a screenshot.
- **Anything you are not allowed to share** under a contract or a confidentiality agreement.

If a useful document contains any of these, remove the columns or pages first, and say in `intake.md` what you removed. A finding that says "not covered: you removed it" is a good outcome.

## Tell us

In `intake.md`: why now, your three questions, what you sent, what you did not, and who will read the X-ray.