Enterprise resourceEvaluation date april 28 2026Evaluator frank kawere
Enterpriselevel saas evaluation checklis
A comprehensive 100-point framework for evaluating Mizu CRM across five critical enterprise dimensions. Use this checklist during your procurement process.
Platform: Mizu crm admin platform · URL: https://mizu-crm-admin.vercel.app
Scoring framework
25
30% weight
Security & Compliance
25
25% weight
Performance & Reliability
20
20% weight
Enterprise Features
15
15% weight
UX & Design
10
10% weight
Docs & Support
Ready
ENTERPRISE-READY
85-100 points
Comprehensive SaaS with all critical enterprise features
Capable
ENTERPRISE-CAPABLE
70-84 points
Solid platform with minor gaps; suitable for most enterprises
Gaps
NEEDS IMPROVEMENT
55-69 points
Good foundation but missing key enterprise features
Not ready
NOT ENTERPRISE-READY
Below 55 points
Significant gaps; needs substantial development
1. Security & Compliance
30% weightScore: ___ / 25Data Protection
- SSL/TLS certificate valid and up-to-date
- HTTPS enforced (no mixed content warnings)
- Security headers present: Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Strict-Transport-Security, Referrer-Policy
- Data encryption at rest (documented)
- Data encryption in transit (TLS 1.2+)
Authentication & Access Control
- Multi-factor authentication (MFA/2FA) available
- Role-based access control (RBAC) with clear role definitions
- Password policy enforced (complexity, minimum length, expiration)
- Session timeout settings configurable
- Single Sign-On (SSO) support (SAML 2.0, OAuth 2.0, OpenID Connect)
- API authentication methods (API keys, OAuth, JWT)
- Audit logging for all user actions
- Account lockout after failed login attempts
Compliance & Certifications
- SOC 2 Type II certification (or roadmap)
- GDPR compliance statement/documentation
- CCPA/privacy policy clearly visible
- HIPAA BAA / Enterprise hardened config (if applicable to healthcare data)
- ISO 27001 certification (or equivalent)
- Data residency options available
- Privacy policy accessible and comprehensive
- Terms of Service clear on data ownership & handling
Vulnerability Management
- Security incident disclosure policy documented
- Bug bounty program (HackerOne, Bugcrowd, etc.)
- Regular penetration testing performed
- Dependency vulnerability scanning in place
- Security patches deployed regularly
- No console errors showing sensitive data
2. Performance & Reliability
25% weightScore: ___ / 25Page Speed & Core Web Vitals
- First Contentful Paint (FCP) < 1.8s
- Largest Contentful Paint (LCP) < 2.5s
- Cumulative Layout Shift (CLS) < 0.1
- Time to Interactive (TTI) < 3.8s
- Page load time < 2 seconds on 3G connection
- Images optimized (WebP format, lazy loading)
- Code minified (JS/CSS)
- Caching headers properly configured
Uptime & Availability
- Public uptime status page (status.* domain or similar)
- Contractual SLA terms documented at /legal/sla (not fabricated historical uptime)
- Redundancy & failover mechanisms documented
- Geographic distribution of servers
- Load balancing in place
- Database replication/backup strategy visible
Scalability
- Auto-scaling infrastructure documented
- CDN implementation confirmed (Cloudflare, Vercel, etc.)
- Database query optimization evident
- No obvious N+1 query patterns
- API rate limiting in place (to prevent abuse)
- Connection pooling implemented
- Load testing results available
Infrastructure
- Deployed on reputable cloud provider (AWS, GCP, Azure)
- Infrastructure-as-Code (IaC) evident
- Containerization (Docker) used
- Kubernetes or similar orchestration
- Backup & disaster recovery documented (RPO/RTO)
- CI/CD pipeline in place
3. Enterprise Features
20% weightScore: ___ / 20User Management
- Bulk user import/export functionality
- User provisioning/deprovisioning workflows
- Department/team hierarchy management
- Custom user fields/attributes
- Permission templates/cloning
- Activity logs per user
- User suspension (without deletion)
Integrations
- Webhook support for third-party apps
- REST API fully documented (OpenAPI/Swagger)
- GraphQL API (optional but valuable)
- Pre-built integrations with live marketplace provisioners (e.g. Slack, Google Workspace, QuickBooks); cut/stub apps are not promoted as available
- Zapier/Make integration support
- Custom integration builder
- API rate limiting documented
- Webhook retry logic with exponential backoff
Data & Reporting
- Advanced search & filtering
- Custom dashboard builders
- Scheduled report generation
- Export to CSV/Excel/PDF
- Data visualization (charts, graphs)
- Real-time analytics
- Custom field support
- Data validation rules
Admin Controls
- Organization/company settings
- Customizable workflows
- Feature flags/toggles for selective rollout
- API access controls
- White-label/custom branding options
- Email template customization
- Custom domain support
- IP whitelisting
- Maintenance mode toggle
Compliance Features
- Audit trail (immutable logs of all changes)
- Data retention policies
- GDPR compliance tools (export, delete, consent tracking)
- Field-level encryption options
- Consent management
- Data governance tools
4. User Experience & Design
15% weightScore: ___ / 15Interface Quality
- Professional, polished design (not template-like)
- Consistent design language throughout
- Dark mode option available
- Responsive design (works on mobile/tablet/desktop)
- Intuitive navigation hierarchy
- Breadcrumb navigation present
- Search functionality accessible
- No outdated UI components
Usability
- Onboarding flow clear and guided
- Empty states have helpful messaging
- Loading states clearly indicated
- Error messages are helpful & actionable
- Keyboard navigation support
- Tooltips/help text for complex features
- Command palette or keyboard shortcuts (e.g., Cmd+K)
- Undo/redo functionality where relevant
Accessibility
- WCAG 2.1 Level AA compliance
- Screen reader support (test with NVDA/JAWS)
- Color contrast ratios meet standards (4.5:1 for text)
- Alt text on all images
- Form labels properly associated
- Focus indicators visible
- No keyboard traps
- Semantic HTML used correctly
Mobile Experience
- Works on iOS Safari & Android Chrome
- Touch targets are 48px+ minimum
- Viewport meta tag configured
- No horizontal scroll on mobile
- Mobile-optimized forms (large inputs)
- Native app available (iOS/Android) or PWA
5. Documentation & Support
10% weightScore: ___ / 10Documentation
- Public knowledge base/help center
- API documentation (OpenAPI/Swagger format)
- User guides for core features
- Admin onboarding guide
- Video tutorials available
- Troubleshooting guides
- FAQ section
- Changelog updated regularly
- Architecture diagrams available
- Integration guides for popular platforms
Support
- Multiple support channels (email, chat, phone)
- Support response SLA documented
- Support availability (24/7 vs business hours)
- Community forum or Slack channel
- Premium support tier available
- Dedicated account manager for enterprise
- Support ticket tracking system
- Training/onboarding programs
Trust & Transparency
- Company background/credibility evident (About page)
- Pricing page transparent & clear
- Security & privacy certifications prominently displayed
- Blog with regular updates
- Customer testimonials/case studies
- Feature roadmap public
- Regular product updates/release notes
- Contact information easily accessible
Detailed evaluation notes
Overall visual design quality
___ / 10
Professional appearance
___ / 10
Navigation clarity
___ / 10
Critical Issues Found
Missing Enterprise Features
Strengths
Red Flags
Final assessment
Total score calculation
Security & Compliance:___ / 25
Performance & Reliability:___ / 25
Enterprise Features:___ / 20
UX & Design:___ / 15
Documentation & Support:___ / 10
Total___ / 100
ReadyENTERPRISE-READY
85-100 points - Comprehensive SaaS with all critical enterprise features
CapableENTERPRISE-CAPABLE
70-84 points - Solid platform with minor gaps; suitable for most enterprises
GapsNEEDS IMPROVEMENT
55-69 points - Good foundation but missing key enterprise features
Not readyNOT ENTERPRISE-READY
Below 55 points - Significant gaps; needs substantial development
Questions for the mizu crm team
Ask these questions during your evaluati
Security
Can you provide your most recent SOC 2 Type II audit report?
SLA
What is your guaranteed uptime SLA and what are the financial penalties for breaches?
Data Residency
Do you offer data residency options for GDPR compliance?
Roadmap
What enterprise features are planned for the next 12 months?
Compliance
Do you offer HIPAA BAA and GDPR support tooling?
Support
What support tiers do you offer? What's included in enterprise support?
Integration
What's your API response time? Do you have rate limiting documentation?
Backup
What's your RPO (Recovery Point Objective) and RTO (Recovery Time Objective)?
Customization
How customizable are workflows? Can we white-label?
Pen Testing
When was your last third-party penetration test? Can you share results under NDA?
Recommendations by score tier
Ready
Enterprise-Ready (85+)
- -Proceed with pilot testing
- -Negotiate service level agreements
- -Plan data migration
- -Arrange training for team
Capable
Enterprise-Capable (70-84)
- -Request roadmap for missing features
- -Negotiate timeline for critical gaps
- -Consider alternative vendors for comparison
- -Prototype key workflows
Gaps
Needs Improvement (55-69)
- -Request detailed security audit
- -Ask about SOC 2/ISO certification timeline
- -Evaluate competitors
- -Consider as backup option only
Not ready
Not Enterprise-Ready (under 55)
- -Do not proceed without major vendor commitment
- -Document all gaps
- -Evaluate competing solutions
- -Request executive business review
Evaluation signoff
Evaluation Complete Date:
Evaluated By:
Recommendation:
Contact mizu crm
Ready to discuss your evaluation finding