Day 0
Intake accepted
The five-business-day clock starts after the scoped question, approved intake path, usable files, and accountable client contact are confirmed.
Paid assessment delivery specification
A five-business-day commitment from accepted intake to decision brief.
ApertureRisks delivers the base Paid Exposure Assessment by the end of the fifth business day after the scoped question, approved intake path, minimum usable evidence, and accountable client contact are accepted. A documented pause condition stops the clock until the blocking client dependency is resolved. Expanded record counts, integrations, or analyst-assisted packages require written scope.
Day 1
Structure and identity review
Validate file structure, tenant scope, supplier identities, and material evidence gaps. Return blocking data questions.
Day 2
Exposure baseline
Connect accepted supplier and operating records to the scoped exposure question. Unsupported claims remain not assessed.
Day 3
Evidence and scenario review
Review evidence quality, affected dependencies, and clearly labeled assumptions. No synthetic value is presented as client evidence.
Day 4
Decision brief quality review
Prepare the exposure summary, confidence basis, evidence gaps, owner-based actions, and methodology references.
Day 5
Delivery and readout
Deliver the decision brief and action register, then hold the agreed readout or provide an asynchronous handoff.
When the clock pauses
- Required files are missing, corrupt, or materially outside the agreed structure.
- The exposure question or tenant scope changes after intake acceptance.
- Client clarification, evidence approval, or access authorization is outstanding.
- A security or data-handling concern requires resolution before processing.
Base delivery includes
- One agreed exposure question
- Up to 100 accepted scoped records
- Evidence-backed exposure baseline
- Evidence gap and action register
- One executive decision brief
- One delivery readout or asynchronous handoff