customerio-prod-checklist

# Customer.io Production Checklist

## Overview
Comprehensive checklist for deploying Customer.io integrations to production.

## Prerequisites
- Customer.io integration complete
- Access to production credentials
- Testing completed in staging environment

## Pre-Production Checklist

### 1. Credentials & Configuration

```bash
# Verify production credentials are set
echo "Checking credentials..."
[ -n "$CUSTOMERIO_SITE_ID" ] && echo "Site ID: OK" || echo "Site ID: MISSING"
[ -n "$CUSTOMERIO_API_KEY" ] && echo "API Key: OK" || echo "API Key: MISSING"

# Verify correct region
echo "Region: ${CUSTOMERIO_REGION:-us}"
```

**Checklist:**
- [ ] Production Site ID configured (different from dev)
- [ ] Production API Key configured (different from dev)
- [ ] Correct region selected (US or EU)
- [ ] Credentials stored in secrets manager
- [ ] API keys have appropriate permissions

### 2. Integration Quality

```typescript
// scripts/integration-audit.ts
async function auditIntegration(): Promise<AuditResult> {
  const results: AuditResult = {
    passed: [],
    warnings: [],
    failures: []
  };

  // Check identify calls have required attributes
  // Check event names follow naming convention
  // Check timestamps are Unix seconds
  // Check no PII in unsafe fields

  return results;
}
```

**Checklist:**
- [ ] All identify calls include email attribute
- [ ] User IDs are consistent across systems
- [ ] Event names follow `snake_case` convention
- [ ] Timestamps are Unix seconds (not milliseconds)
- [ ] No PII in event names or segment names
- [ ] Error handling implemented for all API calls

### 3. Campaign Configuration

**In Customer.io Dashboard:**
- [ ] Production campaigns created (not draft)
- [ ] Sender email verified and authenticated
- [ ] SPF/DKIM/DMARC configured for sending domain
- [ ] Unsubscribe links included in all emails
- [ ] Physical address included (CAN-SPAM)
- [ ] Test sends completed and reviewed

### 4. Deliverability

**Checklist:**
- [ ] Send