Before you publish that AI-built website, make sure it is ready for real people, real data, and real-world problems.
AI can help you build faster. This guide helps you slow down in the places that matter: security, ownership, privacy, accessibility, testing, and maintenance.
Ready to go deeper? Tell us about your website and get a tailored launch assessment.
Start the assessmentThe 15-Minute Launch Check
Short on time? Do these six things before you share the link publicly. They catch the most common launch failures.
Test the form
- Submit it from a phone and confirm the message arrives.
Protect secrets
- Remove exposed API keys, passwords, test accounts, and debug settings.
Turn on HTTPS
- Confirm the secure version loads and the plain HTTP version redirects.
Confirm ownership
- Know who controls the domain, hosting, admin access, and source files.
Check mobile
- Use a real phone. Test menus, buttons, forms, images, and text size.
Make a backup
- Create one known-good backup and confirm you can restore it.
Know What You Collect
A contact form is a data system, even when it looks simple. Know what enters it, where it goes, and who can see it.
Follow every submission
- Confirm where submissions go.
- Save them somewhere besides one inbox.
- Use required fields and format checks.
- Add server-side validation.
- Limit file types and upload sizes.
Plan for automated traffic
- Add CAPTCHA or bot protection.
- Use a honeypot field.
- Rate-limit repeated submissions.
- Filter obvious spam.
- Set alerts for unusual volume.
Know where it lives
- Name the company storing the data.
- Limit who can access or export it.
- Encrypt private data.
- Set a retention period.
- Create a deletion process.
Explain what you do
- List what information you collect.
- Explain why you collect it.
- Provide a contact method.
- Address analytics and cookies.
- Collect only what you need.
Lock Down the Essentials
Your site is only as secure as its accounts, code, connected services, and recovery process.
Protect the site
- Activate SSL/HTTPS.
- Use strong, unique passwords.
- Turn on two-factor authentication.
- Update software and plugins.
- Configure basic security headers.
Control the important pieces
- Register the domain to your business.
- Keep direct hosting access.
- Give each person a separate login.
- Remove temporary collaborators.
- Store credentials in a password manager.
Review before trusting
- Remove demos, logs, and test data.
- Review outside libraries.
- Disable debug mode.
- Add useful error handling.
- Document how updates happen.
Keep secrets off the page
- Never expose secret keys in public code.
- Use environment variables.
- Restrict permissions.
- Add spending limits.
- Remove unused connections.
Prove That It Works
Do not trust that a polished page works. Test the visitor journey from beginning to end.
Test success
- Submit every form.
- Confirm delivery.
- Check success messages.
- Test invalid entries.
Test variety
- Use a real phone.
- Try a tablet.
- Check two browsers.
- Test cellular data.
Test paths
- Replace placeholders.
- Check navigation.
- Test downloads.
- Create a useful 404 page.
Test backups
- Create a backup.
- Restore a copy.
- Enable uptime alerts.
- Check SSL renewal.
Build safely
- Use a staging site.
- Keep version history.
- Back up before changes.
- Document releases.
See problems early
- Keep error logs.
- Watch failed logins.
- Alert on traffic spikes.
- Monitor API usage.
Make It Usable and Yours
A launch is not ready if people cannot use it or if the content and assets are not yours to publish.
Remove avoidable barriers
- Add useful alt text to images.
- Check color contrast.
- Test keyboard-only navigation.
- Connect labels to form fields.
- Use descriptive links and buttons.
Design for the first screen
- Make buttons easy to tap.
- Keep text readable.
- Simplify forms.
- Test the mobile menu.
- Prevent images from overflowing.
Confirm permission
- Verify images, fonts, video, and icons.
- Check generated copy for imitation.
- Remove lorem ipsum and placeholders.
- Keep license records.
- Review claims before publishing.
Keep what built the site
- Save important prompts.
- Keep source code and design files.
- Archive brand assets and images.
- Document logins and services.
- Keep a current site inventory.
Help People Find It
A beautiful site still needs clear search signals, useful analytics, and reliable domain routing.
Make pages understandable
- Give every page a unique title.
- Write a useful meta description.
- Use readable page addresses.
- Create and submit a sitemap.
- Check that pages are not hidden.
Define success first
- Track visitors and popular pages.
- Measure forms, sales, or signups.
- Record traffic sources.
- Filter internal visits when possible.
- Test that tracking actually fires.
Send everyone to one address
- Force HTTP to HTTPS.
- Choose www or non-www.
- Redirect the unused version.
- Confirm DNS has propagated.
- Protect email MX records.
Prepare for real traffic
- Compress large images.
- Lazy-load offscreen media.
- Use caching.
- Consider a CDN.
- Know your host's traffic limits.
Check the Special Cases
Some site features create extra responsibilities. Complete the cards that match what your website does.
If you sell
- Use an established processor.
- Never store raw card numbers.
- Publish refund terms.
- Show the total price.
If you market
- Get appropriate consent.
- Add unsubscribe links.
- Use a mailing address.
- Verify SPF, DKIM, and DMARC.
If minors may use it
- Identify the age group.
- Limit collection.
- Review parental consent rules.
- Get qualified guidance.
If data is private
- Collect only what is essential.
- Restrict access.
- Encrypt storage.
- Set a deletion process.
If visitors can post
- Create moderation rules.
- Scan uploads.
- Limit file type and size.
- Add a reporting process.
If you promote publicly
- Show a real contact method.
- Check name conflicts.
- Review local notice rules.
- Use consistent legal names.
Plan Beyond Launch Day
A site is not finished when it goes live. Give the routine work a home before it becomes an emergency.
Keep it working
- Test important forms.
- Review messages and submissions.
- Check security alerts.
- Scan uptime and error reports.
Keep it healthy
- Update software.
- Review analytics.
- Test a backup.
- Check broken links.
Keep it accurate
- Review content.
- Remove outdated pages.
- Audit user access.
- Review service costs.
Who owns maintenance?
Name one person responsible for updates, backups, form checks, and account access. “Everyone” usually means no one.
Your Launch Sign-Off
Use this page as the final go/no-go decision. Every unchecked item needs an owner, a date, or an accepted risk.
- Mobile layout tested
- Navigation and links tested
- Forms tested end-to-end
- Accessibility basics reviewed
- 404 and error states reviewed
- HTTPS and redirects active
- Secrets removed from public code
- Accounts protected with 2FA
- Privacy information published
- Spam and rate limits active
- Domain and hosting controlled
- Source and design files saved
- Backup restored successfully
- Monitoring and alerts active
- Maintenance owner named
- Analytics tested
- Search titles and descriptions added
- Email domain records verified
- Payment flow tested, if used
- 30-day review scheduled
Standards + Legal Note
This checklist names real standards and laws, but which ones apply depends on your location, industry, audience, and the data you collect.
WCAG + ADA
WCAG is a published accessibility standard. Legal obligations and enforcement vary by jurisdiction and business.
GDPR + CCPA/CPRA
Privacy rules can depend on where you and your visitors are located, what you collect, and how your business operates.
CAN-SPAM + Consent Rules
Marketing-email requirements differ across regions. Your recipients' locations may matter as much as your own.
PCI DSS + COPPA
Payment and children's-data rules add specialized requirements. Confirm obligations with qualified providers or counsel.
This guide is educational and is not legal, cybersecurity, compliance, or financial advice. Standards and laws change. Verify current requirements with the official source and an appropriately qualified professional.
Your Website
Should Work
After the Wow.
A polished page is only the beginning. The systems behind it protect your business, your visitors, and the work you put into building it.
Get a website safety review.
Black Lady Tech helps business owners turn AI-built websites into launch-ready systems with practical technical reviews, fixes, and guidance.
Request a Website Safety Review