A useful solution considers the full operating environment. That may include the public website, internal workflows, application architecture, integrations, data, hosting, backups, access, monitoring, and ongoing maintenance.
We define only the work that supports the stated business requirement. Specialized regulatory or compliance claims are not made without a verified basis and an explicitly agreed scope.