Clear rules for security, data, delivery, and support.
Who has access, and how it is checked.
Where your system can run.
What happens to your data.
How support expectations are agreed.
How a project moves from plan to launch.
