Is It Out of Scope? — Web development
Is auditing a client's app instead of their website out of scope for a web development project?
Yes. A mobile or native app is typically a different codebase and platform than the website the engagement covers.
A dev engagement's technical familiarity with the client's systems can make an app audit feel like a natural extension, but a native or mobile app is usually a different codebase, language, and platform entirely.
Is it out of scope?
Yes. Different codebase, different platform, often a different technology stack altogether — the contract's technical scope doesn't extend to it automatically.
Clause typically implicated
Clause typically implicated
Exclusions clause→ — The contract is scoped to the website's codebase and platform; a separate app product is excluded.
Example contract wording
Example contract wording (illustrative, not legal advice)
This contract covers the website's codebase — the app is likely a different platform and stack, so auditing it properly means new context and possibly new tooling. I can scope that separately.
How MarginFlow flags it
MarginFlow checks the platform named in a request against the codebase or repository listed in the contract and flags a mismatched platform as outside_scope.