We have deployed a cloud solution ERP (Acumatica) for one of our client. There is only one dedicated Production server on the cloud hosting the app. We have our own local server to develop and integrate the customizations our client asked us so far in the scope of the project.
Now, Our client would like to be able to do their own customizations but we can't (don't have time) to review them and check that they are not going to break the production environment.
In the initial contract we had to ensure the main Acumatica releases over time. But obviously, we don't want to maintain the developments that our client may have done without our approval.
How can we organise this situation if we both publish customization? And hopefully, discharge our responsibility over the cloud application integrity.
I will see if I can add a censored contract to the question.
Also I was unsure where to post this, maybe there are some tricky legal issues that can't be answered here. If you have any other stack exchange site to recommend I would be happy to post there too.