01
The rubric is published
Six pillars, forty-plus checks, every threshold and every dollar formula, versioned and printed on each report. Two reports a quarter apart compare honestly. Read it.
For portfolios, holdcos, and brands at $20M and up
Every account in the portfolio. Before lunch.
The same published rubric on every brand you own or manage, run in parallel, with a roll-up you can put in front of the board and a private report per account for the people who run it. Read-only keys. No customer profiles. No agency in your account for three weeks.
10accounts per run, three at a time
1rubric, versioned, published
0customer profiles, ever
CSV · JSON · PDFevery report, every roll-up
Δscore delta on every re-run
$0found on the table, modelled, across every audit
0audits run
0Klaviyo accounts
0median score out of 100
The portfolio audit
One email. Up to ten read-only keys. A roll-up in minutes.
Each account runs as its own audit and gets its own private link; the table below is the roll-up. Nothing is stored but the reports. Keys are used once and discarded.
| Account | Score | Revenue 12m | Owned | Flows | Gap / 5 pts | Crit / High |
|---|
Why the biggest accounts use it
Built for the review, not the pitch.
02
Read-only, no profiles
An agency audit needs a collaborator seat that sees every customer. This needs a read-only key and never requests a profile. Every endpoint it reads is listed on the security page.
03
Portfolio roll-up
Ten accounts a run, three at a time, one table. The brands that need attention sort themselves to the top by critical findings and the size of their second-purchase gap.
04
Re-run, with the delta
Run it monthly. Each report shows the score change since the last run for that account, so the program's progress is a number, not a feeling.
05
Exports for every audience
JSON for your data team, CSVs of flows, campaigns and findings for the operator, a PDF for the board, a private link for everyone else.
06
Written by an operator
The checklist is Andrew Lauchner's, from close to four years as Sr. Director of Growth & Retention at Gallery Furniture, a $100M+ revenue business, and lifecycle across Pier 1, RadioShack, Dressbarn, Stein Mart, Modell's and Franklin Mint at Retail Ecommerce Ventures. It runs the same on every account because software doesn't get tired on the ninth one.
Against the alternatives
What you'd otherwise buy, and what it costs you.
| This audit | An agency audit | Klaviyo's own reporting | A "free audit" lead form | |
|---|---|---|---|---|
| Access it needs | A read-only API key. No profile scope is ever called. | A collaborator seat: every customer profile, every message. | Your own login. | Usually a call first, then collaborator access. |
| Time to a result | About two minutes. Watch it run. | Two to four weeks. | Ongoing, but it never reaches a verdict. | Days to weeks, after the call. |
| Cost | $0, for every account, every time. | Typically four to five figures, or "free" against a retainer. | Included. | Your time on the call, and the pitch. |
| Method | A published rubric, the same on every account. | That analyst's opinion, that week. | Dashboards without thresholds. | A checklist that ends in a proposal. |
| Dollar sizing | In your numbers, with the formula printed. | Sometimes, rarely with the formula. | No. | Rarely. |
| Stance on attribution | Says every attributed number is attribution, and checks for a holdout. | Usually reports attribution as results. | Attribution. | Attribution. |
| Re-run | Any time, any account, with the delta. | A new engagement. | n/a | n/a |
| Output | Private link, PDF, JSON, three CSVs, a portfolio roll-up. | A deck. | Screens. | A PDF and a follow-up sequence. |
Columns describe categories, not any named company. If one of them has caught up, tell andrew@growthlegend.com and the row changes.
After the roll-up
A readout, then one offer.
For a portfolio or a brand above $20M, Andrew reads the reports with your team on a 30-minute call and leaves three fixes per account, whether or not you hire anyone. If a brand's gap is worth closing, the only thing for sale is The Second-Purchase Sprint: ninety days on that account, the diagnosis, the build, and a result measured against a holdout carved before anything ships.
For procurement and security
The short version.
What does the key allow, and what happens to it?
Read only. It travels once over TLS, lives in memory for the run, is sent to Klaviyo in the request header, and is dropped when the function returns. Never logged, never stored. Delete it in Klaviyo afterwards if you like. The full list of endpoints is on the security page.
Do you touch customer data?
No customer profile, email, phone number or event is ever requested. Aggregates, names of flows and campaigns, segment definitions and counts. That is all.
Will you sign an NDA or DPA?
Yes, on request. The only personal data processed is the work email of the person running it.
Where is data processed and kept?
Vercel (United States) runs the function and holds the reports in a private store; Klaviyo's API is the source. Reports are deleted at 90 days, sooner on request.
Can we run it inside our own process?
Yes. Every report exports as JSON with the full rubric output, so your analytics team can load it wherever they keep the rest. Ask about scheduled monthly runs for a portfolio.
The whole portfolio