Create a QA Test Strategy Document
Generate a structured QA test strategy document covering scope, test types, risk-based prioritisation, environments, tools, entry/exit criteria, and team responsibilities.
You are a senior QA lead with extensive experience writing test strategy documents. Generate a structured QA test strategy for the project described below. Project name: {{PROJECT_NAME}} Application type: {{APPLICATION_TYPE}} Key features in scope: {{FEATURES_IN_SCOPE}} Features explicitly out of scope: {{OUT_OF_SCOPE}} Team composition: {{TEAM_COMPOSITION}} Delivery timeline: {{TIMELINE}} Known risks and constraints: {{RISKS_AND_CONSTRAINTS}} Tools and frameworks already in use or planned: {{TOOLS}} Write a test strategy document with the following sections: 1. **Purpose and scope** — what this strategy covers and what it does not. 2. **Test objectives** — what "quality achieved" looks like for this project; how it will be measured. 3. **Test types and levels** — which types of testing will be performed (unit, integration, E2E, API, performance, accessibility, security, exploratory) and at which level (unit, service, system, UAT). Justify inclusions and exclusions based on risk. 4. **Risk-based prioritisation** — list the top 5–7 risk areas for this project and how test coverage addresses each risk. Map each risk to a likelihood and impact rating. 5. **Environments and data** — test environments required, who owns them, and the test data strategy. Note that production data and real credentials must never be used in test environments. 6. **Entry and exit criteria** — what must be true before a test phase starts, and what must be true before it ends. 7. **Defect management** — severity/priority definitions, triage process, and what triggers a release blocker. 8. **Tools and infrastructure** — test management, automation framework, CI/CD, reporting. 9. **Roles and responsibilities** — who owns which testing activities. 10. **Assumptions and dependencies** — list assumptions that, if wrong, would change this strategy. Annotate every assumption. Flag any section where you need more information from the team to complete it accurately. This document requires human review before being shared with stakeholders.
{{PROJECT_NAME}}requiredName of the project or product
e.g. Customer Portal v2
{{APPLICATION_TYPE}}requiredType of application
e.g. Web application with REST API and mobile app (iOS, Android)
{{FEATURES_IN_SCOPE}}requiredKey features or user journeys to be tested
e.g. User registration, login, profile management, payment flow, order history
{{OUT_OF_SCOPE}}Features or test types explicitly excluded from this strategy
e.g. Legacy admin panel (no changes in scope), load testing (handled by a separate performance team)
{{TEAM_COMPOSITION}}requiredWho is on the QA team and their roles
e.g. 1 QA Lead, 2 Manual QA, 1 SDET
{{TIMELINE}}requiredDelivery timeline and key milestones
e.g. Alpha: Week 6, Beta: Week 10, GA: Week 14
{{RISKS_AND_CONSTRAINTS}}requiredKnown risks, constraints, or quality concerns
e.g. Third-party payment provider integration; no test environment for payment gateway; tight timeline
{{TOOLS}}Tools already in use or planned
e.g. Playwright for E2E, Postman for API, Jira for defects, GitHub Actions for CI
- Validate the risk list with the product manager and engineering lead — the AI infers risks from the description and may miss domain-specific ones.
- Check entry/exit criteria against your organisation's release process — they may need tighter or looser thresholds.
- Confirm the roles and responsibilities section reflects your actual team structure.
- Review test types for completeness — the AI may omit types relevant to your domain (e.g., localisation, compliance testing).
- Ensure the test data strategy aligns with your GDPR or data privacy requirements.
- Share a draft with stakeholders for feedback before treating it as the final strategy.
AI output requires human review before use. These checks are your responsibility.
- The AI infers risks from the description — a poorly described project will produce a risk list that misses real issues.
- Entry and exit criteria suggestions may be too lenient or too strict for your organisation's tolerance — calibrate them.
- The document looks authoritative but reflects assumptions about your team, tools, and constraints that may be wrong.
- Test strategy documents become stale quickly; schedule a review cadence when you adopt it.