Here are three things that tend to expose how an organisation thinks and handles compliance data, whether anyone was ready for it or not: a Type Certificate transfe, or a DOA privilege change.
First, how much of the certification basis actually exists as structured, transferable data versus how much exists as a set of PDFs and the working knowledge of people who may not be moving with the TC.
Second, whether the substantiation behind individual compliance findings can be handed over as evidence a new holder can act on, or only as a matrix of references the new team will have to chase down one by one.
Third, how long it takes the receiving organisation to answer a basic oversight question — "show us how you comply with this requirement today" — using only what was actually transferred, without a phone call to the previous person handling the TC-data.
TC transfers, mergers, and DOA restructures don't happen often, which is exactly why most organisations haven't stress-tested whether their compliance data would survive one. The gap only becomes visible at the worst possible moment: when the people who could fill it from memory are no longer the ones you can call.
If your TC changed hands tomorrow, what would the receiving team actually inherit?