I think the big thing would be to have someone in charge of actually checking out the sites, owners, backgrounds, try to dig any info on them, if they owned any previous companies, see if the sites have what claim(ie: ddos protection see if they aren't just using iptables), and another thing I think would be a huge is to only allow registered companies with a business license, or registered with the irs, or similar type services, to prevent any kids from thinking of making a hosting company and then thinking they don't want to do it anymore in a month, since these things take time it would prevent idiots from doing this, also verify billing panels are legit, and any information that would help out.