Go Live Checklist

Before go live, verify the following.

1

Levels configured and tested already

All Levels you plan to use in production have been tested end-to-end.

2

Webhook endpoint live and verified

Your Webhook URL is live, returns 200 for all event types, and correctly handles deduplication via eventId.

3

HMAC signature verification implemented

Your Webhook handler verifies the X-Signature header on every incoming request.

4

Token refresh flow implemented

Your frontend handles expired tokens gracefully by calling the Token Refresh endpoint.

5

Production API Key stored securely

Production API Key is stored in an environment variable or secrets manager, not in code.

6

Team roles configured in Dashboard

Your compliance and business team members have appropriate Dashboard roles.



Did this page help you?