Security and credentials
Credentials by environment
Credentials by environment
- He uses sandbox credentials only for testing.
- Do not mix with prior-production and production credentials.
- Restrict administrative access to the panel where keys are set up.
Backoffice secure
Backoffice secure
- Keep up with CMS, plugin, module and dependencies.
- He uses individual administrative users and doesn’t share accounts.
- Check logs without presenting sensitive information from the buyer.
Operation of order
Conformed States
The status of the order should reflect the actual status of payment, not just the screen that the client saw.
Asynchronous methods
To QR, Cuotéalo or PagoEfectivoHe expects final confirmation before releasing his order.
Support logs
Keep operation number, status and date for traceability with integration equipment.
Controlled tests
Valide approved, rejected and earrings in sandbox before passing to production.
Before we get out alive
- Check that the plugin or module is production only where appropriate.
- Confirms that the activated methods coincide with the affiliate for the merchant.
- Valids emails, back pages, messages to the buyer and order states.
- Prepare minimum evidence for final review.
Integration checklist
Check the specific checklist for e-commerce integrations.

