Skip to main content

E-COMMERCE / PREPARE · PROTECT · TEST

One guide.
From setup to testing.

Use this checklist as a quick guide before requesting final validation from the integration team.
This guide applies to CMS implementations with WooCommerce, PrestaShop and VTEX.

​
Security and best practices

Apply these recommendations when integrating Alignet One through WooCommerce, PrestaShop or VTEX.

​
Security and credentials

Credentials by environment

  • Use sandbox credentials only for testing.
  • Do not mix preproduction and production credentials.
  • Restrict administrator access to the panel where keys are configured.
  • Keep the CMS, plugin, module and dependencies up to date.
  • Use individual administrator accounts, not shared accounts.
  • Review logs without exposing sensitive customer data.

​
Order operations

Consistent states

The order state must reflect the actual payment state, not just the screen the customer saw.

Asynchronous methods

For QR, transfers, Cuotéalo or PagoEfectivo, wait for final confirmation before releasing the order.

Support logs

Keep the operation number, state and date for traceability with the integration team.

Controlled tests

Validate approved, declined and pending payments in sandbox before going live.

​
Before going live

  • Set the plugin or module to production mode only when appropriate.
  • Confirm that enabled methods match those approved for the merchant.
  • Validate emails, return pages, customer messages and order states.
  • Prepare the minimum test evidence for final review.

​
Core checklist

1. Preparation

  • Credentials received for the target environment.
  • Merchant configured with enabled payment methods.
  • Administrator access to your CMS platform.
  • Correct plugin or module available for installation.
  • Keys and credentials entered correctly.
  • Return URLs and confirmation pages reviewed.
  • Currency, country and payment methods configured correctly.
  • Sandbox mode active before validating purchases.
  • Approved purchase validated end to end.
  • Declined purchase validated with a visible customer message.
  • Asynchronous methods tested when enabled.
  • Order confirmation aligned with the actual payment state.
  • Order states reviewed in the admin panel.
  • Plugin logs available for support.
  • Reversals, voids or refunds reviewed where applicable.
  • Emails, messages and post-payment pages reviewed.
  • Sandbox validated before using production credentials.
  • Controlled production flow reviewed with the team.
  • Enabled methods match those approved for the merchant.
  • Integration ready to go live.

​
Platform-specific checks

Plugin and credentials

Check installation, plugin activation and key configuration.

Checkout and order

Check that checkout displays valid methods and that order states change correctly.
  • Validate an approved purchase with the correct redirect or final confirmation.
  • Validate a declined purchase with a clear customer message.
  • Confirm plugin logs are available for support.
  • Review asynchronous method behavior when enabled.

WooCommerce

Review the complete WordPress flow.

PrestaShop

Review the complete PrestaShop flow.

VTEX

Review the complete VTEX flow.

Production checklist

Gather evidence and coordinate final validation with Alignet before enabling live payments.