Skip to main content
This guide covers the general criteria that apply to every Alignet One integration. Each integration type also has its own technical, operational, and security recommendations.
Use this page as your starting point. Then review the specific best practices for your channel: E-commerce, Web Checkout, or Mobile SDK.

​
Cross-cutting principles

  • Never expose credentials, Client Secrets, API keys, or tokens in the frontend.
  • Run sensitive operations from your backend over HTTPS.
  • Store keys in environment variables or a secure secret manager.
  • Do not confirm a sale solely from the visual response shown by the checkout, SDK, or browser.
  • Validate the final state from your backend using the operation identifiers.
  • Keep the relationship between your internal order and the identifier returned by Alignet One.
  • Complete tests for every payment method enabled for your merchant.
  • Validate approved, declined, pending, expired, and controlled-error scenarios.
  • Contact the integration team when you need to validate simulators or special flows.
  • Log errors, response codes, and relevant payloads for traceability.
  • Retain test evidence to streamline certification.
  • Add alerts for unusual declines, timeouts, or repeated failures.

​
Guidance by integration type

E-commerce

Recommendations for plugins, commerce platforms, order management, and daily operations.

Web Checkout

Guidance for integrating Alignet One Flex and handling nonce, callbacks, styles, and the web payment experience.

Mobile SDK

Best practices for Android and iOS apps, packaging, callbacks, sessions, and device testing.
1

Choose the integration type

Select E-commerce, Web Checkout, or Mobile SDK based on your channel and required level of control.
2

Review specific best practices

Open the relevant guide and apply the recommendations for that flow.
3

Run complete tests

Validate credentials, test data, expected responses, errors, and traceability before requesting production access.
4

Complete certification

Confirm that your integration meets the technical, operational, and security requirements requested by Alignet One.

Technical certification checklist

Review the requirements before requesting credentials or a production go-live.