For buyers

Buyer procurement checklist

Use this list for diligence. It mirrors what we verify in-repo with tests and mechanical gates, and it names what stays external: PSP merchant onboarding, carrier uptime and your own deployment choices.

Architecture and tenancy

  • Subdomain-scoped tenants, with a dedicated manager host for platform operators.
  • Public, tenant and manager URL contract documented; no path-based tenant guessing on the apex.

Security and isolation

  • Route and tenant-isolation verifiers run in CI; production posture still depends on your configuration.
  • Request a security packet for artefact-level detail under NDA. We do not claim external certifications from this page alone.

Implementation and operations

  • A signed-in implementation command center, support playbooks and defect closure surfaces exist for operators.
  • Live money movement requires your PSP. The product ships invoicing and orchestration without faking settlement.

Stays with you or your vendors

  • PSP merchant onboarding, keys, webhooks and settlement.
  • Carrier and SMS delivery, and uptime of your own connection.
  • Your deployment choices, including where data is stored.