Security
Protect credentials, seller data, customer information and payment workflows.
- Use HTTPS everywhere.
- Apply least-privilege authorization.
- Protect secrets with environment variables or a secret manager.
- Validate and sanitize all input.
- Log security events without recording secrets.
- Rotate credentials after suspected compromise.