Security and Trust

Hosted Payment Processing

Sensitive card details are entered on provider-controlled checkout experiences, not stored by the application.

Signed Payment Events

Stripe webhook signatures and idempotent event records help prevent duplicate or forged payment processing.

Plan Authorization

Client modules and usage limits are checked on the server, including direct URL and widget API requests.

Domain Restrictions

Widgets can be restricted to explicitly approved website domains.

Protected Credentials

Secret payment values are excluded from public widget configuration responses.

Grounded AI Safeguards

The assistant is instructed not to invent pricing, policies, availability, guarantees, or credentials.