Go live

Status. Activation is operator-gated and currently planned (the lifecycle is being built). This is the runbook you follow when your account moves to live.

Going live is a deliberate sequence — nothing in digid pay flips you to live without an operator-approved activation.

Pre-flight (still in sandbox)

• [ ] Integration green in sandbox: create → confirm → webhook → fulfil.
• [ ] SCA card tested end to end (requires_action handled, no page-leave).
• [ ] Decline cards handled gracefully (retry with a fresh token).
• [ ] Webhook endpoint registered and signatures verified.
• [ ] Idempotency keys in place on every mutating call.
• [ ] Secret key never in client code (browser-UA rejection would catch it).

Activation

1. From the dashboard, submit for activation (confirm business details and plan).
2. digid pay operator reviews and approves (FR-2). Every approval is recorded.
3. Your account state becomes live; you are notified by email.

After activation

• [ ] Mint live keys (dashboard → keys → create, mode live). Store the secret server-side; it is shown once.
• [ ] Update your backend to use sk_live_… and the live publishable key.
• [ ] Register/point webhooks at your production endpoint and confirm a test delivery arrives.
• [ ] First live payment: a small real charge; confirm the webhook, the dashboard transaction, and settlement visibility.
• [ ] Monitoring on: watch for webhook delivery failures and 429s; set alerting on payment_intent.payment_failed spikes and webhook backlog (see Security for the ops checklist).

Never in production

• A sandbox key in live code (it only ever hits test rails).
• A raw card-number field anywhere (the API rejects it — token-only).
• Fulfilling an order on a client callback. Fulfil on the webhook.
• A secret key shipped to the browser.

Rollback

To pause live traffic: revoke the live secret key (instant) or request suspension from the dashboard. Revoking keys stops new authorisations immediately; suspension also disables the connector and halts webhooks.

Related

• Accounts — states and modes.
• Settlement — how funds reach you.
• Security — the operator checklist.