Frequently asked questions
Plain-language answers that match what Orion actually does today. Where something is not decided, we say so.
5 questions
Which integrations are available?
In the sandbox: a custom website/API integration and hosted payment links. WooCommerce and Shopify are planned; Shopify depends on its own payments-app requirements and approval.
Is the API sandbox or live?
Sandbox only. Test keys begin with sk_test_. Live keys cannot be created.
How are webhooks verified?
Each Orion webhook carries an Orion-Signature header: an HMAC-SHA256 of the timestamp and raw body using your endpoint's signing secret. Check the signature and that the timestamp is recent, then de-duplicate by event ID.
What if an event is missed?
Orion retries failed deliveries with exponential backoff (up to 8 attempts), and you can retry from the portal. You can always read the current state with GET /v1/payments/{id}. Orion's own reconciliation recovers events it missed from providers.
Can records be exported?
Yes. Payments can be exported to CSV from the portal by users with export permission. Exports are logged.