Skip to content
Orca Docs

Production checklist

Environment

Section titled “Environment”
  • Client SDKs built with environment: .production / PRODUCTION / 'prod'.
  • Server calls use 'prod' / orca.EnvironmentProduction.
  • Public key in clients, private key only on servers. Keys rotatable from the dashboard.

Stores

Section titled “Stores”
  • App Store Server Notifications URL points at Orca (see Apple integration).
  • Google Play real-time developer notifications topic configured for Orca (see Google Play integration).
  • Stripe and GoCardless webhooks configured per the integration pages.
  • Production products exist in each store and are linked to the entitlement.

Your backend

Section titled “Your backend”
  • Webhook endpoint verifies signatures and is idempotent (webhooks guide).
  • Paid endpoints gate on getActiveEntitlements or a webhook-invalidated cache.
  • Fail-open / fail-closed policy written down and implemented.
  • Alerting on webhook errors and on webhook silence.

Test in production, carefully

Section titled “Test in production, carefully”
  • One real purchase on each store with a real account, then a refund through the store’s console. Confirm both webhooks arrive and the entitlement flips.
  • Restore on a second device with the same email.
  • Plan change on at least one store if you offer more than one plan.

Operational

Section titled “Operational”
  • Someone receives security@maxint.com-style notices and Orca account emails.
  • Read the Orca Product Terms so you know what the uptime commitment covers.
  • Bookmark the trust page for the SLA, security and data-handling sources.