sandbox and production use the same document verification and extraction engine, but they do not have the same operational behavior.

What stays the same

• the core verification engine
• authenticity verification through the configured authority adapter
• structured extraction flow
• terminal result model
• signed upload pattern

Sandbox

Use sandbox for integration testing and customer QA.

Current behavior:

• one webhook attempt only
• no automatic webhook retry
• no dead-letter queue
• lower included quota
• tighter shared rate limits across plans

Production

Use production for live traffic.

Current behavior:

• automatic webhook retry schedule
• dead-letter support after final retry
• larger plan-based quota
• plan-based live rate limits
• commercial overage and billing behavior

Deployment guidance

• Use separate apps for sandbox and production.
• Use environment-prefixed API keys per app.
• Use a separate webhook URL per environment.
• Test signature verification and retry handling in sandbox before go-live.
• Do not assume sandbox reliability behavior matches production.