Sandbox and go-live

Sandbox

A sandbox is a separate test company in Orda with its own key. Its data never mixes with production — company isolation is enforced by the database. Create, change and cancel orders, build and approve routes, test webhooks as much as you need.

Ask your Orda manager (contacts on the website) with the company name and the e-mail of your technical contact. You get a test company code, an administrator login and an API key.

Tip: keep two connection profiles in your system — “Test” and “Production” (host, key, webhook secret).

What to test

1. The key works: GET /orders → 200.
2. Directories load, and re-sending updates instead of duplicating.
3. Orders: a batch of 100–1000 rows; re-sending gives updated.
4. Row errors (result: "error") reach your exchange log with their codes.
5. Retrying with the same Idempotency-Key creates nothing twice.
6. Webhooks: POST /webhooks/{id}/test arrives, the signature verifies, you answer 2xx within 10 s.
7. Cancelling in your system → status: "cancelled" in Orda.
8. Routes: a plan is built and approved; your system receives plan.approved.

Go-live checklist

• Production key issued from a service account and stored in a secret store.
• The key has only the scopes it needs.
• The webhook URL is https with a valid certificate, reachable from the internet.
• Webhook signatures are verified; timestamps older than 5 minutes are rejected.
• Retries on 429/5xx with back-off; Idempotency-Key on every write.
• Exchange log on your side: what was sent, what came back, which rows failed.
• A responsible person on your side and an Orda support contact.