How do I control access to the production environment?
Production access is a dedicated governance toggle held at the level above a program. While it stays closed, that program works in sandbox, which lets a new operator configure its structure, contracts and branding ahead of live traffic. Opening the toggle is the moment live processing becomes available.
In detail
Production access is a dedicated governance toggle, held at the level above a program. The program itself cannot open it.
While the toggle stays closed, the program works in sandbox. A new operator can configure its structure, contracts, domains and branding, run activation tests and prepare its merchants, all ahead of live traffic. Opening the toggle is the moment live processing becomes available.
Why it sits above the program
- The decision to go live is a governance decision, taken once the program is cleared for live processing.
- An operator running resellers or sub-programs keeps that decision in its own hands.
- Configuration work and live risk stay clearly separated.
The toggle is part of a wider set of governance controls. The level above also decides whether a program can manage payment partners, create webhook templates, customize hosted payment pages, configure branding or customize menus. When a control stays closed, the corresponding section is read-only or hidden.
Before opening production, the program list gives you a readiness picture: domains, theme, TeamSpaces, contacts, API keys, webhook endpoints and governance permissions, each shown as a column. Every change to these settings is recorded with the user behind it.