- Store
rk_keys and JWTs in a secret manager. - Use write-scoped keys for ingestion.
- Keep identifiers organization-scoped.
- Redact tokens, payloads, amounts, and customer identifiers from logs.
- Use request IDs when troubleshooting.
Never paste credentials or raw financial payloads into issues, support tickets, or AI prompts.