Test mode: Billing is running in sandbox mode. Switch to live keys only when ready.
Security
Payments
Hosted checkout (Stripe/Razorpay) keeps PCI scope minimal. Webhooks are verified and drive subscription state.
Data protection
Policies prevent IDOR, rate limits protect public endpoints, and uploads are validated.