At a glance
Individual verification behavior
Notes for individual verifications
- Test keys are meant for verifying your integration logic.
- Live keys are for real end-user verification flows.
- If you need to test approval and rejection handling end to end, use a test key.
Company verification behavior
Notes for company verifications
- Test company verifications can be advanced through review states from the customer dashboard for integration testing.
- Live company verifications are reviewed and decided by Helium ID.
- Customer workspace admins should not rely on live dashboard controls for terminal company outcomes.
What should be identical in both environments
Your integration should keep these behaviors the same in test and live:- request format
- webhook verification logic
- event parsing
- retry behavior
- storage of
vendorData, verification IDs, and event logs
Recommended rollout pattern
- Build your integration against a test API key
- Validate webhook signatures and payload parsing
- Test both positive and negative decision handling
- Verify dashboard review behavior
- Move to a live API key only after you are confident that your webhook and session-handling logic is stable
What to communicate internally
If your team includes engineering, operations, and support, make sure everyone knows:- which API key environment is being used
- whether a decision was test-generated or live-generated
- whether a company-verification outcome came from Helium ID review or customer-admin testing