m2pfintech
Implementation Guide

Go-Live Checklist

Production readiness checklist covering configuration, integration, compliance, and operational requirements for launch.

Complete all items in this checklist before launching your prepaid program in production.


Configuration Readiness

CheckStatus
Production tenant ID and credentials received☐
All BIN ranges created and status = ACTIVE☐
All products created, approved, and mapped to BIN ranges☐
Fee types configured and tested per product☐
Transaction limits set for all channels (ATM/POS/ECOM/UPI)☐
Blocked MCCs configured (gambling, restricted categories)☐
Allowed/blocked countries configured☐
SMS, Email, Push templates configured per event type☐

Integration Readiness

CheckStatus
JWT token flow working with production credentials☐
All APIs tested end-to-end on sandbox☐
Webhook callback URLs registered and verified☐
Webhook signature verification implemented☐
All error codes handled gracefully☐
Idempotency keys implemented for critical operations☐
Timeout handling configured (30s API, 5s auth)☐

Compliance & Security

CheckStatus
Card network certification passed (Visa/Mastercard/RuPay)☐
PCI-DSS compliance verified (no PAN in logs)☐
KYC document upload and verification flow tested☐
Encryption verified: TLS 1.3 in transit, AES-256 at rest☐
PIN set/reset flow verified with HSM☐

Operational Readiness

CheckStatus
Health check endpoints integrated (/actuator/health)☐
Alerts configured for failed transactions and API errors☐
Error code → resolution mapping documented internally☐
Daily reconciliation process established☐
Disaster recovery and failover procedures documented☐
Expected TPS discussed and capacity planned☐

Sign-Off

StakeholderResponsibility
Technical LeadIntegration complete, all APIs working
QA LeadAll test cases passed, no P1/P2 defects
Compliance OfficerRegulatory requirements met
Operations LeadMonitoring and support processes ready
Business OwnerProduct configuration matches requirements

Production credentials and environment details are provided only after successful completion of UAT and sign-off from all stakeholders.

On this page