Sumsub Know Your Customer (KYC) Integration Guide
11. Go-Live Checklist
Use this checklist to confirm that configuration, credential handling, testing, result processing, and operational support are ready before production launch.
On this page
| Item | Owner | Required |
|---|---|---|
Payblr-assigned sourceKey confirmed | Payblr | Yes |
Payblr-assigned partnerName confirmed | Payblr | Yes |
| Sumsub App Token and Secret process confirmed | Client / Payblr | Yes for API |
| SDK access token generation tested | Client | Yes for SDK |
| Verification level confirmed | Payblr | Yes |
| SDK flow confirmed, if applicable | Client / Payblr | Yes, if SDK is used |
| API applicant creation flow confirmed | Client / Payblr | Yes, if API is used |
| Proof of address decision rule tested | Client / Payblr | Yes |
| Webhook/result processing confirmed | Payblr | Yes |
externalUserId format confirmed | Client | Yes |
| Custom metadata submission confirmed | Client | Yes |
| Applicant data/status retrieval tested | Client | Yes |
| Sandbox testing completed | Client | Yes |
| Duplicate handling tested | Client | Yes |
| Token expiration handling tested | Client | Required for SDK |
| Production monitoring confirmed | Client / Payblr | Yes |
| Support and escalation process confirmed | Client / Payblr | Yes |
12. Implementation Notes
Use the following notes to align client implementation behavior with Payblr's Sumsub onboarding requirements.
Key Notes
sourceKeyis mandatory for Payblr Sumsub processing.externalUserIdmust be stable and unique for each applicant in the client's system.partnerNamemust be the Payblr-provided Partner Id value.- SDK integration is used for the applicant-facing verification experience.
- API integration is used when the client backend submits the KYC package directly.
- Final KYC decisions must be based on Payblr's processed Sumsub result.
- GREEN results may continue onboarding, subject to Payblr rules.
- RED, RETRY, FINAL, PEP, AML, sanctions, and missing-data outcomes must follow Payblr rules.
- Clients should not expose Sumsub credentials in frontend or mobile applications.
- Sandbox testing must cover positive, negative, retry, final rejection, compliance-review, and proof-of-address scenarios before go-live.
Next steps
Continue to the Appendix for Sumsub reference links and supporting documentation used throughout this guide.