Launch controls
- Checkout is hosted by the payment provider, so I never store card numbers
- Customer files sit in private storage
- Order and file links can't be guessed
- File types and sizes are checked on the server, not in your browser
- Payment events are verified by signature before anything unlocks
- Every fulfillment action leaves an audit record