YouNegotiate relies on approved external services for specialized platform capabilities. Each integration must remain scoped to the correct creditor, consumer, and workflow.
Service Responsibilities
Identity And Address Services
- Middesk verification must complete before protected creditor onboarding workflows become available.
- The verified creditor identity becomes the permanent ECO Address used throughout the platform.
- Address validation should standardize usable addresses without silently replacing verified identity information.
- Pending or failed verification must never be treated as approved.
Communication Services
- Email and SMS delivery must run through background processing.
- Provider callbacks update tracking only after the provider reports the corresponding event.
- SMS opt-out and opt-in commands must update future communication eligibility.
- Invalid, incomplete, or unverifiable callback data must not create a successful delivery state.
For consent, delivery, tracking, and webhook behavior, see Communication Delivery & Webhooks.
Payment Services
- Basis Theory stores payment tokens and payment metadata; raw payment credentials must not be stored by YouNegotiate.
- Stripe platform billing is used for creditor membership and platform charges.
- Consumer payments use the merchant processor configured for the owning creditor.
- Membership billing and consumer-payment processing must remain separate.
- Provider ownership, amount, currency, and payment state must be validated before platform records are updated.
Operational Rules
- A provider timeout or failure must not be recorded as a successful platform action.
- Provider responses and callbacks must update only the matching creditor, consumer, payment, or communication record.
- Sensitive credentials, full payment details, and personal contact data must not appear in logs or user-facing errors.
- Retryable failures should remain distinguishable from permanent validation failures.
Last modified on July 30, 2026
