Secure application and schedulingTenant-enforced roles, transactional outbox, recipient locking, IANA time zones and restart-safe jobs. Evidence: cross-employer denial, concurrent STOP/sign race and worker-restart tests.
Production evidence not yet supplied Education and webinar sourcesApproved plan-specific files, accessible alternatives, language review, actual meeting links and attendance source. Evidence: signed reviewer record, accessibility review and historical-version retrieval.
Production evidence not yet supplied Permission and sender setupReviewed channel/purpose basis, destination evidence, local-time policy, frequency budget and registered sender/domain. Evidence: opt-out test, suppression reconciliation and authorized test recipients.
Production evidence not yet supplied SMS adapter candidate: TwilioServer validates X-Twilio-Signature using the official SDK and exact external URL/parameters. Match AccountSid and MessageSid. Advanced Opt-Out STOP updates SMS preference only. Evidence: valid, forged, duplicate and out-of-order callback tests.
Production evidence not yet supplied Email adapter candidate: SendGridVerify Signed Event Webhook raw bytes, timestamp and public key; deduplicate sg_event_id. Hard bounce and unsubscribe suppress email. Inbound reply routing needs a separately secured route. Evidence: signed event, tamper, bounce, unsubscribe and reply-routing tests.
Production evidence not yet supplied Retries and duplicate preventionMaximum three submission attempts: initial, then 5 and 30 minutes for confirmed transient rejection. Ambiguous timeout stays Unknown until reconciled; no blind resend. Hard bounce, STOP and permanent failure do not retry. Enforce one intent per employee/window/purpose/step.
Production evidence not yet supplied Account link serviceCryptographically random opaque tokens, server-side hash, 15-minute expiry, account-bound redemption and revocation. No identifying query parameters or third-party link tracking. Evidence: expiry, replay, prefetch and cross-account tests.
Production evidence not yet supplied Verified documentation is not a connected integrationProvider callback designs were checked against official documentation. Account configuration and end-to-end test evidence remain required. No real credentials or destinations are used here.