Production readiness

Use this checklist before sending live prior-authorization traffic through Collate.

Keep production API keys server-side. Log only sanitized request and response details, and never send unsanitized PHI or credentials to support.

Readiness checklist

1

Separate environments

Use separate API keys for sandbox and production. Make the base URL an environment-specific setting, not a hard-coded value.

EnvironmentBase URL
Sandboxhttps://api.sandbox.trycollate.ai
Productionhttps://api.trycollate.ai
2

Verify provider setup

Confirm that every production providerNpi is visible to your organization and can resolve the payer routes you plan to send.

Use Choose a route and create for route validation.

3

Validate route coverage

For each payer, coverage state, request type, and service-code family you plan to send, verify that route resolution succeeds in the target environment.

4

Map questionnaires from returned linkIds

Treat the current questionnaire returned by the authorization as the answer contract. Store source-system mappings by route context when items vary by payer or service.

5

Exercise files and final approval

Upload, complete, and attach real document types in sandbox. Confirm that your approval workflow handles approve_submission and stale snapshots.

6

Prepare operations

Log the environment, authorization ID, current status, current nextAction, current version, request ID, and sanitized payload details for support and replay.

Go-live criteria

AreaReady when
AuthenticationProduction keys are server-side and scoped to the correct organization.
RoutingEvery planned provider, payer, state, request type, and service code resolves.
RequirementsYour integration can satisfy returned questionnaire items and document blockers.
ConcurrencyIf-Match retry behavior is implemented for mutable authorization writes.
Final approvalReviewers can inspect and approve submission.reviewSnapshot.
Manual handoffOperators can accept, access, close, and revoke handoffs when requested.
PollingAutomated jobs use bounded polling and back off while Collate or the payer owns the next step.
SupportLogs include enough sanitized context to diagnose failed or stuck cases.

Launch path