Test data behavior

Sandbox is selected by sending an sk_test_… key against the same host as production. Concrete sandbox-only conveniences — magic signer email addresses, a test-clock header, replay-history retention — have not been confirmed by the Permissio API team. Until they are, this page intentionally does not document them, to avoid sending integrators down a path that does not exist.

If you depend on a specific sandbox behavior, file a request with developer support and we will document it here once the API team confirms.

What sandbox does give you today:

• A separate data store (sandbox envelopes, signers, templates, and webhooks are isolated from production).
• An "env": "sandbox" discriminator on every webhook payload, so handlers can branch on traffic origin.
• No billing impact, and no live notifications to real signer email addresses (sandbox traffic is intended for test recipients).