# Accounts

Checkr Trust organizes API access into three isolated environments: **Test**, **Pilot**, and **Live**. Each environment has its own API credentials, webhook configuration, and signing secrets — nothing is shared across them.

## Test

The Test environment is for validating your integration without touching production data sources. All API calls return mock data from a pre-set allowlist of responses. No real background check data is queried or returned.

- Uses mock / synthetic data only
- Pre-set allowlist of supported request types
- Not billed
- Credentials are distinct from Pilot and Live


See [Test Accounts](/test-accounts) for available mock profiles and product-specific behavior.

## Pilot

The Pilot environment behaves identically to Live — it routes requests to production data sources and returns real results. The difference is that Pilot usage is limited (by time window or API call count) and is not billed. Use Pilot to validate end-to-end flows with real data before transitioning to Live traffic.

Important
Pilot processes real production PII and returns real results. Apply the same security controls to Pilot credentials and data as you would for Live — treat them as production secrets.

- Real API calls against production data sources
- Time-limited or call-limited (per agreement)
- Not billed during the pilot period
- Credentials are distinct from Test and Live


## Live

The Live environment is your production account. API calls are routed to production data sources, results are real, and usage is billed per your MSA terms.

- Full production access
- Billed per MSA
- Credentials are distinct from Test and Pilot


## Notes

- **Credentials are unique per environment.** Do not share `client_id` and `client_secret` across Test, Pilot, and Live accounts.
- **Webhook URLs are configured per product per environment.** Each product (e.g. MVR, DLSC) supports one webhook URL at a time.
- **HMAC-SHA256 signing secrets are scoped per environment.** Use a distinct secret per environment. Reusing the same secret across Test, Pilot, and Live undermines environment isolation and should be avoided.