Overview
Let remote storefronts create carts, add items, and place orders through a single signed endpoint.
Problem
Multiple heads (web, mobile, kiosk) need a secure, unified backend for carts and orders without exposing internals.
Solution
OrderFlow exposes /bridge/{clientId}/{action} with HMAC signatures, IP allow-lists, and scoped permissions for cart and order actions.
How it works
Create an inbound connection, restrict by IP, implement a simple signer, then call actions for cart.create/items.add/convertToOrder. The 60s replay window and audit logs keep things safe.
Who is this for
Engineering
Solutions Architect
Product Manager
Expected outcomes
- Single backend for all heads (web/app/kiosk)
- Reduced integration time and surface area
Key metrics
Checkout integration time
Baseline
14 days
Target
3 days
Auth failures in bridge calls
Baseline
500 ppm
Target
10 ppm
Gallery
Downloads & templates
Case studies
RetailApp launches kiosk checkout
From POC to live in 5 days using the HMAC bridge.
Retail Mid-market NA
Security impact
- Cart and order payloads (no PAN) · PII: customer contact & addresses
Compliance
- TLS in transit
- HMAC signed requests
- PCI-N/A (no card data stored)
Availability & next steps
Free
Pro
Enterprise