Securing your integration

Experian Phone Validation requires an authentication token. Your token grants access to your licensed products, so it's important to protect it and limit how it can be used.
At a minimum, we recommend:

• Keeping your token confidential.
• Rotating tokens regularly, in the same way you would rotate passwords.
• Restricting token usage based on where your integration runs.

Depending on your integration, you can apply additional controls such as permitted URLs, CORS origin restrictions, or IP whitelisting to prevent unauthorised use. See Securing your token for a detailed guide on available security controls and how to configure them.