appfolio-prod-checklist

# AppFolio Production Checklist ## Overview AppFolio manages properties, tenants, leases, and work orders for real estate operations. A production integration handles sensitive tenant PII, financial transactions, and maintenance workflows. Failures here mean missed rent collections, unprocessed work orders, or tenant data exposure under CCPA. This checklist ensures your AppFolio API integration is resilient, compliant, and observable. ## Authentication & Secrets - [ ] `APPFOLIO_API_KEY` stored in secrets manager (not environment files) - [ ] Client ID and secret separated from application code - [ ] Key rotation schedule documented (90-day recommended) - [ ] Separate credentials for dev/staging/prod environments - [ ] API credentials scoped to minimum required permissions ## API Integration - [ ] Production base URL configured (`https://api.appfolio.com/v1`) - [ ] Rate limit handling with exponential backoff - [ ] Pagination implemented for property and tenant list endpoints - [ ] Work order creation tested with all required fields - [ ] Lease document upload validated for supported formats - [ ] Webhook endpoints configured for tenant and payment events - [ ] Idempotency keys used for payment and work order creation ## Error Handling & Resilience - [ ] Circuit breaker configured for AppFolio API outages - [ ] Retry with backoff for 429/5xx responses - [ ] Tenant PII handling verified CCPA/FCRA compliant - [ ] Data validation on all API responses before storage - [ ] ...