> ## Documentation Index
> Fetch the complete documentation index at: https://docs.useorbitcrm.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Best Practices

> Follow these recommendations to build reliable, secure, and performant integrations.

## Security

> [card] Store API keys securely
>
> Use environment variables, never hardcode keys in source code.

> [card] Verify webhook signatures
>
> Always validate the signature header before processing webhooks.

> [card] Use HTTPS endpoints
>
> All webhook URLs must use HTTPS for secure communication.

> [card] Rotate keys periodically
>
> Regenerate API keys regularly as a security best practice.

## Performance

> [card] Cache responses
>
> Cache form configurations and reduce unnecessary API calls.

> [card] Use pagination
>
> Request only the data you need with appropriate page sizes.

> [card] Implement webhooks
>
> Use webhooks instead of polling for real-time updates.

> [card] Batch operations
>
> Group related API calls when possible.

## Reliability

> [card] Handle errors gracefully
>
> Implement proper error handling for all API responses.

> [card] Use exponential backoff
>
> Retry failed requests with increasing delays.

> [card] Implement idempotency
>
> Handle duplicate webhook deliveries gracefully.

> [card] Monitor rate limits
>
> Track your API usage and stay within limits.

## Error Handling

| Code | Action |
| - | - |
| `400` | Check request parameters |
| `401` | Verify API key is valid |
| `429` | Implement backoff and retry |
| `500` | Retry with backoff, contact support if persistent |

[Next: Troubleshooting →](https://docs.useorbitcrm.ai/developers/troubleshooting.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.