Vault Commerce OS · Integrations

Connect Commerce OS to the Systems Your Business Already Depends On

Connect supported websites, ERP, accounting, payments, logistics, messaging, CRM, identity, BI and specialist systems through APIs, webhooks, scheduled synchronisation or controlled file exchange—without turning every external platform into a competing source of operational truth.

Integrations is the ongoing system-to-system connection layer after go-live. It is distinct from Data Migration, which establishes the opening data state, and from Marketplace Connections, which handles marketplace-specific catalogue, stock and transaction exchange.

APIs, webhooks and scheduled sync
Finance, logistics, messaging and identity
Monitoring, retries and audit history
From connection design to monitored ongoing data exchange
Define + connect + synchronise + govern
01
Define the Contract
Choose systems, source-of-truth ownership, fields, events, direction, frequency, identifiers and expected outcomes.
02
Connect Securely
Configure supported authentication, API, webhook, scheduled job or controlled file exchange with the minimum required permissions.
03
Synchronise and Reconcile
Exchange approved data, preserve identifiers, prevent duplicates and compare internal and external states.
04
Monitor and Recover
Track health, failures, retries, latency, throttling, schema changes, security events and final resolution.
Every integration should define what system owns each field or event before synchronisation is enabled.
System ownership + connection discipline
Choose the integration depth

Use Event-Driven APIs, Scheduled Synchronisation or Controlled File Exchange

The integration method should match the external system’s capability and the business need. Real-time exchange is not always necessary, and batch exchange is not always sufficient.

Swipe through the integration models
01

API and Event Integration

Use supported APIs and webhooks for near-real-time events, status changes and controlled data exchange.

  • REST or supported API interfaces
  • Inbound and outbound events
  • Webhook delivery and verification
  • Idempotency and duplicate protection
03

Controlled File Exchange

Use structured imports and exports where APIs are unavailable or a controlled batch process better fits the external system.

  • CSV or other approved structured files
  • Defined schemas and validation
  • Secure transfer and processing status
  • Import/export audit history
Four connected integration components

Control System Ownership, Connectivity, Data Exchange and Operational Health

An integration should be treated as an operating contract between systems: what moves, who owns it, how often, under which credentials, and what happens when the exchange fails.

Swipe through the Integrations components
01

Integration Design and Ownership

Define systems, authoritative fields, event direction, identifiers, frequency, dependencies and acceptance rules.

SystemsOwnershipEventsContract

View design and ownership

02

Connectivity and Security

Configure authentication, permissions, endpoints, webhooks, schedules and secrets using the minimum required access.

AuthAPIWebhookSecure

View connectivity and security

03

Synchronisation and Reconciliation

Map records, preserve identifiers, exchange events and compare source and destination state without silent divergence.

MapSyncReconcileLineage

View sync and reconciliation

04

Monitoring, Recovery and Governance

Track connection health, latency, failures, retries, rate limits, schema changes, permissions and audit activity.

HealthRetryAlertsAudit

View monitoring and recovery

See the Integrations workflow in action

Follow a Connection from System Ownership through Secure Exchange, Reconciliation and Recovery

Start with the complete integration architecture, then move through system ownership, field and event contracts, authentication, webhooks, schedules, mapping, incremental sync, duplicate protection, reconciliation, health, failures, retries and provider changes.

Slide 1 of 10

Complete Integrations architecture

02
System ownership and integration contract The screen shows fictional systems, authoritative domains, field and event direction, frequency, identifiers and owners.
Step 1 · Define the contract

Decide Which System Owns Each Field and Business Event

Integration starts with ownership and direction, not credentials.

  • Authoritative and reference systems
  • Inbound, outbound or controlled two-way
  • Fields, events and identifiers
  • Frequency and acceptance rules
What this screen demonstrates Two-way synchronisation should use explicit conflict and precedence rules.
03
Connectivity and security The screen shows fictional connection status, environment, auth method, approved scopes, expiry state and administrator without exposing secrets.
Step 2 · Connect securely

Use the Minimum Permissions Required for the Agreed Exchange

Connection configuration remains restricted to approved administrators.

  • Supported authentication method
  • Test and production environment
  • Read/write scopes
  • Expiry, rotation and connection status
What this screen demonstrates Secret values are never displayed in the public walkthrough.
04
Integration transport methods The screen shows webhook events, scheduled jobs and controlled file exchange with fictional delivery and processing status.
Step 3 · Choose the exchange method

Match the Connection Method to the External System and Business Need

The platform can use event, schedule or file-based patterns where the implementation supports them.

  • Webhook event subscription
  • Scheduled incremental sync
  • Structured file exchange
  • Delivery and processing status
What this screen demonstrates Real-time exchange is not necessary for every data domain.
05
Integration mapping and transformation The screen maps fictional fields, statuses and identifiers between systems and shows validation and transformation rules.
Step 4 · Map and transform

Make Cross-System Translation Explicit

Record and event relationships stay traceable across connected systems.

  • Source and destination fields
  • Status and value translation
  • Internal and external identifiers
  • Required fields and validation
What this screen demonstrates Invalid or unmapped required values should route to exception rather than silently disappearing.
06
Incremental sync and duplicate protection The screen shows changed records, watermark, event keys, processed state, duplicate protection and the last successful sync.
Step 5 · Synchronise safely

Process Changes without Recreating the Same Business Event Twice

Incremental processing and idempotency make retries safer and reduce unnecessary exchange.

  • Changed-since or event-based processing
  • Watermark or cursor
  • Idempotency or external event key
  • Processed, duplicate or retry state
What this screen demonstrates A repeated provider event should not create a second internal transaction.
07
Integration reconciliation The screen compares fictional internal and external states, flags stale or missing records and applies the configured conflict policy.
Step 6 · Reconcile the systems

Detect Divergence before It Becomes an Operational Problem

The integration can compare both sides and route differences according to the source-of-truth contract.

  • Internal and external state
  • Missing or stale record
  • Conflict and source precedence
  • Automatic or manual resolution
What this screen demonstrates External data should not overwrite an authoritative internal field merely because it is newer.
08
Integration failures and retries The screen shows fictional failed events, provider response, retry attempts, owner, escalation and final resolution.
Step 7 · Recover from failure

Turn Failed Exchange into Visible Operational Work

Failures remain attributable until they are retried, corrected or deliberately closed.

  • Failed record or event
  • Provider response and error category
  • Automatic or manual retry
  • Owner, escalation and resolution
What this screen demonstrates Internal validated state remains intact while the external connection is failing.
09
Provider changes and degraded integration The screen shows stale data, latency, throttling, schema mismatch and a controlled remediation path.
Step 8 · Handle provider change

Detect When the External System Changes the Integration Contract

Provider-controlled limits and schema changes can degrade a working integration without a full outage.

  • Latency and stale-data threshold
  • Rate limit and throttling
  • Deprecated field or endpoint
  • Remap, defer or controlled release
What this screen demonstrates Provider changes should be tested before revised mappings are released to production.
10
Integration health dashboard The screen shows connection health, last successful exchange, stale state, errors, credential status, throughput and audit history.
Step 9 · Govern ongoing integrations

See Which Connections Are Healthy, Stale or Degraded

A consolidated operations view helps technical and business teams identify integration risk quickly.

  • Connection and credential health
  • Last inbound and outbound success
  • Error volume and ageing
  • Throughput, freshness and audit history
What this screen demonstrates A degraded connection should be visible before users discover stale data downstream.
Swipe through the Integrations walkthrough
01
Decide what each system owns before connecting them

System Boundaries, Source of Truth, Fields, Events, Identifiers, Direction and Frequency

Integration design should begin with business ownership, not endpoints. For each connected field, record or event, the implementation should define which system is authoritative and whether the exchange is inbound, outbound or genuinely two-way.

Two-way synchronisation should not be used as a default. Where both systems can change the same field, conflict and precedence rules need to be explicit.

Authoritative-system ownership
Event and field-level direction
Frequency, identifiers and acceptance rules
Swipe through integration design controls

System and Domain Ownership

Define which platform owns each operating domain.

  • Catalogue, stock, finance, CRM or logistics ownership
  • Authoritative versus reference-only data
  • Read, write or read/write scope
  • Business owner and technical owner

Field and Event Contract

Specify exactly what data moves and what triggers the exchange.

  • Field and data-type mapping
  • Create, update or status event
  • Required and optional payload elements
  • Validation and rejection criteria

Identifiers and Relationship Mapping

Keep systems aligned without relying on names as identifiers.

  • Internal and external record IDs
  • Parent-child and account relationships
  • Idempotency or event keys
  • Mapping and lineage history

Direction, Frequency and Conflict Policy

Define how often synchronisation occurs and what happens when values differ.

  • Inbound, outbound or controlled two-way
  • Real-time, scheduled or manual trigger
  • Source precedence and conflict rules
  • Stale-data threshold and review path
02
Connect with the minimum access required to perform the agreed job

APIs, Webhooks, Authentication, Secrets, Network Controls, Scheduled Jobs and File Transfer

Connectivity should use the supported security model of the external platform and avoid exposing secrets in user-facing screens, logs, screenshots or ordinary exports.

Credentials should be scoped and rotated according to the applicable provider and client policy. Where possible, different environments should use separate credentials and endpoints.

Supported secure authentication
Environment and permission separation
Protected secret and endpoint handling
Swipe through connectivity and security controls

API and Authentication

Use the supported connection method with only the permissions required.

  • API key, OAuth or supported auth mechanism
  • Read/write scope and account permissions
  • Test and production environment separation
  • Expiry, rotation or revocation state

Webhooks and Event Delivery

Receive external events securely and prevent duplicate processing.

  • Verified webhook source where supported
  • Event type and subscription scope
  • Delivery attempt and response status
  • Idempotency and replay protection

Scheduled Jobs and File Exchange

Support controlled batch integration where event-driven APIs are unsuitable.

  • Configured job frequency
  • Incremental or full exchange
  • Structured file schema and validation
  • Secure transfer and processing history

Secrets and Administrative Controls

Keep sensitive connection material separate from normal operational access.

  • Protected credentials and tokens
  • Restricted integration-admin permissions
  • Secret change and reconnection history
  • No secrets in public logs or screenshots
03
Exchange data without allowing silent duplication or divergence

Record Mapping, Incremental Sync, Idempotency, Reconciliation, Conflict Resolution and Lineage

Ongoing synchronisation should know what changed, what has already been processed, which external record corresponds to the internal record and whether both sides still agree on the expected state.

Where an external system is not authoritative, a conflicting value should not silently overwrite Commerce OS. The conflict should follow the agreed precedence or review rule.

Incremental and event-based exchange
Duplicate prevention and lineage
Reconciliation and conflict control
Swipe through synchronisation and reconciliation controls

Incremental and Event-Based Sync

Move only the records or events that need to change when supported.

  • Changed-since or event-based exchange
  • Cursor, timestamp or event reference
  • Batch size and processing state
  • Last successful sync watermark

Idempotency and Duplicate Protection

Prevent retried events from creating duplicate business records.

  • External event or transaction key
  • Previously processed check
  • Duplicate create/update protection
  • Replay and retry history

Reconciliation and Conflict Resolution

Compare systems and surface divergence before it becomes operationally damaging.

  • Internal versus external state comparison
  • Missing, stale or conflicting records
  • Configured source precedence
  • Automatic or manual resolution path

Integration Lineage and Traceability

Retain enough history to explain where a value or status came from.

  • Source system and external ID
  • Event, batch or request reference
  • Transformation or mapping version
  • Timestamp, result and affected internal record
04
Treat integration health as an ongoing operational responsibility

Health Monitoring, Latency, Failures, Retries, Rate Limits, Schema Changes, Alerts and Audit History

Integrations can degrade even when neither business system is down. Expired credentials, schema changes, throttling, partial provider outages or malformed records can leave data stale or incomplete.

The operations view should make failures visible, preserve the internal authoritative state and provide controlled retry, remediation or escalation.

Connection and data freshness monitoring
Visible failures, retries and escalation
Schema-change and audit governance
Swipe through integration operations controls

Health, Freshness and Latency

Know whether each connection is functioning within the expected window.

  • Connected, degraded or unavailable state
  • Last successful inbound and outbound event
  • Freshness or latency threshold
  • Stale-data warning and owner

Error Queue, Retry and Escalation

Keep failed exchange visible until it has a safe outcome.

  • Failed record or event
  • Error category and provider response
  • Automatic retry where safe
  • Manual retry, owner and escalation

Rate Limits, Provider Changes and Schema Drift

Detect when an integration contract changes outside Commerce OS.

  • Throttled or rate-limited requests
  • Deprecated endpoint or field
  • Unexpected payload or schema mismatch
  • Remap, defer or controlled release

Audit, Change and Access History

Keep technical changes attributable and reviewable.

  • Connection configuration changes
  • Credential or permission changes
  • Mapping and schedule versions
  • User, system and resolution history
Integration implementation workflow

Define, Connect, Test, Reconcile, Release and Monitor

The integration should not enter production until system ownership, mapping, security, failure handling and acceptance tests are understood.

Swipe through the Integrations workflow
01

Define the Contract

Choose system ownership, fields, events, direction, identifiers, frequency and acceptance criteria.

02

Connect Securely

Configure supported credentials, endpoints, webhooks, schedules or file exchange with minimum access.

03

Map and Transform

Define record relationships, field mappings, status translations and conflict rules.

04

Test and Reconcile

Run controlled events or batches, compare both systems and validate retry and failure handling.

05

Release Production Sync

Enable the approved connection scope and monitor early production activity closely.

06

Monitor and Improve

Review latency, failures, provider changes, mapping drift, throughput and ongoing business need.

Integrations is not Data Migration

Data Migration establishes the opening Commerce OS state from legacy data. Integrations maintain continuing exchange between live systems after go-live.

Integrations is broader than Marketplace Connections

Marketplace Connections is the marketplace-specific connector layer. Integrations covers other supported business systems such as finance, payments, logistics, messaging, ERP, identity and analytics.

Integration responsibility and governance

Keep Business Ownership, Commerce OS Configuration and External Provider Responsibility Explicit

The implementation should identify who owns each connected business domain, who authorises credentials and which capabilities remain controlled by the external provider.

Responsibility
Client Business / IT Team
Commerce OS Integration Layer
External System / Provider
Business ownership and source-of-truth rules
Own and approve
Document and configure
Expose supported data and events
Credentials, account access and environment permissions
Authorise and control access
Protect and use approved credentials
Enforce provider authentication and scopes
Field, status, identifier and event mapping
Approve business interpretation
Configure transformation and routing
Define external schema and capability
Synchronisation, retries and reconciliation
Review material conflicts
Operate supported connection logic
Receive or send supported exchange
Provider availability, limits and API changes
Approve business response
Detect, adapt and escalate within scope
Control external service capability
Platform licence, data export and exit obligations
Approve contract terms
Govern according to agreement
Subject to provider terms and export capability
Swipe through the Integrations responsibility views
01

Client Business / IT Team

  • Source-of-truth policy Own
  • External account access Authorise
  • Business mapping Approve
  • Material conflict decisions Approve
02

Commerce OS Integration Layer

  • Connection config Configure
  • Mapping and transformation Configure
  • Sync and retries Operate
  • Health and audit Monitor
03

External System / Provider

  • API or export capability Provide
  • Authentication scopes Enforce
  • Rate limits and availability Control
  • Schema and platform changes Control
Common integration families

Connect Commerce OS to the Business Systems that Need Shared Operational Context

Each connection should be evaluated individually for supported APIs, ownership, frequency, security and whether real-time exchange is operationally necessary.

Swipe through the Integrations use cases
Accounting and FinanceExchange approved invoices, settlement references, tax or payment status and accounting identifiers according to the agreed source-of-truth model.
Payment ProvidersConnect payment intents, authorisation, capture, refund or settlement state where the provider and implementation support it.
Shipping and LogisticsExchange shipment creation, labels, tracking, carrier milestones or delivery status with supported logistics providers.
Messaging and NotificationsConnect supported email, SMS or messaging services for transactional and approved lifecycle communication.
ERP and Enterprise SystemsExchange approved catalogue, account, financial or operational context while keeping system ownership explicit.
Identity and SSOConnect supported identity providers for authentication, user provisioning or role context where separately configured.
BI and AnalyticsExport governed operational data or events to approved reporting and analytics environments.
Specialist Business SystemsConnect client-specific applications, portals, scanners or workflow tools where a supported interface and defined business case exist.
Integrations FAQs

Common Questions before Connecting Commerce OS to Another System

The final design depends on the external provider’s API or export capability, account permissions, security model, data ownership, expected volume, latency requirements and business-critical failure scenarios.

Request a Commerce OS Demo

Is Integrations the same as Data Migration?

No. Data Migration establishes the opening Commerce OS state from legacy data. Integrations maintain ongoing exchange between live systems after go-live.

Is Integrations the same as Marketplace Connections?

No. Marketplace Connections is the marketplace-specific connector layer. Integrations covers other supported systems such as finance, payments, logistics, messaging, ERP, identity and analytics.

Can Commerce OS integrate with any software?

Not automatically. Integration depends on the external system exposing a usable API, webhook, structured export/import or other supported interface and on the approved implementation scope.

Does every integration need to be real time?

No. The correct frequency depends on business need and external capability. Some events may need near-real-time exchange, while other data can safely synchronise on a schedule.

Can integrations be two-way?

Yes, where appropriate, but two-way sync should define field ownership, precedence and conflict handling. It should not allow both systems to overwrite each other without rules.

How are duplicate events prevented?

Where supported, the integration can use external identifiers, event keys, idempotency controls and previously-processed checks so retries do not create duplicate business records.

What happens if an external API is unavailable?

The failure should remain visible with retry and escalation logic appropriate to the connection. Internal validated state should not be discarded merely because the external system is unavailable.

How are credentials protected?

Credentials, tokens and secrets should be stored in protected configuration with restricted administrative access and should never appear in public pages, screenshots or ordinary exports.

Can we monitor whether an integration is stale or degraded?

Yes. The operations layer can track last successful exchange, failure volume, latency, stale-data thresholds, credential state and other health indicators where configured.

What happens if the external provider changes its API?

The integration may require remapping, code changes or a revised connection scope. Provider-controlled changes should be detected, tested and released through the normal change process.

Begin with the systems, data ownership and events that genuinely need to connect

Show Us Which Systems Commerce OS Must Exchange Data with after Go-Live

We will map system ownership, fields, events, identifiers, direction, frequency, authentication, APIs, webhooks, schedules, file exchange, reconciliation, conflicts, retries, monitoring and provider-change risks.