--- title: Understanding the Sandbox description: learn more about identity verfication free sandbox and free background check sandbox --- [Skip to content](https://info.authenticate.com/understanding-the-sandbox#main-content) [🙋‍♂️ Raise a Support Ticket](https://info.authenticate.com/kb-tickets/new?hsLang=en) [![Authenticate](https://info.authenticate.com/hubfs/authenticate_logo_2023_tm_rgb.svg)](https://authenticate.com/) Open main navigation Close main navigation - [🙋‍♂️ Raise a Support Ticket](https://info.authenticate.com/kb-tickets/new) Looking for answers? Ask us anything. - There are no suggestions because the search field is empty. 1. [Knowledge Base](https://info.authenticate.com/?hsLang=en) 2. [Sandbox](https://info.authenticate.com/sandbox?hsLang=en) # Understanding the Sandbox ## Learn more about the Authenticate Sandbox ### What is the sandbox? The Authenticate sandbox is an isolated testing environment where you run test verifications, try out features, and validate your integration before going live — without spending real verification credits or affecting your live company account. Third-party vendor checks aren't called in real time; they return mocked responses tied to a fixed set of test identities, so results are predictable and repeatable. ### Who should use the sandbox, and why? Anyone who needs to see how Authenticate behaves before real users and real credits are involved: developers integrating the API (build against predictable responses instead of live data), teams building Medallion™ workflows in the no-code portal, buyers still evaluating (see exactly what a clean result, a criminal record, or a failed match looks like), and operations or support teams training staff. The point is to remove risk from going live — confirm the outcome you expect on a known identity first, then switch to production with confidence. ### How does the sandbox work? The sandbox is a separate company from production, with its own data and its own credit balance, reached through an environment switch inside the production portal — there is no standalone login. Vendor checks return mocked responses mapped to pre-created test users. When your sandbox company is created, Authenticate applies $100 in testing credit automatically (no card required, fixed balance). Sandbox API keys are labeled as sandbox credentials, and an environment badge appears throughout the portal, on PDF reports, and in the Medallion UI. Sandbox data is purged periodically. ### What does the sandbox return? The same result objects as production, but the outcome is determined by which test user you run — not by live data. Each test user maps to one scenario (a clean identity, an identity with a criminal record, an identity that can't be found, and so on). Two rules make test runs pass reliably: OTP codes are always `111111`, and for Knowledge-Based Authentication (KBA) you select Option 1 for all five questions. ### What is not supported in the sandbox? Not available: Financial Account Ownership Verification (FAOV), Professional License verification, Know Your Business (KYB), and STR integrations — STR-related checks can only be tested in production. Also unsupported: custom sender email (the sandbox always uses the default Authenticate sender), billing controls (no card, no manual top-up, no auto top-up — only the Authenticate team can add sandbox credit), "send link to phone" in the Medallion flow, and standalone sandbox login. The sandbox works only with the pre-defined test users — any other PII returns unreliable output — and data is purged periodically. - [Before you begin](https://info.authenticate.com/before-you-begin?hsLang=en#main-content) - [About Authenticate®](https://info.authenticate.com/before-you-begin?hsLang=en#about-authenticate) - [Pricing: Pay-as-you-go](https://info.authenticate.com/before-you-begin?hsLang=en#pricing-pay-as-you-go) - [Solutions by Authenticate®](https://info.authenticate.com/before-you-begin?hsLang=en#solutions-by-authenticate) - [Account Activation](https://info.authenticate.com/before-you-begin?hsLang=en#account-activation) - [How to verify a user?](https://info.authenticate.com/before-you-begin?hsLang=en#how-to-verify-a-user) - [Data Coverage & Compliance](https://info.authenticate.com/before-you-begin?hsLang=en#data-coverage-compliance) - [Getting started](https://info.authenticate.com/getting-started?hsLang=en#main-content) - [General](https://info.authenticate.com/getting-started?hsLang=en#general) - [Medallion™](https://info.authenticate.com/getting-started?hsLang=en#medallion) - [No-Code Solutions](https://info.authenticate.com/getting-started?hsLang=en#no-code-solutions) - [API Solutions](https://info.authenticate.com/getting-started?hsLang=en#api-solutions) - [Products](https://info.authenticate.com/products?hsLang=en#main-content) - [User Insights](https://info.authenticate.com/products?hsLang=en#user-insights) - [Identity Verification](https://info.authenticate.com/products?hsLang=en#identity-verification) - [Criminal and Civil Records](https://info.authenticate.com/products?hsLang=en#criminal-and-civil-records) - [Background Checks](https://info.authenticate.com/products?hsLang=en#background-checks) - [Sandbox](https://info.authenticate.com/sandbox?hsLang=en) - [Pricing](https://info.authenticate.com/pricing?hsLang=en#main-content) - [Pricing Model](https://info.authenticate.com/pricing?hsLang=en#pricing-model) - [Integrations](https://info.authenticate.com/integrations?hsLang=en#main-content) - [Guesty](https://info.authenticate.com/integrations?hsLang=en#guesty) - [Hostaway](https://info.authenticate.com/integrations?hsLang=en#hostaway) - [Hostfully](https://info.authenticate.com/integrations?hsLang=en#hostfully) - [Lodgify](https://info.authenticate.com/integrations?hsLang=en#lodgify) - [OwnerRez](https://info.authenticate.com/integrations?hsLang=en#ownerrez) - [SuiteOp](https://info.authenticate.com/integrations?hsLang=en#suiteop) - [Manage Your PMS Integration](https://info.authenticate.com/integrations?hsLang=en#manage-your-pms-integration) - [FAQs](https://info.authenticate.com/faqs?hsLang=en#main-content) - [Introduction](https://info.authenticate.com/faqs?hsLang=en#introduction) - [Verification and Background Checks](https://info.authenticate.com/faqs?hsLang=en#verification-and-background-checks) - [Step-by-Step Hub](https://info.authenticate.com/faqs?hsLang=en#step-by-step-hub) - [Admin Profile](https://info.authenticate.com/faqs?hsLang=en#admin-profile) - [Compliance](https://info.authenticate.com/faqs?hsLang=en#compliance) - [Integrations](https://info.authenticate.com/faqs?hsLang=en#integrations) - [Pricing](https://info.authenticate.com/faqs?hsLang=en#pricing) - [Troubleshooting](https://info.authenticate.com/faqs?hsLang=en#troubleshooting) [![Chill listening crop-3](https://info.authenticate.com/hs-fs/hubfs/authenticate-logo-rgb-svg%20(3).png?width=195&height=24&name=authenticate-logo-rgb-svg%20(3).png "Chill listening crop-3")](https://authenticate.com/) 730 Arizona Avenue, Suite 230, Santa Monica, CA 90401 [mailto:support@authenticate.com](mailto:support@authenticate.com) Copyright © 2026, Authenticate