01
Hosted card processing
Use Stripe-hosted checkout so StateFormed does not directly store customer payment-card numbers.
The production system must be designed before the first SSN is accepted. This draft separates the marketing site from the future authenticated intake environment.
Use Stripe-hosted checkout so StateFormed does not directly store customer payment-card numbers.
SSNs, ITINs, IDs, and signed authorizations belong in an authenticated encrypted portal, not a public website form.
Administrative accounts use MFA and role-based permissions. Access is limited to the people who need the information.
Record logins, data access, status changes, downloads, and document events.
Define what must be kept, for how long, and when sensitive data is redacted or destroyed.
Maintain written breach detection, containment, legal review, customer notification, and recovery procedures.
The marketing site can launch first. The SSN intake cannot launch until authentication, encryption, access logging, retention, backups, and incident response are real—not placeholders.
Package selection and non-sensitive educational content.
Payment handled by the payment provider.
Sensitive formation and EIN information.
Review, filing status, and controlled document access.