#jd_best-practices
sharp jayBOT
👋 Welcome to your new thread!
⏲️ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.
⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.
🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1506827594652450816
📝 Have more to share? Add more details, code, screenshots, videos, etc. below.
dense canopy
I am new to stripe so Im asking if:
Do you think Stripe Connect with direct charges is the correct setup for this? Are there any risks, limitations, or better alternatives we should consider before finalizing our database and integration design?
hallow matrix
Based on the description and business model you shared, using the Connect with Direct Charges is exactly the flow that will meet your requirements. The platform will be managing how the funds (using Direct Charges) will be collected while connected account will be the one accepting and managing the payments.
The other considerations will be configuring the behaviors of the connected account: https://docs.stripe.com/connect/accounts-v2/connected-account-configuration
dense canopy
Thank you!
I also wanted to get your thoughts on something.
Our team is considering an approach where organizations enter their Stripe API keys directly into our app to establish the payment connection, rather than using Stripe Connect.
My concern is that this makes our app responsible for securely storing and managing those keys, which feels like a significant security risk. Is this a common pattern you've seen work safely in practice, or would you generally advise against it?
hallow matrix
Having organizations enter their Stripe API keys directly into your app is generally advised against, and Stripe Connect exists specifically to solve this problem in a safer way.
You become responsible for encrypting, storing, rotating, and auditing access to those keys. A single breach may expose Stripe account you help the integration with, not just your own.
In addition, if an organization rotates their key and forgets to update it in your app, their integration silently breaks. You also have no programmatic way to detect or recover from this.
dense canopy
Thank you so much for the help!
hallow matrix
No problem! Happy to help 😄
dense canopy
Hi! I have a follow-up question.
I checked Stripe's availability page (https://stripe.com/global) and it looks like the Philippines isn't listed as a supported country. Does this mean I won't be able to implement my planned workflow?
To recap, the workflow is:
• Our platform creates a Stripe platform account.
• Each organization connects its own Stripe account as a connected account under the platform.
• When a donor makes a donation, we use Direct Charges so the payment is processed under the organization's connected Stripe account.
Would the Philippines not being on that list block us from implementing this? And if so, is there a recommended workaround?
hallow matrix
What is the country of your platform? Will the connected account be the different country from the platform?
dense canopy
Our platform will be based in the Philippines. As for the connected accounts, we're currently in the planning stage, so nothing is finalized yet but we're initially targeting local (Philippine-based) organizations, with potential expansion to Southeast Asia and possibly international down the line. This will ultimately depend on our stakeholders' direction.
hallow matrix
I'm afrad that Phillipines is not in the supported country by Stripe, and there is no workaround to create a new Stripe account in Phillipines.
I'd recommend writing to Support https://support.stripe.com/contact and share your feedback, so that the product team can take this into future considerations
sharp jayBOT
⛔️ Stripe developers have stepped away for a short while
Please leave your questions here, and we’ll respond as soon as we're back! If you need help urgently, you can contact Stripe support for help.