7.2 One Nonprofit = One Sandbox

Each organisation that deploys Pappr API gets a sandboxed tokenisation environment (an additional Pappr Tokenisation API), meaning:

• Isolated database access

• API keys for their own system only

• Optional dashboard via Supabase or Pappr’s frontend

This protects data and builds trust.