Platform & Integrations FAQ

Shared responsibility model, third-party integrations, and ownership.

Quick answers

Which third-party integrations are available out of the box?

Reach Common includes standard integration patterns across common categories.

Specific vendors are selected by the brand.

Common categories include:

• Identity & Access (SAML 2.0 SSO for customers and agents, when contracted)

• payment gateways

• financing providers

• tax calculation engines

• device support and knowledge platforms

• analytics and affiliate tracking (via GTM)

• email and SMS providers

• logistics and fulfillment partners

• reporting, dashboards, and data exports

Reach provides the integration framework.

Vendor selection and commercial agreements remain brand-owned.

What does Reach do vs what does the partner/brand do?

Reach responsibilities typically include:

• platform hosting and maintenance

• checkout, cart, pricing, and promo engine

• secure sessions after authentication

• order orchestration and transaction processing

• reporting, dashboards, and audit trails

• API layer and third-party integrations

• role-based access and agent attribution

Partner / brand responsibilities typically include:

• Identity Provider (SSO), if used

• payment gateway and financing contracts, if used

• tax configuration and compliance decisions

• pricing, promotions, and offers

• branding, content, and UX approvals

• regulatory and legal compliance

• downstream billing and invoicing systems

How do we maintain security and compliance?

Security follows a shared responsibility model.

Identity & access:

• SAML 2.0 SSO can be enabled (when contracted)

• the brand controls passwords, MFA, and account policies in its Identity Provider

• Reach does not store user credentials

Platform controls:

• signed auth tokens

• session expiry and re-authentication

• role-based access control (RBAC)

• agent attribution for actions in Reach Central

Auditability:

• audit trails for key actions

• transaction and activity logging

• separation of customer vs agent access

Regulatory compliance and data governance are owned by the brand.