Security as a foundational pillar.
From database encryptions and role-based access to automated vulnerability monitoring, security is built into every layer of our stack.
Our Security Approach
Security isn't an afterthought. We employ defense-in-depth principles, enforcing strict isolation between tenant stores, rigorous data validation, and automated threat detection.
Account Security
User passwords are encrypted using secure cryptographic hashing algorithms. We protect against brute-force authentication attacks using rate limiting and session validation.
Access Control & Store Isolation
Every request across our API verifies that the authenticated merchant owns the store or resources being queried. Store data is strictly scoped by owner and store IDs.
Data Protection & Encryption
All data in transit is encrypted using modern TLS (Transport Layer Security) protocols. At rest, data is safeguarded in managed, redundant cloud clusters with continuous backup systems.
Application Security
We sanitize and validate all inputs with strict Zod schemas to protect against cross-site scripting (XSS), SQL/NoSQL injection, and request forgery.
Report a Security Issue
If you discover a vulnerability or security concern, please contact our dedicated security team immediately at Contact Support. We appreciate responsible disclosure.