| Amazon & compliance |
|---|
| Amazon SP-API Data Protection Policy | Assessment completed. Buyer PII is opt-in, so a default account receives none |
|---|
| GDPR and UK GDPR | Article 28 DPA with EU Standard Contractual Clauses and the UK IDTA, downloadable without talking to sales |
|---|
| CCPA | Service Provider terms |
|---|
| Control framework | Referenced to ISO 27001 and NIST CSF |
|---|
| Encryption & credentials |
|---|
| At rest | AES-256-GCM on every database row, cached file and backup |
|---|
| In transit | TLS 1.3, with cipher suites monitored and weak protocols refused |
|---|
| Amazon credentials | Held in AWS Secrets Manager and rotated automatically |
|---|
| API keys | Shown once, then permanently hidden, with a one-year maximum lifetime |
|---|
| Access control |
|---|
| Two-factor authentication | TOTP via authenticator app, enforced for staff with infrastructure access |
|---|
| Least privilege | Engineers reach only the systems they directly maintain |
|---|
| Scopes | Table-level and integration-level, so a key can be narrower than an account |
|---|
| Account reviews | All employee accounts reviewed quarterly, access revoked within 24 hours of termination |
|---|
| Isolation & hosting |
|---|
| Per-organization partition | Cross-organization access is impossible by design, not by policy |
|---|
| Region | AWS and GCP in the United States, primary region us-east-1 |
|---|
| Datacenters | Tier-3+, redundantly powered and continuously monitored |
|---|
| Audit & retention |
|---|
| PII access log | Every read, every export and every API call is recorded |
|---|
| PII retention | 30 days, enforced, with deletion jobs running nightly |
|---|
| Deletion on request | Completed and confirmed within 24 hours, written to your audit log |
|---|
| After you cancel | Full deletion within 30 days of termination, backups included |
|---|
| Audit log retention | Kept for a minimum of 12 months |
|---|
| Testing & response |
|---|
| Penetration testing | Third-party security firm, on an annual cycle |
|---|
| Continuous scanning | Automated scans across all data flows, plus scheduled deep scans |
|---|
| Breach notification | 48-hour SLA, against a documented incident response plan |
|---|
| Incident drills | Tabletop exercises twice a year, against a plan reviewed every six months |
|---|
| What the AI sees |
|---|
| Model training | Never used to train AI or ML models. Per-request inference only, with prompts and responses not retained by the provider |
|---|
| Data sent to the model | Only the minimum a question needs — no raw exports passed through |
|---|
| Subprocessors | AWS, GCP, Stripe and the AI providers, all US-based and listed in the Privacy Policy |
|---|
.svg)
Claude
.svg){kind=icon}
Video reviews