Security
Cloud infrastructure
No on-premise servers. Application on Vercel and database on Supabase (AWS), in Frankfurt, Germany, with provider firewalls and DDoS protection.
Access control
Least privilege by role, row-level security on every database table, administrative credentials held by the security owner only, quarterly access reviews.
Encryption
TLS 1.2+ in transit for every system and marketplace API; AES-256 at rest for databases and backups.
Accounts and devices
Multi-factor authentication on every business account, automatic screen lock, unique strong passwords and malware protection on every computer.
Monitoring and vulnerabilities
Automated tests before every deployment, daily automated monitors of integrations and data flows, prompt security updates and credential rotation.
Incident response
Defined owner and steps: contain, assess, notify affected sellers, marketplaces and authorities without undue delay, recover and review.
Security and privacy contact: amz@digitalizedworld.shop