Security

Information Security and Privacy Program v1.1 · effective 18 October 2026

Cloud infrastructure

No on-premise servers. Application on Vercel and database on Supabase (AWS), in Frankfurt, Germany, with provider firewalls and DDoS protection.

Access control

Least privilege by role, row-level security on every database table, administrative credentials held by the security owner only, quarterly access reviews.

Encryption

TLS 1.2+ in transit for every system and marketplace API; AES-256 at rest for databases and backups.

Accounts and devices

Multi-factor authentication on every business account, automatic screen lock, unique strong passwords and malware protection on every computer.

Monitoring and vulnerabilities

Automated tests before every deployment, daily automated monitors of integrations and data flows, prompt security updates and credential rotation.

Incident response

Defined owner and steps: contain, assess, notify affected sellers, marketplaces and authorities without undue delay, recover and review.

Security and privacy contact: amz@digitalizedworld.shop