Security Overview

1. Data Encryption Standards

All data in transit is protected using TLS. The OAuth access and refresh tokens we hold for your connected Shopify, Etsy, and eBay stores are encrypted at rest using AES-256-GCM, with a random initialisation vector per value and an authentication tag that makes tampering detectable. The encryption key is held as server environment configuration and is never stored in the database alongside the data it protects. Our own marketplace application credentials (client IDs and secrets) are likewise server configuration and are never written to the database.

2. Secure OAuth Authorization Flow

OrbitSKU does not collect or store credentials like password keys for your eBay, Etsy, or Shopify profiles. Connect storefront channels using secure official OAuth authorization handshakes. You retain full revoke controls inside your platform administration dashboards.

3. Infrastructure Security

OrbitSKU's servers reside inside isolated Virtual Private Clouds (VPC) with strict security groups and firewalls. All platform routes are rate-limited to shield from DDoS attempts and brute-force attacks.

4. Incident Reporting

We maintain strict backup and audit trail practices. In the event of a detected telemetry system compromise or security event, OrbitSKU will notify affected accounts inside 24 hours of discovery.