Security

Your shop’s data, kept safe

Kept apart from every other shop, encrypted, and backed up as it changes. Here is how, in plain words.

Your shop’s data is kept apart

Every shop has a database of its own, with its own credentials: no query can reach another shop’s rows.
Every shop has its own secret for signing sessions and links, and its own folder for photos and files.
The platform’s own records are in a separate database that shops never touch.
A restore, an export or a deletion touches one shop and nothing else.

Encrypted

Every connection is HTTPS, with TLS 1.2 or 1.3. Plain HTTP is redirected.
Shops’ websites, dashboards and POS tell browsers to use HTTPS only (HSTS).
Keys and passwords you give us, such as a mail server password or a two-factor secret, are encrypted with AES-256-GCM before they are stored.
Passwords are stored only as Argon2id hashes, never as they were typed.

Backed up

Every change to every shop’s database is copied as it happens, with a full backup each night, to separate storage in the EU.
A shop can be restored to any minute of the last seven days, on its own, without touching any other shop.
Photos and files are copied every night, per shop.
Once a month, a shop is restored automatically from its backup and checked against the live one.

Signing in

Two-factor sign-in is required for the shop’s owner, and for any role you require it for. Recovery codes are kept only as hashes.
Dashboard sessions end after 12 hours, and never last more than 24.
Repeated wrong passwords slow sign-in down, by the account and by where they come from, without telling an attacker which accounts exist.
A sign-in from a new device is emailed to its owner, and every sign-in is kept in your sign-in history.
Everything done in your dashboard is in its audit log: who, what and when.

When our team helps you

Our team can open your dashboard only while “Help from the platform” is on in Settings → Privacy. Turn it off and nobody can.
Each visit is for one hour, for a reason we must give, and you are emailed before it starts. A banner is on your dashboard throughout, naming the person.
Visits are look-only, unless the person has our separate permission to make changes. Every action is in your audit log under their name.
Our team can never manage your staff or roles, export or erase your customers, sign in as a customer, or see your payment keys.

Where your data lives

Your shop’s data is stored in the European Union, at Hetzner in Germany and Finland.
The companies we use, and where, are on our sub-processors page.

Payments

Customers type their card details into your payment provider’s own form, or pay on their bank’s or wallet’s own page. Card and bank details go straight to the provider and never reach our servers.
Payments are made on your own account with your payment provider, whichever way the customer pays.

Watched around the clock

Every shop’s website, apps and database are checked every minute, and our team is alerted when something fails.
What is happening now, and the last 90 days, are on our status page.

Your customers’ privacy

Customers can ask for their data, or for it to be erased, from your website; you handle each request from the dashboard.
Old data is cleared by itself on the schedule you set. A deleted shop’s data has left our backups eight days later.

The measures are part of our data processing agreement. See also our sub-processors and the status page.

Found a weakness? Tell us

Email support@cleverlittlecart.com with “Security report” as the subject: what you found, and how to see it for ourselves. We reply as soon as we can, and tell you when it is fixed.

Test only against a shop of your own, such as a free trial.
Do not look at, change or keep anybody else’s data beyond what shows the problem, and do not slow the service down for others.
Give us time to fix it before you tell anyone else.

We will not act against anyone who keeps to these and reports in good faith.