Data Encryption and Security

What Data Is Encrypted?

Sensitive app-side data can be encrypted at rest depending on your configuration:

App database (entities, settings, rules) – encrypted when enabled
Shopify metafields (product assignments) – stored in Shopify's infrastructure with their security

Why Enable Encryption?

Encryption helps reduce risk if infrastructure or backups are accessed without authorization. It's a best practice when storing sensitive data like contact information for economic operators.

Can I Enable It Later?

Yes. If you enable encryption later, existing data may need to be re-saved or migrated depending on the implementation.

What If I Lose My Encryption Key?

⚠️ Critical: If the encryption key is lost, encrypted data may become unrecoverable. Store your key securely and follow key management best practices.

General Security Measures

All API communication uses HTTPS/TLS
Authentication via Shopify OAuth (no separate passwords)
API keys are scoped with specific permissions
Sessions managed by Shopify's session tokens

Plan requirement: Encryption is available on the Enterprise plan.