At a glance
- Data is encrypted in transit and at rest, and each seller's data is separate.
- Security incidents are reported to Amazon within 24 hours.
- Data is kept only as long as needed, then deleted securely.
1Security controls
- Data is encrypted in transit and at rest.
- Each seller's data is logically separated, and access is limited to staff who need it to deliver the service.
- Amazon access is obtained only through Amazon's official authorisation flows. We do not store Amazon passwords.
- SellerGrid is hosted on Amazon Web Services (AWS).
2Incident reporting
Any security incident involving Amazon or client data is reported to Amazon within 24 hours of detection. Affected clients are informed without undue delay.
- Immediate containment, including revoking unauthorised access.
- Assessment of the affected data.
- Preventive measures to stop recurrence.
3Data retention
- Client data is stored only as long as necessary to provide the services.
- Data is deleted securely when it is no longer required, or when a client disconnects and requests deletion.
4Compliance
All procedures are designed to comply with Amazon Solution Provider requirements, including the Amazon Selling Partner API Data Protection Policy and Acceptable Use Policy, and applicable data protection laws.
5Contact
Security or data questions: info@druza.net.
Questions about our policies?
Email or WhatsApp us and we will answer.