ScribeSEO AI Trust Center
How we protect your data and maintain platform security.
Compliance
GDPR & CCPA Ready
Full compliance with global privacy regulations. View DPA.
Shopify Partner
Officially verified Shopify Partner following API security guidelines.
SOC 2 Compliance (In Progress)
We are actively working toward SOC 2 Type II certification. Contact us for our current security posture documentation.
Infrastructure
Hosting & Data Residency
Hosted on AWS. Data residency options available for US and EU Enterprise customers.
Data Encryption
AES-256 encryption at rest. TLS 1.3 encryption in transit across all endpoints.
Uptime & Reliability
Multi-AZ database replication with redundant infrastructure.
Access & Permissions
We operate on a principle of least privilege. Our Shopify App only requests access to:
- •
read_products— To analyze existing SEO gaps. - •
write_products— To publish your approved optimizations.
Zero Auto-Publishing: ScribeSEO AI never modifies your live store without your explicit click-to-publish approval.
Security Practices
Vulnerability Disclosure
Contact security@scribeseoai.com to report security issues.
Data Processing
AI providers (OpenAI, Groq) are contractually bound to zero data retention for API processing.
Authorized Subprocessors
| Entity | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud Infrastructure & Hosting | United States / EU |
| OpenAI, LLC | LLM Processing (Zero data retention) | United States |
| Supabase, Inc | Database Hosting | United States / EU |
| Stripe, Inc | Payment Processing | United States |