Security
Your customers trusted you. We take that seriously.
What we do to keep your account and your customers’ data safe, in plain words.
How we protect your data
Encrypted in transit
Every connection to Boostly uses HTTPS. The database and cache sit on a private network and can’t be reached from the internet.
Secrets encrypted at rest
Store connection keys and two-factor secrets are encrypted with AES-256-GCM before they are saved.
Two-factor sign-in
Protect your account with an authenticator app and recovery codes, or sign in with Google. Passwords are hashed with argon2.
Accounts kept apart
The database itself keeps each account’s data separate, so one shop’s query can never return another shop’s customers.
Audit log
Sign-ins, password changes, account settings, erasures and suppression changes are recorded, with who made them and when.
Hosted in the EU
Your account and customer data are hosted in Germany and backed up twice a day, and your email is sent from Ireland.
Documents
The paperwork most shops ask for. These are being prepared for launch.
Where your data lives- Data processing agreementThe GDPR terms between your shop and Boostly.In preparation
- Sub-processorsEvery service that handles your data, and where.In preparation
- Status pageLive status and past incidents.In preparation
Questions about security
Do you support single sign-on?
Not yet. You can sign in with Google, or with a password and two-factor authentication.
Can Boostly change anything in my store?
No. On Shopify Boostly has read-only access. On WooCommerce it uses the API key you create.
Safe hands for your list.
Turn on two-factor sign-in from your first day.
14-day free trial with every feature. No card needed.