What security measures protect data transfer?

Security is addressed on several layers. All data transfers are encrypted via TLS. API access is authenticated via OAuth 2.0 or API keys, protected against abuse by rate limiting, and restricted to defined servers via IP whitelisting. Every transaction is logged for audit purposes, so that in case of doubt it remains traceable which record flowed between which systems and when.

The integration services run in German data centers and are subject to GDPR. Personal data, for example from orders, is only retained as long as the processing purpose requires and is not needlessly mirrored in the middleware where it is not needed. The specific access rights and retention periods are aligned with your internal policies. Get in touch via contact to discuss the details.