Black Friday salejusqu'à 60% de réduction
  • 60% de réduction sur votre première année d'abonnement annuel
  • 45% de réduction sur les licences à vie
Se termine dans
Profiter de l'offre
Security and privacy

Your data stays on your server.Protected in six layers.

Keep the main database on infrastructure you control. Use roles, secure connections and audit history for supported actions. Connected payment, email and AI providers process the data needed to deliver their services.

Talk to us about securityRead the privacy policy
Self-hostedPasskeys and two-factor sign-inPermission check on every routeVerified backups
Animated security layers: a sign-in from an unknown device is blocked at identity, then an approved request passes network, identity, permission, data, AI and recovery checks
Every request passes six layers before it reaches your data
Watch the film

Your data stays home.

Where does your customer data live? With Store Console, on your own server. Six layers on every request.

Store Console · Your data stays home0:36
A short narrated film. Your entire business in one console.
6Security layers on every request
0Copies of your business data with us
SHA-256Check on every backup snapshot
1 clickSafe update with automatic roll back
How we protect it

Privacy by architecture, security by default.

Review the controls available in your installation and configure them for your business. Your team remains responsible for server security, access management, backups and connected providers.

Privacy

Your data stays home. You choose what leaves.

Customers, orders, the ledger, payroll, files and backups live on your server. Outside services are optional, connected by you, and each receives only what its job needs.

  • Payment gateways see a payment only at checkout
  • Couriers see only the shipment you book
  • AI providers use your own keys and see only what a task needs
  • The license check sends your license key, domain and version, nothing else
  • Marketing pixels load only after a visitor accepts cookies, when consent is required
Records stay on your server; a payment, a parcel, an email, a question and the license check each send only what their job needs, and a request to copy customer data is blocked
Six layers

Every request is checked, every time.

From the network edge to recovery, each layer has one job. Together they keep the wrong people out and give the right people exactly the access they need.

  • Network: TLS everywhere, rate limits on sign-in, forms and APIs
  • Identity: passkeys, two-factor sign-in and sessions each user can see and end
  • Permissions: every admin screen and action checks a named permission
  • Data: payment, courier and AI credentials encrypted at rest, signed links for downloads and tracking
  • AI: assistants act with the signed-in person’s permissions and wait for approval
  • Recovery: scheduled snapshots verified with SHA-256
Safe updates

Security fixes arrive weekly and land safely.

A new release ships every week. It installs with one click after a safety snapshot, is health-checked beside the live site, and rolls back on its own if anything fails.

A one-click update: safety snapshot, signed release, built beside the live site, migrations checked, health check and switch, with automatic roll back on failure
What it means for your business

Security that pays for itself.

Restrict access to business records, review important changes and test recovery before you need it. Compliance depends on your business, configuration and operating practices.

You own every relationship

Customer data never sits in a vendor’s database. Change hosts or providers whenever you like.

Data in the country you choose

Host where your customers and your regulations are. Data residency is your decision.

Fewer people, less risk

Roles built from named permissions mean each person sees only the work they do.

Ready for audits

Admin changes are logged, and manufacturing records carry e-signatures and a tamper-evident audit chain.

Back in business fast

Verified snapshots and one-click restore turn a bad day into a short one.

AI you can trust

Assistants never act beyond the user’s permissions, and nothing is written until a person approves.

Controls at a glance

Controls you can configure and verify.

TLS on every request
Rate limits on sign-in, forms and APIs
Passkeys and two-factor sign-in
Active sessions each user can end
Permission check on every admin route
Role-scoped API tokens
Payment, courier and AI credentials encrypted
Signed download and tracking links
Activity log of admin changes
Spam protection on public forms
Cookie consent before marketing pixels
SHA-256 verified backup snapshots
Security questions

What security teams ask us.

Does Store Console send our data anywhere?

No. Your records stay on your server. Services you connect yourself, such as a payment gateway, courier or AI provider, receive only what their job needs, and the license check sends only your license key, domain and version.

Who can see what?

You decide. Roles are built from named permissions, every admin route checks them, and API tokens carry the same role limits.

How are backups protected?

The Snapshot module schedules database and file backups, verifies each one with SHA-256, keeps them as long as you choose, and takes a safety snapshot before any update or restore.

What does the AI see and do?

Assistants work with the signed-in person’s permissions and your own AI keys. They can read what that person may read, and any change waits for a human to approve it.

How are security fixes delivered?

In the weekly release. You install it from the admin panel with one click; a safety snapshot comes first and the update rolls back on its own if anything fails.

Can we keep data in our own country?

Yes. Store Console runs wherever you host it, so your data stays in the country and data center you choose.

Own your data from day one.

Install it on your own server, or talk to us about your security requirements.

Build your planTalk to us