Privacy-safe monitoring
TraceLayer focuses on storefront behavior, configuration changes, request health, and security signals. Sensitive shopper inputs such as passwords and payment card details are excluded from monitoring by design.
Protection across the data lifecycle
- Encryption is used for data in transit and at rest.
- Access is limited by role and reviewed as responsibilities change.
- Production systems are monitored for suspicious activity and service health.
- Backups and recovery procedures support operational resilience.
Secure product development
Security is considered during product design, code review, deployment, and ongoing operation. Dependencies and infrastructure are evaluated for known risks, and changes move through controlled release processes.
Incident response
We maintain procedures to investigate, contain, remediate, and learn from security events. If an incident affects customer information, we notify impacted customers as required by applicable law and provide practical guidance.
Customer responsibilities
- Use unique credentials and restrict workspace access to authorized teammates.
- Remove access promptly when a teammate changes roles or leaves.
- Keep browsers, extensions, and connected commerce platforms up to date.
- Report suspected vulnerabilities or unauthorized activity through our Contact page.
Responsible disclosure
If you believe you found a vulnerability, please provide a clear description, affected area, reproduction steps, and potential impact through our Contact page. Do not access data that is not yours or disrupt the service while researching.