Security

Early-access product. This page will grow as the Shopify app ships.

Where things stand today

Aisle is in early access. The marketing site and its early-access form are live; the Shopify app itself (embedded admin, OAuth, billing) is still in development and not yet published. Nothing on this site processes customer or order data.

What’s designed in, once the app is live

• Read-only catalog access only, no write access to your storefront or theme.
• Shopify session-token authentication on every merchant-facing endpoint, with each shop’s data isolated from every other shop’s.
• All traffic encrypted in transit (HTTPS).
• Shopify’s mandatory data-privacy webhooks (data request, customer redact, shop redact) implemented and verified before submission.

Reporting a concern

If you find a security issue with this site or, once it’s live, the Shopify app, email hello@getaisle.io with details. We’ll acknowledge real reports and won’t take action against a good-faith reporter.