Tracewall holds commercially sensitive information — your product catalog, your MAP values, and evidence you may rely on in a dispute. This page describes how that data is handled, in enough detail to answer a standard security review.
1. Data we hold
- Configuration — products, MAP values, authorized-seller lists, promotion windows.
- Observations — public marketplace listing data: seller aliases, prices, timestamps, listing images.
- Evidence — immutable observation records with SHA-256 digests, and generated reports and notices.
- Account — names, work emails, password hashes (Argon2id — we never store passwords).
We do not process cardholder data. Payments are handled by Paddle as merchant of record; card details never reach our systems.
2. Encryption
All traffic is served over TLS 1.2+ with HSTS. Data is encrypted at rest by our database and object-storage providers. Credentials we hold on your behalf — such as a Shopify access token — are stored write-only at the application layer and are never returned by any API response.
3. Tenant isolation
Every record carries an account identifier, and every query is scoped to the authenticated account. There is no endpoint that returns another tenant's products, prices, violations, evidence or reports. The single exception is the opt-in Seller Intelligence Network described below, which by design carries no commercial data at all.
4. Access control
- Authentication uses short-lived access tokens with rotating refresh tokens in HTTP-only cookies.
- Roles are least-privilege; administrative provisioning requires a separate internal token.
- Public endpoints (shared reports, the instant audit) are rate-limited and carry no account data.
- Shared report links are unguessable tokens and are marked
noindex.
5. Shared intelligence — privacy by design
The Seller Intelligence Network is off by default and requires explicit opt-in. When enabled it shares only a seller's own behaviour: their normalized marketplace handle, the marketplaces they appeared on, whether the finding was below-MAP or unauthorized, and when they were last seen.
It never carries your brand identity, product names, prices or MAP values, and participants see counts rather than who reported what. A seller is only surfaced once at least two participating brands have independently flagged them, so no single participant's data can be inferred from a result. See the Privacy Policy for the full terms.
6. Evidence integrity
Evidence records are append-only and are never modified after capture; the data layer rejects updates to them. Each observation carries a SHA-256 digest computed over the seller, price, listing URL, capture time and image bytes, so any later alteration is detectable — and a record that fails verification is marked as altered in the exported pack rather than presented as sound.
7. Retention and deletion
Evidence is retained long-term because that is the value you rely on; we do not auto-purge it. Bulk observations may be aggregated over time. On request or account closure we make your data available for export and then delete it, except where we must retain records to meet a legal obligation. Withdrawing from the intelligence network stops further contribution immediately.
8. Third parties
We use cloud hosting and managed database providers, an object-storage provider, a transactional email provider, Paddle for payments, and licensed marketplace-data providers to acquire public listing data. Analytics run only with your consent. We do not sell data, and we do not share your monitoring data with other customers outside the opt-in network above.
9. What we have not done yet
We would rather tell you this than have you discover it during a review:
- We do not currently hold a SOC 2 Type II report or an ISO 27001 certificate.
- We have not yet commissioned an independent penetration test; a summary will be published here when we do.
- We do not currently offer SSO/SAML outside Enterprise arrangements.
- We are a small team, so we do not offer a 24/7 on-call security contact.
If your procurement process requires any of the above, contact us before purchasing and we will tell you honestly whether and when we can meet it.
10. Reporting a vulnerability
Email security@tracewall.app. We will acknowledge within two business days. Please give us a reasonable window to fix an issue before disclosing it, and do not access, modify or exfiltrate data belonging to any brand while testing.
11. Contact
Security questionnaires and diligence requests: security@tracewall.app.