Trust Center
Trust you can check.
Claims we can back.
The Verdikx Trust Center collects how we protect merchant and customer data: security practices, data processing terms, the DPA, subprocessors, privacy rights and accessibility. Our compliance posture, stated plainly: we hold no security certifications today, SOC 2 is on our roadmap, and summaries of our written security policies are available to customers on request.
Security
How the product protects your store's data and your customers' data, and how to reach us.
Security practices
Encryption, tenant isolation, least-privilege Shopify access, card data, logging and incident response.
DisclosureReport a vulnerability
How to report a security issue, what we commit to, and our security.txt.
StatusSystem status
Checks of the app, database, email and Shopify connectivity, run at most once a minute, with the time of the last check.
Privacy
What we collect, why, and the choices you have.
Compliance posture
- No security certifications today. SOC 2 is on our compliance roadmap; we will not say we hold it, or show its badge, until an independent auditor has issued a report.
- No PCI DSS certification claimed. Full card numbers never reach Verdikx: we work with the card brand, BIN and last four digits, and subscription payments run on Shopify Billing or Stripe's hosted pages.
- Written security policies cover information security, access control, incident response, data retention, vendor management, business continuity and acceptable use. Summaries and security questionnaires are available to customers on request.
- GDPR: our Data Processing Addendum sets out our processor commitments under Article 28, with the Standard Contractual Clauses, and personal data breaches are notified to affected merchants within 72 hours of our becoming aware.
- Shopify: the app answers Shopify's mandatory privacy webhooks (customer data requests and redaction, shop redaction) and asks only for the access it uses.
Legal documents
- Terms of Service
- Acceptable Use Policy
- Privacy Policy
- California privacy notice
- Your privacy choices and cookies
- Data processing: how we process your customers' data on your behalf
- Data Processing Addendum (DPA): our GDPR Article 28 terms, with the Standard Contractual Clauses
- Subprocessors: every provider that processes personal data for Verdikx
- Accessibility statement
Stop the next chargeback before it starts.
Install on Shopify in minutes, or sign up by card on any other platform, then connect your processors, helpdesk and carriers. Free 7-day trial on every plan.