Built for Trust, Cryptographic Rigor & Privacy
PackFlow EPR is engineered from the ground up to protect merchant credentials, prevent cross-tenant data leakage, and minimize the processing of consumer personal information.
Verified Technical Safeguards
AES-256-GCM Token Encryption
Shopify OAuth offline access tokens are never stored in plaintext. They are encrypted using authenticated AES-256-GCM with distinct 96-bit initialization vectors (IV) and 128-bit authentication tags before persistence in our PostgreSQL database.
Timing-Safe HMAC Verification
All Shopify OAuth callbacks and incoming webhooks are validated against Shopify's shared secret using crypto.timingSafeEqual on raw payload bytes. This eliminates timing-attack vulnerabilities.
Least-Privilege API Scopes
PackFlow requests only the minimum required access permissions: read_products (to import catalog SKUs and packaging dimensions) and read_orders (to aggregate destination country shipping volumes). We never request write permissions to your store, billing modification, or customer communication scopes.
Shopper PII Minimization
PackFlow extracts only non-identifying shipment facts: SKU count, fulfillment line quantities, and destination jurisdiction (e.g. DE). Shopper names, customer email addresses, phone numbers, and physical street addresses are ephemeral during normalization and are never stored in our database.
Multi-Tenant Isolation
Every database query and API operation enforces strict tenant boundary filtering on merchantId. Cryptographic CSRF tokens and signed session cookies prevent unauthorized cross-account state mutations.
Shopify Mandatory Privacy Webhooks
PackFlow fully implements Shopify's mandatory GDPR/privacy webhooks (customers/data_request, customers/redact, and shop/redact), automatically scrubbing all store connection records within 48 hours of app uninstall.
Vulnerability Reporting
If you discover a security issue or vulnerability in PackFlow, please contact our security team at security@geniebhai.in. We review all reports promptly and address legitimate security findings with high priority.