Security
Security
Last updated: July 2026
You’re trusting Sellcast with the numbers your business runs on. Here’s how we access, store, and protect them, and the controls that keep you in charge of every action. For the formal, control-by-control statement (encryption, access, incident response, retention, subprocessors) aligned to Amazon’s Data Protection Policy, see Data protection & security.
Early access, an honest note
Sellcast is in early access. This page describes the practices we build to and the commitments we hold, not a set of certifications we haven’t earned. We follow SOC 2-aligned practices but are not yet certified, and we’ll update this page, and publish a public status page, as we formalize them. If you have a specific security requirement, ask us. We’d rather give you a straight answer than a badge.
Least-privilege access
Sellcast connects to Shopify by OAuth and reads only what planning needs: catalogue, inventory, orders, and discounts. If you connect Brightpearl, the same principle applies. No access is requested that the product doesn’t use.
Minimal customer data
We plan demand, not people. Where a signal can be derived without personal data, it is. We keep the minimum, and we don’t build advertising profiles or resell anything. Customer PII is avoided wherever the forecast doesn’t require it.
Isolated per brand
Every brand’s data lives in its own tenant boundary with role-based access inside your account. Your data is never blended with another store’s to train a shared model against your interests.
You approve every action
Nothing the AI proposes executes on its own. The authority envelope defaults to zero auto-approve, every action runs through one approval door, and every draft, edit, and approval is written to an audit log.
Portable by default
One-click CSV export of your data, whenever you want it. We earn your stay with the product. We never hold your data hostage to keep you.
In transit and at rest
Traffic is served over TLS, and data is stored on managed, encrypted infrastructure. Access to production is limited and logged.
Protected customer data
Shopify’s Protected Customer Data rules exist for good reason, and Sellcast is built to keep well inside them. Demand planning runs on aggregate signals like velocity, seasonality, and discount performance, not individual identities, so we design features to avoid personal data wherever the forecast doesn’t need it. When you disconnect, you can export everything first.
Contact
Questions about a specific data-handling requirement or a security questionnaire? Email security@sellcast.ai and you’ll get a real person.