How we protect your data

All data is encrypted at rest (AES-256, managed PostgreSQL via Supabase) and in transit (TLS 1.2+). Application credentials — including your payment processor API keys — receive an additional layer of application-level envelope encryption.

Every merchant's data is isolated by PostgreSQL Row-Level Security scoped to your account. No query can cross the merchant boundary at the database level — isolation is structural, not application-level filtering.

Every webhook from Shopify, Stripe, PayPal and Braintree is verified with HMAC signatures before processing. Unverified payloads are rejected — no exceptions.

Order and dispute details are processed by AI inference providers (Anthropic Claude, Google Gemini, via OpenRouter) to generate draft dispute responses. Your data is never used for model training. Every generated draft is reviewed by you before any submission to a card network.

Deletion requests are processed automatically: uninstalling the app, or a shop/redact or customers/redact request from Shopify triggers permanent deletion of dispute records, evidence files, generated documents and associated telemetry. Deletion events are audited. You can also request deletion at any time via [email protected].

Application hosted on Vercel; database hosted on Supabase (AWS, us-east-2). Rate limiting is enforced on authentication and AI generation endpoints. Daily automated database backups are retained by the platform with encryption at rest; the full schema is version-controlled, enabling point-in-time rebuild.

ChargeGuard does not currently hold SOC 2 or ISO 27001 certifications. Security controls in place include the measures described on this page, a written security and incident response policy with 72-hour breach notification commitment, and a complete subprocessor disclosure. Certification is planned as part of the enterprise scaling roadmap.