How the beta protects access

Authenticated routes require a signed-in Supabase user. Administrative actions additionally require the application's admin role, and store queries are scoped to the signed-in user.

Server-side integration secrets are encrypted before storage. Service-role credentials remain server-only and must never be committed or exposed in browser code.

Connections can be removed from Integrations. Destructive workspace actions use confirmation prompts. Future Shopify inventory ownership will be explicitly enabled per store.

No external security certification or independent audit is claimed for the private beta. A formal review is required before broader launch.