Security

What Emdepo can touch in your store, and how.

Read this before you grant write access. It says what Emdepo reads, what it can change, how a change reaches your store, and what leaves it.

  • Approval before every change
  • Undo for 24 hours
  • No customer records

What Emdepo can access

The access Emdepo asks Shopify for, in plain words. You see the same list on Shopify's install screen before you approve it.

DataWhat Emdepo does with itAccess
ProductsReads titles, descriptions, images and alt text. Writes only the changes you approve.Read and write
InventoryReads available quantities, to find active products at or below zero.Read
OrdersReads orders for analysis, counted per product over a window.Read

Emdepo does not read customer records.

It does not ask Shopify for customer names, emails or addresses. The access it asks for beyond the three rows above: To be confirmed before launch.

How changes reach your store

Five steps, the same for every change. Nothing skips one.

  1. 01 · PreviewEvery change is prepared as an action. You see the current and the proposed version side by side.
  2. 02 · ApprovalNothing is written to your store until you approve the action.
  3. 03 · VerificationAfter writing, Emdepo reads the product back from Shopify and checks that it matches what you approved.
  4. 04 · 24-hour undoEvery published change can be undone for 24 hours. Emdepo keeps what was there before.
  5. 05 · Audit logEach approval, write and undo is recorded with who did it and when.
Actions3 prepared
Candle in green glass
Update descriptionCandle in green glass · 2 credits
PublishedUndo for 23:59:59
Leather satchel
Replace gallery · 6 imagesLeather satchel · 55 credits
Needs you
Amber serum bottle
Add alt text · 4 imagesAmber serum bottle · 2 credits
Ready

Workspace isolation

Your store, your members and your runs live in one workspace.

  • SeparationData is separated per workspace. A member of one workspace cannot see another workspace.
  • Store credentialsThe credentials Shopify issues to Emdepo for your store are encrypted at rest.

AI and your data

What leaves Emdepo for an AI provider, and what never does. You never choose a model.

Sent to AI providers
  • Product photos
  • Product text
Not sent
  • Customer data

You never choose a model. Emdepo decides which provider handles each task, and the list of providers is published here before launch.

Subprocessors
ProviderPurposeData sentRegion
To be confirmed before launchAI provider, imagesTo be confirmed before launchTo be confirmed before launch
To be confirmed before launchAI provider, textTo be confirmed before launchTo be confirmed before launch
To be confirmed before launchHosting and databaseTo be confirmed before launchTo be confirmed before launch
To be confirmed before launchEmail deliveryTo be confirmed before launchTo be confirmed before launch

Where data lives and for how long

Regions and retention periods are published here before launch.

  • RegionTo be confirmed before launch.
  • Photos and outputsKept in your workspace. Retention period to be confirmed before launch.
  • Undo copiesWhat was in your store before a change is kept for the 24-hour undo window.
  • Order historyTo be confirmed before launch.
  • After you uninstallDeletion schedule to be confirmed before launch.

Reporting a security issue

Write to security@emdepo.com with what you found and the steps to reproduce it.

Please do not test against stores that are not your own.

Waitlist

Give it a few photos. Keep the last word.

Join the waitlist. We write when your workspace is ready.

Email only. No store address needed.