Hosted in the European Union
Geosort application data is hosted on Amazon Web Services in Ireland.
Security & compliance.
Built into Geosort.
Understand how we protect merchant data and operate Geosort. Give your security and procurement teams a clear starting point for their review.
Security & ComplianceSecurity, at a glance
Documented controls for your Shopify operations.
- EU hosting
- AWS · Ireland
- Encrypted data
- In transit and at rest
- Controlled access
- Individual accounts · two factors
- Documented response
- Monitoring · incident management
Protection across the way we work.
Security is part of how Geosort handles data, grants access and ships changes.
Encryption in transit and at rest
TLS 1.2 or higher protects external connections and database traffic. Database and file storage use AES-256 encryption.
Individual, limited access
Geosort staff use individual accounts with mandatory two-factor authentication. Access follows the needs of each role.
Your Shopify identity
Merchants open Geosort through Shopify admin. Your Shopify sign-in rules apply, with additional roles inside Geosort.
Monitoring and secure changes
Threat monitoring, vulnerability scanning and audit logging support operations. Code changes go through pull requests and automated checks.
Backups and continuity
Daily database backups and infrastructure across two availability zones support recovery and service continuity.
Data with a defined purpose.
You stay in control.
Geosort uses catalog, performance and storefront signals to improve merchandising. Our privacy policy explains the data involved, service providers and retention periods.
Catalog and performance
Products, collections, inventory, sorting settings and sales figures by product and country.
Storefront activity
Views, clicks, cart and checkout events use random session identifiers. Shopper names, postal addresses, phone numbers and payment details are not stored.
Optional integrations
When you enable Klaviyo or Braze feeds, shopper emails are passed to your own account; Geosort retains a keyed hash and profile ID, not the email itself. Wishlist personalisation can use a Shopify customer ID.
Retention and deletion
Defined retention limits apply to activity and reporting data. Store deletion follows Shopify’s privacy webhooks after uninstall; you can also request deletion in writing.
A documented response
when it matters.
Our Incident Response Plan defines ownership, investigation, containment and customer communication. It provides for notifying affected customers within 72 hours of confirming an incident affecting their data, while informing merchants without undue delay where we act as their processor.
Questions from your security team.
The essentials for reviewing Geosort as a technology provider. For a questionnaire or a deeper technical review, contact our team.
The detail your
review team needs.
Review our public overview, then request the supporting documents for your security, legal or procurement assessment.
Information Security Policy
Governance, staff access, data protection, secure development, service providers and retention.
Available on requestSecurity Architecture
Application components, data flows, authentication, encryption and operational controls.
Available on requestIncident Response Plan
Incident ownership, response stages, customer notification and follow-up review.
Available on requestRequest the security pack
Share your company, store domain and review requirements. Our team will coordinate access to the relevant documents.
Full policies and architecture details are shared directly for vendor due diligence. They are not available as public downloads.