SECURITY

Security at ITG

Security overview for merchants and platform reviewers

Access controls

Access requires authentication and is limited by staff role, organization, workspace, and assigned client. Administrative actions and sensitive commercial settings are restricted to authorized roles.

Encryption and credentials

Network traffic uses encrypted HTTPS connections. Commerce-platform access credentials are encrypted at rest, are never displayed to portal users, and can be revoked by disconnecting a store.

Monitoring and audit records

Operational and administrative actions are recorded with actor, organization, and timestamp context to support investigation and accountability.

Data minimization and deletion

ITG requests only the data needed to route orders, manage inventory, and complete fulfillment. Verified commerce-platform access and deletion requests are processed through signed privacy webhooks. Customer information is redacted and disconnected-store credentials are removed, subject to lawful retention obligations.

Incident response

Suspected incidents are triaged, contained, investigated using available audit evidence, and remediated. Affected merchants and authorities are notified when required by applicable law.

Report a concern

Send security or privacy reports to info@itgfulfillment.com. Include the affected store or account and a concise description, but do not email passwords or access tokens.