Built to be trusted with retail's most sensitive data.
The platform earns trust by default encrypted, audited, and operated by a team that takes the mission of protecting your data as seriously as you do.
Compliance
Questions about how we handle your data? Contact us below and we will share the details.
How we protect your data
Encryption everywhere
TLS 1.2+ in transit. AES-256 at rest. Customer-managed keys for Enterprise.
Least-privilege by default
Role-based access, full access logs, and SSO on the Enterprise plan.
Resilient infrastructure
Multi-region with isolated tenancy, regular DR exercises, and audited change management.
Continuous assurance
Independent audits, vulnerability scanning, and a coordinated disclosure program.
A snapshot of how we run
Hosting
Stappli runs on hyperscaler infrastructure with multi-region deployments. Data residency options are available on the Enterprise plan.
Operational practice
Production access requires SSO and hardware keys. Changes follow peer-reviewed deployment with automated rollbacks and monitored health checks.
Vulnerability disclosure
We welcome responsible disclosure of security vulnerabilities. Email contact@stappli.com and we will acknowledge within two business days.