Questions · Security and data
Where does our data live, and who controls it?
Every tenant is isolated at the catalog, pricing, customer, theme, cache and domain level; a dedicated per-customer database tier is designed, not yet shipped. The partner running the store is the data controller; Brandfora is the processor.
Theming, catalog, pricing, customers, cache keys, domains and certificates are all per tenant, with a per-tenant edge cache and surgical purge. TOTP MFA covers every admin surface and per-store OIDC SSO plugs into your own identity provider. The data processing addendum sets out the roles.
Read next