Encryption everywhere
TLS 1.2+ for data in transit and AES-256 for data at rest, including database storage and backups. Integration tokens are held in a dedicated secret store.
Least-privilege access
Role-based permissions across 290+ actions. Staff access to production is restricted, MFA-protected, and logged.
UK / EU hosting
Data is hosted in UK and EU data centres operated to recognised security standards, with network isolation and DDoS protection.
Audit logging
Every meaningful change is recorded. Account owners can see who edited, moved, or deleted what, and when.
Backups & recovery
Automated, encrypted backups with tested restore procedures so your data survives the unexpected.
Authentication
Two-factor authentication, SSO options for larger teams, IP allowlisting, and session controls.
Amazon data handling
SP-API data is accessed only on your authorisation, never shared or aggregated across sellers, and deleted on disconnection. See our Data Protection statement.
Incident response
A defined process for detecting, containing, and notifying on security incidents in line with UK GDPR and the Amazon Data Protection Policy.
Compliance
Built to align with UK GDPR, the Amazon Acceptable Use & Data Protection Policies, and the Solution Provider Agreement.
Reporting a vulnerability
We welcome responsible disclosure.
If you believe you have found a security issue in Zobook, please email [email protected] with details so we can investigate. We aim to acknowledge reports within two working days and ask that you give us a reasonable opportunity to remediate before any public disclosure.
Questions about security?
Larger teams can request our security overview, sub-processor list, and Data Processing Agreement.
Talk to us