Security at MercantileOS

Your data security is our top priority. Here's how we protect it.

Encryption at Rest & Transit

All data is encrypted using AES-256 at rest and TLS 1.3 in transit. Your sensitive information is never stored in plain text.

PCI DSS Compliance

We maintain PCI DSS compliance for payment processing. Card data is handled by certified payment processors.

Two-Factor Authentication

Protect your account with 2FA using authenticator apps or SMS verification.

Automated Backups

Your data is automatically backed up daily with point-in-time recovery capabilities.

DDoS Protection

Enterprise-grade DDoS mitigation protects your store from malicious traffic and attacks.

Regular Audits

We conduct regular security audits and penetration testing to identify and address vulnerabilities.

Infrastructure Security

Cloud Infrastructure

Hosted on industry-leading cloud providers with SOC 2 Type II certification.

Network Isolation

Multi-tenant architecture with strict network isolation between customer environments.

Access Controls

Role-based access control (RBAC) and principle of least privilege for all systems.

Monitoring & Logging

24/7 monitoring with comprehensive logging and alerting for security events.

Report a Vulnerability

Found a security issue? We appreciate responsible disclosure.

security@mercantileos.com