EcomBot Docs

Security & SaaS Architecture

Discover how EcomBot ensures the isolation of your data, the security of your e-commerce infrastructure, and its GDPR compliance.

For e-commerce merchants generating significant transaction volumes, the reliability and security of their infrastructure are non-negotiable. EcomBot was designed from day one as a secure, enterprise-grade SaaS application.

Multi-Tenancy Architecture & Isolation

Our infrastructure is built on a strict multi-tenancy architecture.

  • Data Isolation (RLS): Every EcomBot project is securely isolated. Using Row Level Security (RLS) rules enforced directly at the PostgreSQL database level, it is mathematically impossible for one client's data (catalog, conversations) to be accessed by another.
  • Catalog Protection: We only store the public metadata necessary for selling (name, price, image, URL, description). No sensitive data regarding your margins or supplier network is ever ingested by the AI.

Authentication Security

Access to your EcomBot dashboard is protected by the latest security standards:

  • Server-Side Rendering (SSR) Authentication.
  • Automatic and secure session token renewal.
  • Route protection middleware preventing unauthorized access to your store's metrics.

GDPR Compliance & Privacy

EcomBot strictly adheres to GDPR requirements regarding your visitors' data:

  1. Contact Forms: The interface natively integrates consent management with mandatory checkboxes required before transmitting any personal data via the widget.
  2. Silent Tracking & Identity Resolution: The identity capture system (which recognizes your customers during checkout) operates Server-to-Server. It does not rely on invasive third-party advertising cookies.
  3. Total Control: You have the ability to permanently delete any conversation history and its associated data directly from your administrative interface.