Hosting
The service, database and backups run at Hetzner in Falkenstein, Germany. Uptime monitoring runs in Helsinki, Finland, and processes no personal data.
Encryption
- In transit: TLS 1.2 or newer with HSTS on every endpoint.
- At rest: disk encryption, plus application-level envelope encryption of credentials and AI keys.
Tenant isolation
Every store's data is scoped by store, enforced by row-level security in the database as well as in the application.
Access control
- Multi-factor authentication for all COEC staff.
- Support access to your store only when you grant it, for a limited time.
- Every operator action is audited.
AI safety
- Prices and stock come only from your store's data, never from the model's text.
- Actions such as cancellations need the shopper's confirmation.
- Imported content is scanned for prompt injection, and the red-team test suite runs in CI on every release.
Logging
Logs contain no message content and no personal data. Client IP addresses are removed from our web logs.
Backups
Encrypted backups in two locations, kept for 30 days, with a monthly restore drill.
Incidents
We notify affected merchants without undue delay and within 48 hours of becoming aware of a personal-data breach, then update them as we learn more.
Responsible disclosure
Report vulnerabilities to security@coec.dk. Read the disclosure policy and our security.txt.
Penetration testing
Planned: an external penetration test in Q1 2027.