Revenue monitoring with the minimum access required.
Revenue Guard isolates every Shopify store, encrypts tokens and treats storefront content and webhooks as untrusted input.
Shopify access
- Shopify session tokens validated on every protected request
- Offline access and refresh tokens encrypted before storage
- Read-only product and order scopes requested for launch
- App uninstall disables monitoring and clears stored Shopify tokens
Tenant isolation and evidence
- Every database query is scoped to a single Shopify store owner key
- Evidence is stored privately and served only after authorization
- Secrets are never returned to the browser
- Webhook HMAC signatures are verified before processing
Monitoring safeguards
- No purchases are completed
- Store themes and advertising accounts are never modified
- Critical incidents require a confirmation run
- Transient infrastructure errors do not automatically become store incidents