Security

Last updated: 1 November 2026

Status: Marginfort is pre-launch (launch planned for early 2027). This page lists the controls the service is being built with. Before launch we will test each one and update this page.

Data protection

• All traffic uses HTTPS (TLS 1.2 or higher).
• Data is encrypted at rest by our hosting and database providers.
• Platform access tokens are stored encrypted and are never shown in the app or in logs.
• We collect only the data each feature needs and delete it on the schedule in our Privacy Policy, following each platform's rules (for example Amazon's Data Protection Policy and Shopify's protected customer data requirements).

Access

• Two-factor authentication on every administrative account, with hardware security keys for the most sensitive ones.
• Least-privilege access: people and systems get only the access their job needs.
• Access to production data is logged.

Reliability

• Daily backups kept for up to 30 days, with restore tests.
• Monitoring and alerts on errors, slowdowns and unusual activity.
• Availability target of 99.9% per month, with service credits as described in our Terms.

Incidents

If a security incident affects your data, we aim to tell you within 24 hours of confirming it, and always without undue delay, with what happened, what data was affected and what we are doing.

Report a vulnerability

Email [email protected]. Please give us reasonable time to fix an issue before sharing it publicly. We will not take action against good-faith research that avoids privacy violations and service disruption.

Marginfort LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA · [email protected]