Features

Your data stays in the EU, and apart

Hosting in Germany, every customer's data separated in the database, sensitive fields encrypted, and the controls your team needs to work safely.

What stands out

Kept apart, kept in the EU

Microsoft Azure in Germany, with row-level security separating every store's data from every other's.

Encrypted where it matters

Credentials and sensitive fields encrypted with keys held in Azure Key Vault, on every plan.

A team with the right keys

Ready-made and custom roles, two-factor sign-in, a view of every session and an activity log of who changed what.

Compliance built in

Legal pages with a readiness check, EU Digital Services Act tools, data-request handling, retention rules and backups you can restore from the admin.

Every feature in this area

Who has it is shown on each item; the full table is on the plans page.

Team & permissions

  • Roles and custom roles

    Owner, admin and editor out of the box, or build a role with exactly the permissions you choose.

    Every plan
  • Two-factor sign-in for staff

    Authenticator-app codes with recovery codes.

    Every plan
  • Session and device management

    See where each team member is signed in and sign out a device remotely.

    Every plan
  • Activity log

    Who changed what, and when, is always on record.

    Every plan
  • Staff single sign-on

    Sign in with your company identity provider.

    Planned · Q1 2027

Security, privacy & compliance

  • Hosted in the EU (Germany)

    Your data stays in Microsoft Azure's Germany region.

    Every plan
  • Each customer's data kept apart

    Row-level security in the database separates every store's data from every other.

    Every plan
  • Field-level encryption of sensitive data

    Credentials and sensitive fields are encrypted with keys held in Azure Key Vault.

    Every plan
  • Backups and restore

    Scheduled backups of your store's content that you can restore from the admin.

    Every plan
  • Bot protection

    reCAPTCHA, hCaptcha or Cloudflare Turnstile on sign-up, sign-in, password reset, contact forms and checkout.

    Every plan
  • Content security policy and security headers

    Only the scripts you allow run on your site, and violations are reported.

    Every plan
  • EU Digital Services Act tools

    Trader identity details and a notice-and-action channel for reporting illegal content.

    Every plan
  • Personal data access and erasure requests

    Requests to see or delete a person's data are handled by our team on your behalf.

    Every plan
  • Data retention rules

    Old logs and personal data are removed on a schedule, so you keep only what you need.

    Every plan

Explore other areas

See it on your own content

Tell us what you are building and we will show you these features on a preview of your site.