Encryption
BackupMaster encrypts your data at every stage:- In transit: Data transferred between your Shopify store and BackupMaster uses the latest recommended secure cipher suites and TLS (Transport Layer Security) protocols.
- At rest: Backup data stored on Microsoft Azure servers is encrypted with AES-256.
Microsoft Azure infrastructure
BackupMaster’s infrastructure and your data are hosted on Microsoft Azure in the South East US region. Azure data centers meet industry standards including ISO/IEC 27001:2013 and NIST SP 800-53. Microsoft operations staff maintain, monitor, and administer these facilities 24/7. Azure provides built-in redundancy and high availability, so your backups remain safe during temporary service interruptions.SOC 2 certification
BackupMaster is SOC 2 certified. An independent auditor verifies that BackupMaster’s security controls meet AICPA standards for data security, availability, and confidentiality. We maintain compliance through continuous monitoring and an annual audit. For more details, see SOC 2 certification.Access controls
- BackupMaster connects to your store through the Shopify API using OAuth tokens granted during installation.
- Any staff member with app access in your Shopify admin can open BackupMaster.
- Shopify’s app permissions determine access within the app.
- The external portal uses a separate password and email verification.
Internal controls
BackupMaster enforces internal policies and processes that safeguard data, protect assets, and restrict access to sensitive systems and infrastructure. Access to customer data and production systems is limited to key staff and granted on a need-to-know basis. All access is logged.How BackupMaster processes your data
- The app reads your store data through the Shopify API to create backups.
- It writes to your store only when you explicitly run a restore, clone, or import.
- Your data is never sold, shared, or used for any purpose beyond the backup service.
- No code is injected into your storefront.