Security

Encryption and credentials

Hosted access uses HTTPS. Stored connection credentials use AES-256-GCM encryption. Passwords are stored as salted scrypt hashes; API tokens are stored as hashes. Database encryption and recovery settings depend on the deployed hosting configuration.

Access control

Business records are scoped to an inventory and account. Team permissions, API scopes, plan checks, and approval rules limit operations. Stock movements and posted journal entries retain their history.

Backups and recovery

Database recovery uses the hosting provider's configured backup facilities. Contact support for the retention period and latest restore-test evidence for your deployment; this page does not certify a recovery time.

Availability and data location

See service status for a current web and database check. A measured uptime SLA is not published here. Deployment region and third-party processing locations must be confirmed for your account before agreeing to a residency requirement.

SOC 2

StockChief does not claim SOC 2 certification or an available SOC 2 report on this page. Independent audit scope and completion dates have not been published. Ask support for current security evidence and contractual requirements.

Privacy notice · Approvals and controls · Security questions