Security
How Soapbox approaches the protection of customer information used in our order, inventory, and shipping services.
First Published: October 22, 2026
Last Updated: October 22, 2026
Our commitment to customers
Soapbox will maintain reasonable administrative, technical, and physical safeguards designed to protect customer information against unauthorized access, use, disclosure, alteration, and destruction. We will select and review these safeguards in light of the information we handle, the services we provide, and the risks we identify.
These commitments apply to customer information processed through the Soapbox services. They describe our security responsibilities; they are not a guarantee that a service will be free from every security incident.
What we process and why
Soapbox provides order management, inventory management, shipping, and related fulfillment services. Depending on the features and integrations you use, customer information may include account and business contact details; order-recipient names, delivery addresses, phone numbers, and email addresses; product and inventory records; order, shipment, and fulfillment records; and device, usage, and service-log information.
We process this information to provide and support the services, coordinate the orders and shipments you manage, troubleshoot issues, and meet applicable legal obligations. Our Privacy Policy explains personal-information collection, other permitted uses and disclosures, and applicable retention practices.
Access and confidentiality
We will limit access to nonpublic customer information to authorized personnel and service providers with a legitimate business need. We will use access-authorization, review, and removal procedures appropriate to each role and the sensitivity of the information.
We will require personnel and service providers authorized to handle nonpublic customer information to follow appropriate confidentiality and security obligations. We will protect that information in accordance with our commitments to you, applicable law, and the Privacy Policy.
Managing security risks
We will maintain written security policies that assign responsibilities for protecting the services and customer information. We will assess relevant security risks, review identified weaknesses, and prioritize corrective action based on their severity and potential impact.
We will apply change-review and testing procedures appropriate to the change, and maintain backup and recovery arrangements appropriate to the services and information they support. These are commitments to maintain safeguards and processes, not a promise that every system uses the same control or that every recovery will take a specified amount of time.
Responding to security incidents
We will maintain procedures for investigating suspected security incidents and taking appropriate steps to contain, address, and recover from them. Where notification to you is required by applicable law or our agreement with you, we will provide that notification in accordance with those requirements.
Service availability
Visit App Status for current service-status information and published incident updates. A status page is operational information, not a contractual uptime guarantee. This Security page does not establish an uptime percentage, service-credit entitlement, or recovery-time guarantee. Any applicable service-level commitment must be stated in your agreement with Soapbox.
Questions or security concerns
Contact our team with security questions or to report a suspected issue. Do not include passwords, API keys, customer records, or other sensitive details in the general contact form. Ask the team how to provide those details through an appropriate channel.
Related information
Review our Privacy Policy, Terms of Use, and End User License Agreement for the applicable service and data-handling terms. These documents and your agreement with Soapbox should be read together with this page.
* *