Security at StoreFleet

An admin can switch on two-factor sign-in for the whole workspace. From then on, every member who has not set it up is asked to at their next sign-in, with an authenticator app and one-time recovery codes.

• One workspace-wide setting, not a choice each person makes
• Turning the setting on or off is written to the audit log

Every member is an admin, a manager or staff. Admins invite, edit and remove members and read the audit log. Admins and managers can approve changes set to Approval required; only admins can approve Admin-only changes. Staff can be limited to the screens and the shops you choose.

• Admins and managers see every screen; staff see only the screens granted to them
• A staff member with no shop assigned can see every shop, so assign at least one

Sign-ins and failed sign-ins, password changes, invitations, role, screen and shop changes and other sensitive actions are recorded, newest first. Only admins can read the log.

In the web dashboard, refunds, cancellations, payment captures, inventory levels, discounts and product tags go through approval, and each kind of change has a level in Approval Settings: Auto, Approval required, or Admin only. An admin or manager can approve a change set to Approval required; only a member with the Admin role can approve an Admin-only one. Other edits, such as editing a customer or a page, apply when the person makes them, unless they are Admin-only, such as merging customers, customer store credit or updating store policies. A pending change shows a before-and-after and how many objects it touches, and it is flagged when it cannot be undone. Nothing in it is written until someone approves it.

• Refunds, cancellations and payment captures are always Admin-only, and the level cannot be relaxed
• AI tools connected through MCP and StoreFleet Agent follow the same levels as a person, so refunds, cancellations and captures from AI wait for an Admin
• Inventory levels and discounts need approval by default; low-risk changes such as product tags apply automatically by default
• Levels can be set for each shop in Approval Settings
• In the app inside Shopify admin, most changes apply when you press the button, as they would in Shopify admin itself; Admin-only actions are sent to Approvals in the web dashboard once your workspace has an Admin

Alerts sent to Discord and Telegram carry a fixed set of fields: order number, total, currency, shop name, status, tracking number, carrier and a reason. A buyer’s name, email and address are not among them, and any field outside that list is rejected.

If you have found a security problem, write to hello@reply.getstorefleet.com. The same contact is published in our security.txt.