Security Incident Response

Last updated: 21 April 2026

We maintain procedures to detect, assess, contain, investigate, and remediate security incidents affecting the platform, customer data, merchant data, payments, or fulfilment systems. Incidents are triaged by severity and escalated to operational, engineering, and compliance stakeholders.

Where required by law or contract, affected merchants or users will be notified without undue delay once the facts are sufficiently verified. Notifications may include the nature of the incident, affected systems or data categories, containment status, and recommended follow-up steps.