Security and data protection

How ConsignLoop protects shops, consignors and buyers:

• Every shop's data is isolated at the database layer; the isolation rules are enforced automatically on every single query and checked again on every deployment.
• Sign-in uses strongly hashed passwords, rate limiting, account lockout and optional authenticator-app two-factor authentication (shops can require it for all staff; platform administration requires it always).
• Two-factor secrets are encrypted at rest; session cookies are signed and expire server-side.
• Card payments are processed by Stripe. Card numbers never touch ConsignLoop servers. Money flows directly to each shop's own Stripe account.
• Consignor balances are calculated from an append-only ledger, so money history cannot be silently edited.
• Sensitive actions (price changes, payouts, refunds, data exports, erasures) are recorded in an audit trail.
• Databases and backups are hosted in the UK/EU.
• No advertising or analytics trackers anywhere: not in the shop admin, not on storefronts.

Found a vulnerability? Email the address on the contact page and we will respond quickly. Please do not test against live shops.