Trust Center

Overview

Welcome to Stord's Security Portal. Our goal at Stord is to align overall business objectives with the information security program to create a holistic strategy focused on protecting the security of Stord's client's data, personnel, information systems, and information assets.

Use this portal to learn about our security posture and request access to our security documentation.

Compliance

• CCPA
• EU-US DPF
• GDPR
• SOC 2
• SOC 3

Documents

• DOCUMENTSGMP Certifications (NSF/ANSI 455-2)
• REPORTSPentest Report
• COMPLIANCESOC 2
• COMPLIANCESOC 3

Risk Profile

• Impact Level Substantial
• Third Party Dependence Yes
• Hosting Major Cloud Provider

Product Security

• Audit Logging
• Data Security
• Integrations

Reports

• Network Diagram
• Other Reports

Data Security

• Access Monitoring
• Data Backups
• Data Erasure

App Security

• Code Analysis
• Credential Management
• Runtime Application Self Protection

Legal

• Subprocessors
• Cyber Insurance
• Data Processing Agreement

Data Privacy

• Cookies
• Data Breach Notifications
• Data Privacy Officer

Access Control

• Data Access
• Logging
• Password Security

Endpoint Security

• Disk Encryption
• Endpoint Detection & Response
• Mobile Device Management

Network Security

• Data Loss Prevention
• Firewall
• Spoofing Protection

Corporate Security

• Asset Management Practices
• Email Protection
• Employee Training

Policies

• Acceptable Use Policy
• Access Control Policy
• Anti-Malicious Software Policy

Security Grades

• ImmuniWeb A
• Qualys SSL Labs A+
• Security Headers A

Trust Center Updates

Sub-processor Change Notification

As a Stord customer, nothing is more important to us than your success and the privacy of your data. This email is to notify you that Stord is making changes to our third-party sub-processors, effective June 8, 2026.

Sub-processors being removed: Boomi, Celigo

Sub-processors being added: Anthropic, Omni Analytics, OpenAI

What This Means for You: There will be no immediate impact on your services, and no action is required on your part.

If you have concerns about any of the new sub-processors listed above, please contact us at privacy@stord.com.

Privacy Policy Update

Stord has updated its Privacy Policy effective April 1, 2026. The updates reflect how we collect and use data through analytics features on merchant storefronts, including the Stord Web Pixel. These changes apply only to merchants who opt in to the Stord Web Pixel.

Privacy Policy Update

We have updated our Privacy Policy as of January 8, 2025, in part of Stord's participation in the EU-U.S. Data Privacy Framework (DPF). To learn more about the DPF program, please visit the Data privacy framework website.

Thanks,

Stord