# Trust Center

## Overview
Welcome to Stord's Security Portal. Our goal at Stord is to align overall business objectives with the information security program to create a holistic strategy focused on protecting the security of Stord's client's data, personnel, information systems, and information assets.

Use this portal to learn about our security posture and request access to our security documentation.

## Compliance
- [CCPA](https://trust.stord.com/?itemName=risk_profile&itemUid=4064ac33-7b48-407b-aed7-ce02971d1ec1&source=click)
- [EU-US DPF](https://trust.stord.com/?itemName=risk_profile&itemUid=4459b4a1-c6ee-446b-8dce-9d132e28c73f&source=click)
- [GDPR](https://trust.stord.com/?itemName=risk_profile&itemUid=45220873-6e51-4dbb-b1b1-37d66ee9ef95&source=click)
- [SOC 2](https://trust.stord.com/?itemName=risk_profile&itemUid=7bfa66da-33ab-49de-8391-e329738a1ae9&source=click)
- [SOC 3](https://trust.stord.com/?itemName=risk_profile&itemUid=b2671060-5c66-4d9c-b70f-af4ab3dbd45a&source=click)

## Documents
- [DOCUMENTSGMP Certifications (NSF/ANSI 455-2)](https://trust.stord.com/?itemName=risk_profile&itemUid=9f87a75c-5e49-4fc2-ae91-c2deb8fbb2f5&source=click)
- [REPORTSPentest Report](https://trust.stord.com/?itemName=risk_profile&itemUid=722b9671-c0d5-4a19-a5f7-0ad8fd81307c&source=click)
- [COMPLIANCESOC 2](https://trust.stord.com/?itemName=risk_profile&itemUid=7bfa66da-33ab-49de-8391-e329738a1ae9&source=click)
- [COMPLIANCESOC 3](https://trust.stord.com/?itemName=risk_profile&itemUid=b2671060-5c66-4d9c-b70f-af4ab3dbd45a&source=click)

## Risk Profile
- [Impact Level Substantial](https://trust.stord.com/?itemName=risk_profile&itemUid=e43710df-7d7a-44f1-bf28-ff97e73c8cec&source=click)
- [Third Party Dependence Yes](https://trust.stord.com/?itemName=risk_profile&itemUid=b62613cc-082d-49ea-bfa5-16362db4933f&source=click)
- [Hosting Major Cloud Provider](https://trust.stord.com/?itemName=risk_profile&itemUid=1fcaa8c0-7ef1-4e10-8b80-736a826c6b37&source=click)

## Product Security
- [Audit Logging](https://trust.stord.com/?itemName=risk_profile&itemUid=a5bb6b4d-c23b-4d4f-9da1-bedf5dc74ff5&source=click)
- [Data Security](https://trust.stord.com/?itemName=risk_profile&itemUid=38b62117-19f2-4e4e-b679-9421b66c114e&source=click)
- [Integrations](https://trust.stord.com/?itemName=risk_profile&itemUid=6ea252c9-f877-470a-95c7-df4703d099c0&source=click)

## Reports
- [Network Diagram](https://trust.stord.com/?itemName=risk_profile&itemUid=eecad1f5-1070-455d-b87e-9db1fc732d2b&source=click)
- [Other Reports](https://trust.stord.com/?itemName=risk_profile&itemUid=092e78c8-b5c8-4428-ac96-c357c088ef66&source=click)

## Data Security
- [Access Monitoring](https://trust.stord.com/?itemName=risk_profile&itemUid=92ff33fd-666e-49f9-8cc7-c8a3ba9fd4d7&source=click)
- [Data Backups](https://trust.stord.com/?itemName=risk_profile&itemUid=b05bcec1-da7e-4885-9603-a39fd73a1cdc&source=click)
- [Data Erasure](https://trust.stord.com/?itemName=risk_profile&itemUid=af8eb7bc-d4b7-4e13-a4b7-6f05e2744c22&source=click)

## App Security
- [Code Analysis](https://trust.stord.com/?itemName=risk_profile&itemUid=5eeb9c41-2fc0-4961-aafb-3ac64badd8e1&source=click)
- [Credential Management](https://trust.stord.com/?itemName=risk_profile&itemUid=ed9ba78d-8785-4345-9252-deb96405dd03&source=click)
- [Runtime Application Self Protection](https://trust.stord.com/?itemName=risk_profile&itemUid=c1eb5b4a-df00-458c-967c-9e455f4b4027&source=click)

## Legal
- [Subprocessors](https://trust.stord.com/?itemName=risk_profile&itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57&source=click)
- [Cyber Insurance](https://trust.stord.com/?itemName=risk_profile&itemUid=d04f3376-ffef-40fd-badb-d9b4d9e6b8ab&source=click)
- [Data Processing Agreement](https://trust.stord.com/?itemName=risk_profile&itemUid=c4223a81-5840-4e11-ac9f-2b812794a67e&source=click)

## Data Privacy
- [Cookies](https://trust.stord.com/?itemName=risk_profile&itemUid=98a98389-38a4-4205-9db9-821319f78044&source=click)
- [Data Breach Notifications](https://trust.stord.com/?itemName=risk_profile&itemUid=fa7a4923-3f51-431c-9eb6-3f88989ea858&source=click)
- [Data Privacy Officer](https://trust.stord.com/?itemName=risk_profile&itemUid=d9b5efd5-6ec5-436d-8844-58658944869d&source=click)

## Access Control
- [Data Access](https://trust.stord.com/?itemName=risk_profile&itemUid=7103fdad-d6ac-45f6-b28d-e71f32884b7f&source=click)
- [Logging](https://trust.stord.com/?itemName=risk_profile&itemUid=6a6c21a3-9441-4222-953e-fa6d17a8c5a4&source=click)
- [Password Security](https://trust.stord.com/?itemName=risk_profile&itemUid=af119565-5dc2-4aec-bab6-21f9cf5ae315&source=click)

## Endpoint Security
- [Disk Encryption](https://trust.stord.com/?itemName=risk_profile&itemUid=8ec2e517-1250-4403-bd79-49e1151028b6&source=click)
- [Endpoint Detection & Response](https://trust.stord.com/?itemName=risk_profile&itemUid=26115955-6428-446a-b597-1079bfb40357&source=click)
- [Mobile Device Management](https://trust.stord.com/?itemName=risk_profile&itemUid=979db9ac-71ac-41e2-aae9-72c66b0bd52b&source=click)

## Network Security
- [Data Loss Prevention](https://trust.stord.com/?itemName=risk_profile&itemUid=7d194d9c-c3e3-4638-acb4-e313c1683c29&source=click)
- [Firewall](https://trust.stord.com/?itemName=risk_profile&itemUid=f8feb4d4-b79d-47f3-9dd7-06c479a49dfe&source=click)
- [Spoofing Protection](https://trust.stord.com/?itemName=risk_profile&itemUid=88a59b35-2ed3-4f3b-a9ad-38830db5ea4a&source=click)

## Corporate Security
- [Asset Management Practices](https://trust.stord.com/?itemName=risk_profile&itemUid=a20d3390-7b3b-47ea-970f-4fd56770a621&source=click)
- [Email Protection](https://trust.stord.com/?itemName=risk_profile&itemUid=30e44898-674c-4f2a-aed9-21df8833ecfc&source=click)
- [Employee Training](https://trust.stord.com/?itemName=risk_profile&itemUid=82bfe5ad-1b71-455d-98c3-8dc70c033318&source=click)

## Policies
- [Acceptable Use Policy](https://trust.stord.com/?itemName=risk_profile&itemUid=2515cab1-d391-4658-af70-2c65f0fc65de&source=click)
- [Access Control Policy](https://trust.stord.com/?itemName=risk_profile&itemUid=ddee6fb4-ffcc-40bc-892c-ca344768d1ff&source=click)
- [Anti-Malicious Software Policy](https://trust.stord.com/?itemName=risk_profile&itemUid=0db4f8ed-c015-48d8-9625-712f3331b6da&source=click)

## Security Grades
- [ImmuniWeb A](https://trust.stord.com/?itemName=risk_profile&itemUid=2295dac0-4666-4503-8305-18da8472661f&source=click)
- [Qualys SSL Labs A+](https://trust.stord.com/?itemName=risk_profile&itemUid=2a8c3762-0970-4a72-88cd-a86b29f9ef12&source=click)
- [Security Headers A](https://trust.stord.com/?itemName=risk_profile&itemUid=bb383d4c-2d21-426a-9c69-7a80a4d2fbb0&source=click)

## Trust Center Updates
### Sub-processor Change Notification
As a Stord customer, nothing is more important to us than your success and the privacy of your data. This email is to notify you that Stord is making changes to our third-party sub-processors, effective June 8, 2026.

**Sub-processors being removed:** Boomi, Celigo

**Sub-processors being added:** Anthropic, Omni Analytics, OpenAI

What This Means for You: There will be no immediate impact on your services, and no action is required on your part.

If you have concerns about any of the new sub-processors listed above, please contact us at [privacy@stord.com](mailto:privacy@stord.com).

### Privacy Policy Update
Stord has updated its Privacy Policy effective April 1, 2026. The updates reflect how we collect and use data through analytics features on merchant storefronts, including the Stord Web Pixel. These changes apply only to merchants who opt in to the Stord Web Pixel.

### Privacy Policy Update
We have updated our Privacy Policy as of January 8, 2025, in part of Stord's participation in the EU-U.S. Data Privacy Framework (DPF). To learn more about the DPF program, please visit the Data privacy framework website.

Thanks,

Stord