Security
We treat your data the way we'd want our own treated. Distributors store payment info, customer lists, and pricing, we know the cost of getting this wrong, so we engineered for it from day one.
Compliance posture
- SOC 2 Type 1In progress
- SOC 2 Type 2Planned for 2027
- GDPRCompliant
- CCPACompliant
How we protect your data
Encryption
Your data is encrypted in transit and at rest, and so are its backups.
Access controls
Role-based access across the product, with sign-in codes for your team. Inside APFoodz, production access is limited to the people who need it and reviewed regularly.
Vulnerability management
Automated checks on every change and regular dependency scanning. Serious issues are fixed as a priority.
Backups & DR
Continuous backups with point-in-time recovery, and restores that are tested, not assumed.
Personnel
Background checks and security training for the team. Production access is granted only for a specific task and removed when it is done.
Incident response
An on-call team and documented procedures. During an incident, updates are posted on the status page.
Your data stays yours
Each company's data is kept separate from every other company's, enforced throughout the application and checked by automated tests. You can export your data at any time.
Reporting a vulnerability
Found something? We want to know. Email admin@apfoodz.com with details. Critical issues get a same-day response.
Pen-test history
We engage a third-party pen-tester annually. Reports are available under NDA on request to admin@apfoodz.com.