Authentication
WorkOS manages credentials. Pluto sessions are encrypted and stored in HttpOnly cookies.
Security
How Pluto protects merchant data
Pluto processes order revenue, ad spend, costs, and profit data. These are the controls implemented in the product today.
Last updated
Current assurance status
Pluto has not completed a SOC 2 examination or ISO 27001 certification. We do not claim either standard today.
Controls
Built into the product
Integration credentials
Shopify and Meta OAuth tokens are encrypted with AES-256-GCM before database storage.
Data in transit
Production database connections use TLS. Public application traffic is served over HTTPS.
Service requests
Calls from the Next.js BFF to the Rust API are signed with HMAC-SHA256 and a timestamp.
Webhook verification
Shopify, WorkOS, and Stripe webhook deliveries are verified before processing.
Scoped data
Backend data and queries are scoped by shop or organization. The public developer API is read-only.
Financial integrity
Money remains decimal through ingestion, calculation, storage, and API responses.
Data handling
Location and lifecycle
United States
Pluto's primary backend, object storage, operational database, and analytics database are hosted in US regions.
Data minimization
Shopify order facts exclude customer names, email addresses, phone numbers, and shipping addresses.
Shop deletion
Shopify shop-redaction events trigger deletion of the shop's facts, connections, costs, and sync history.
Technology
The stack
WebNext.js
Interface and BFF
HostingGoogle Cloud
Backend services and object storage in the US
APIRust and Axum
Business logic and integrations
Operational dataNeon Postgres
AWS us-east-1, Northern Virginia
AnalyticsClickHouse
AWS us-east-1, Northern Virginia
CoordinationRedis
Locks, queues, and idempotency
IdentityWorkOS
Authentication and organizations
Responsible disclosure
Report a security issue
If you believe you have found a security issue, contact legal@plutoprofit.com with enough detail to reproduce it. We will review the report and respond as quickly as possible.