Security

GiftDesk separates store Admin, gift-team portal, and recipient surfaces.

Principles

• Least privilege between A, B, and C
• Desk invites and portal auth gate B access
• Recipient pages expose gift status for C — not store Admin data
• Plus API is shop-scoped and plan-gated

Deeper reading

Internal / compliance notes live in the product repo under docs/security/ (access control, retention, subprocessors, incident response). Public summary pages may expand later.

Related

• Integrations
• Authentication
• Marketing: Security