01 /Security, Cryptography & AI Governance
ZERO DATA RETENTION ENFORCED

Enterprise-Grade Isolation. Zero AI Model Training on Your Data.

Your proprietary SKU catalog, supplier margins, and customer order flows belong exclusively to you. JB.er enforces strict Zero Data Retention (ZDR) and hardware-backed encryption across every pipeline.

02 /Defense-In-Depth Architecture

Four Pillars of Merchant Data Protection.

SECURITY /01

Contractual Zero Data Retention (ZDR)

Anthropic Claude • Google Vertex AI • OpenAI Enterprise

Merchant product catalogs, pricing rules, and order telemetry are never used to train, fine-tune, or improve foundation models. All inference requests execute inside stateless ephemeral containers with zero prompt logging.

SECURITY /02

Cryptographic Isolation & Key Management

AES-256-GCM At Rest • TLS 1.3 In Transit • Hardware KMS

OAuth 2.0 refresh tokens for Shopify Plus, Amazon SP-API, and Etsy v3 are encrypted using per-tenant envelope keys stored in FIPS 140-3 Level 3 Hardware Security Modules.

SECURITY /03

Automated Edge PII Redaction Proxy

Regex + NER Sanitization Before LLM Egress

Customer names, shipping addresses, phone numbers, and payment identifiers are stripped at the ingress worker boundary before any catalog or support payload reaches an AI model.

SECURITY /04

Immutable Audit Ledger & Role-Based Access

SHA-256 Chained Logs • Least-Privilege IAM

Every inventory mutation, price adjustment, and webhook event is recorded in an append-only cryptographic audit log with instant merchant export and 48-hour cryptographic erasure on offboarding.

03 /Compliance Controls Ledger

Audited Controls & Governance Specifications.

Control DomainTechnical ImplementationVerification Status
AI Model Data TrainingStrictly Disabled (0% Retention)ENFORCED
Transport Layer EncryptionTLS 1.3 with Perfect Forward Secrecy (PFS)ENFORCED
Storage EncryptionAES-256-GCM Hardware KMS Envelope EncryptionENFORCED
Webhook AuthenticityHMAC-SHA256 Timestamped Signature VerificationENFORCED
GDPR / CCPA Data ErasureAutomated Cryptographic Purge Within 48 HoursCOMPLIANT
Production Availability SLA99.98% Multi-Region Active-Active FailoverVERIFIED