Security
Your shop, your data, your control.
You're trusting us with your marketplace API key. Here's how we look after it and the data it gives us.
B&Q · shop 2041
| Mirakl API key | •••• •••• •••• 7c2e | Encrypted |
| Sign-in | Microsoft or Google work account | MFA applies |
| Data region | Microsoft Azure, UK South | UK |
| Sending prices | Off until you switch it on | Per store |
Team roles
AdminPricingMemberRead only
Where your data lives
PriceSynergy runs on Microsoft Azure in the UK South region. Your marketplace data, your account and our databases stay in the UK.
Your Mirakl API key
- Your key is encrypted before it's stored, and it's never shown in full again after you enter it.
- We use it to read your catalogue, offers and orders from the marketplace.
- Prices are only sent to the marketplace when you approve them, and only if you've switched sending on. Every price is checked against your min, max and break-even first.
- You can disconnect a shop at any time, and you can revoke the key in your marketplace seller portal.
Signing in
You sign in with your Microsoft or Google work account, so your company's own sign-in rules, such as multi-factor authentication, apply. We never see or store a password.
Inside your company
- Every company's data is kept separate, and every query is scoped to your own shops.
- Admins invite colleagues and give each one a role: Admin, Pricing (can send prices), Member or Read only.
- Admins also choose which areas each person can see.
- Important actions, such as price changes and team changes, are recorded in an audit log.
Secrets and infrastructure
Database credentials and other secrets are kept in Azure Key Vault and read by the app through a managed identity, never stored in code. Connections are encrypted in transit with TLS.
Questions
Need a security questionnaire filled in, or our data processing agreement? Email support@pricesynergy.io.