We just launched. Lock in $129/mo forever: only 3 spots left at this price. Claim your spot →

Security

Your store. Your data. Your control.

EcomClaw connects to the accounts your business runs on. Here is exactly how we protect them.

Your credentials are encrypted

Store and ad-account credentials are encrypted with AES-256 using envelope encryption: each credential gets its own data key, wrapped by a master key held in a separate secrets manager. Nobody at EcomClaw can casually read them, and they are decrypted only at the moment a skill needs them.

Your data never trains AI models

Your store data, conversations, and research results are used to run your agent — nothing else. They are never used to train AI models, ours or anyone else’s.

Code runs in isolated sandboxes

When your agent needs to execute code — building a landing page, processing files — it runs inside an isolated, single-use sandbox with locked-down network access. Your credentials never enter the sandbox.

You approve what matters

Store-impacting actions can be set to require your sign-off. Any skill can be switched off at any time, and every action your agent takes is logged so you can see exactly what happened and why.

No surprise bills

AI usage is billed as transparent credits with a monthly spend alert and a hard cap — both set by you. When the cap is reached, the agent stops spending. Payments are processed by Stripe; we never store your card details.

Your data leaves with you

Cancel anytime, month to month. You can export your data before you go, and your workspace is removed under our retention policy after cancellation.

Found a vulnerability or have a security question? Contact us and we’ll respond quickly.