Umsetzung des Datenschutzes

Grow

Included:

• Implementation of basic data protection measures for one Shopify store or connected application.
• Setup of basic database encryption (at-rest and in-transit) and password policy review.
• Configuration of access controls for up to 5 staff accounts.
• Creation of standard backup procedures with manual restoration guidelines.
• Email and CRM-based support with standard priority (responses within 3–4 business days).

Not Included / Limitations:

• No advanced compliance advisory for GDPR, CCPA, or HIPAA.
• Limited to one store and 5 accounts—additional stores or users require a separate engagement.
• No real-time monitoring dashboards or automated intrusion alerts.
• Services are delivered exclusively online—no on-site implementation or training.

Advanced

Included:

• Deployment of intermediate data protection architecture for up to 2 Shopify Plus storefronts or custom environments.
• Setup of enhanced encryption, secure API key management, and access control policies for up to 15 staff accounts.
• Configuration of automated backups and basic real-time monitoring for potential breaches.
• Advisory on compliance alignment with international privacy regulations (GDPR/CCPA) for up to 2 regions.
• Email and CRM-based support with priority response (within 1–2 business days).

Not Included / Limitations:

• No full-scale penetration testing or legal certification filings.
• Limited to two storefronts, 15 accounts, and two compliance regions—expanding beyond this scope requires a new engagement.
• No development of custom security software or managed detection services.
• Remote delivery only—no in-office implementation.

Plus

Included:

• Enterprise-grade data protection implementation for up to 4 Shopify Plus storefronts or multi-app ecosystems.
• Deployment of advanced encryption workflows, multi-factor authentication, and granular access control policies for up to 30 staff accounts.
• Integration of real-time breach monitoring, alert systems, and secure backup architecture with automated failover.
• Comprehensive advisory for multi-region compliance (GDPR, CCPA, HIPAA, PCI DSS) across up to 5 jurisdictions.
• Follow-up consultation within 90 days to review performance and refine strategies.
• Email and CRM-based support with high priority (responses within 24 hours).

Not Included / Limitations:

• No certification issuance or legal representation—external auditors or legal counsel are required for formal approvals.
• No support beyond four storefronts, 30 accounts, or five regions—larger requirements require a new engagement.
• No on-site or in-office implementation—services are provided exclusively online.