Defense in depth for seller operations

Verified identity, anomaly review, role permissions and least-privilege checks protect application and administrative actions. Normal registrations are enabled automatically; conflicting identities are restricted for review. Administrative routes are separate from the seller workspace. Sensitive write actions require explicit confirmation and are recorded.

Transport uses HTTPS/TLS. TikTok, Google and Meta application credentials and seller OAuth tokens are encrypted at rest using a platform master key. Raw secrets are never returned to the browser or written to application logs.

Controls include signed OAuth state, webhook signature verification, same-origin checks, rate limits, upload type and size inspection, restricted content types, security headers, request timeouts, bounded retries and immutable audit events.

Security events record a hashed network identifier, actor, route, event type and severity. Administrative changes and cross-workspace intelligence views use a separate audit log. Identity-level platform rankings require elevated data permissions; member-facing benchmarks enforce fixed small-cohort suppression. Retention and thresholds are configurable in the private administration console.

Suspected incidents are triaged, contained, investigated and documented. Affected sellers and TikTok Shop are notified without undue delay when notification is required. Recovery includes credential rotation, authorization revocation, data-scope review and post-incident corrective actions.

Submit suspected vulnerabilities through Support using the Security report request type. Do not include live access tokens or exploit personal data. Testing production accounts or third-party seller data without written authorization is prohibited.