CREDENTIAL CUSTODY
A separate home for credentials.
Retailer credentials are stored in AWS Secrets Manager, apart from ordinary operational records. Staff can replace them without revealing the stored values.
SECURITY AT R4ACO
The information behind an ACO deserves thoughtful protection. Here’s how access, credentials and history are kept in their proper place.
CREDENTIAL CUSTODY
Retailer credentials are stored in AWS Secrets Manager, apart from ordinary operational records. Staff can replace them without revealing the stored values.
SENSITIVE ACTIONS
Authorized staff can export using their Discord sign-in. Every download checks current permissions and an unexpired selection tied to the same user, workspace and login session. Customers cannot access operator credential files.
ACCESS BOUNDARIES
Current membership and permissions are checked for protected operations. Another business’s owner does not become an administrator of your workspace.
ACCOUNTABILITY
Submission, assignment and export history remain attached to the operation. Important configuration and security actions leave a safe audit record.
PAYMENT DATA
R4ACO does not currently store card numbers or CVV. Profile exports have blank payment fields and are not checkout ready.
HONEST READINESS
Integration setup, external import compatibility and deployment checks remain separate requirements. We do not claim PCI, SOC 2 or other compliance certifications.
YOUR NEXT DROP STARTS HERE
Your team. Your customers. One workspace.