Skip to content
Trust

Compliant by default

GDPR, the EU AI Act and data residency are built into the ecommerce platform from the start. Here is how we protect your data and your customers'.

01 / Compliance

Compliance and data protection

  • GDPR and UK GDPR

    GDPR

    DPAs, DSAR, consent records and a sub-processor register.

  • AI Act ready

    EU AI Act

    Art. 50 disclosure and machine-readable synthetic-media marking.

  • UK and EU data residency

    Residency

    Tenant isolation enforced at the data layer.

  • SOC 2 roadmap

    SOC 2

    Security designed in, with SOC 2 on the path.

02 / Security

Security

  • Encrypted in transit and at rest

    Encryption

    TLS in transit and encryption at rest across the platform.

  • Tenant isolation

    Isolation

    Your data is isolated per tenant, enforced at the data layer.

  • Least-privilege access

    Access

    Role-based access, audit logging and continuous monitoring.

  • SSO and SCIM

    SSO

    SAML SSO and SCIM provisioning on higher plans.

  • Backups and monitoring

    Resilience

    Automated backups and platform monitoring.

  • Secure development

    SDLC

    Security review built into how we design and ship.

03 / AI Act

AI Act and synthetic media

Every AI-generated image, video and 3D view from Sellarix carries machine-readable synthetic-media marking: C2PA content credentials plus a synthetic flag. Our AI assistants also disclose that they are AI, in line with EU AI Act Article 50, whose transparency duties apply from 2 August 2026. Read the EU AI Act compliance guide.

04 / Withdrawal

The EU withdrawal button

From 19 June 2026, Article 11a of the EU Consumer Rights Directive (added by Directive 2023/2673) requires online stores selling to EU consumers to show a prominent "withdraw from contract here" function, available for the whole 14-day cooling-off period, with a separate confirmation step and a timestamped acknowledgement on a durable medium. It applies to non-EU sellers too, and non-compliance carries fines of up to 4% of turnover. Sellarix is building this into the platform: a compliant withdrawal flow with the acknowledgement, deadline tracking and audit trail the rule demands, on Shopify, WooCommerce, Magento or a custom storefront.

05 / Documents

Policies and sub-processors

We maintain a register of sub-processors (hosting, infrastructure, email and analytics providers) and can share it on request. Data subject requests are supported, and we will sign a DPA with you.

An AI operating system for ecommerce. On any platform.

Join the waitlist or book a demo.