In short
The application, database and files are hosted in Frankfurt am Main, Germany. We sign a data processing agreement under Art. 28 GDPR and name every subprocessor. The database keeps each organisation's data apart with row-level security, and veredel logs every change.
Where data is processed
- Application, database and files: Frankfurt am Main, Germany.
- Email delivery: Resend, USA.
- Online payments: Stripe, Ireland and USA.
- Shipment tracking: 17TRACK.
How data is kept apart
- Row-level security. The database separates the data of every organisation, so one shop cannot read another shop's orders, people or prices.
- Separate dealers. Each dealer has its own catalogue, purchase prices and payment account. No other dealer sees them.
- Change log. veredel logs every change.
Sign-in
- People sign in with a one-time code sent by email. There are no passwords to leak or reset.
- A shop is either closed to signed-in people or open for anyone to browse, depending on your settings.
- Brand Shop Plus adds single sign-on.
In writing
- A data processing agreement under Art. 28 GDPR, on request, with the list of subprocessors.
- Your quote sets out the exact scope of services.
This website
veredel.com sets no cookies and loads nothing from third parties.
Frequently asked questions
Where is our data stored?
In Frankfurt am Main, Germany. The application, database and files run there.
Do you sign a data processing agreement?
Yes. We sign a data processing agreement under Art. 28 GDPR and name all subprocessors.
Can one organisation see another organisation's data?
No. Row-level security in the database keeps each organisation's data apart.
Do people need a password?
No. They sign in with a one-time code sent by email. Brand Shop Plus also offers single sign-on.

One merch shop for every location
One fixed price for every location
About veredel