Order Privacy and Data Access

BoxNCase applies least-privilege access to customer and order data. Staff, integrations, and distribution channels receive only the information required to perform their assigned workflow.

Data boundaries

Data	Typical access
Customer identity and delivery address	Authorized order and fulfillment staff for the relevant workspace
Order lines, pricing, taxes, and totals	Authorized commerce, support, and settlement roles
Payment-card data	Processed by the payment provider; full card details are not stored in BoxNCase
Fulfillment and tracking	Warehouse and support roles; status may be shared with the originating sales channel and buyer
Aggregate reporting	Organization roles with reporting access; scoped to their workspace and channels

Control access

• Give each staff member an individual account.
• Assign the narrowest role that supports their work.
• Use separate app credentials for each integration and environment.
• Rotate credentials when an integration owner or provider changes.
• Review staff and app access during onboarding, launch, and regular security reviews.

Data requests

Use the workspace support channel for customer-data export, correction, or deletion requests. Include the workspace and order reference, but do not send payment credentials or sensitive personal data by email.

See Permissions and Authentication for implementation details.