Security & data
Your account data, and nobody else’s.
You are handing an outside system access to the numbers that run your business. Here is exactly what it can see, what it can do, and what happens when you want it gone.
Changes only on your instruction
Amazon issues no read-only credential — access is full by design. Nothing changes in your Amazon account except on your instruction — an action you or your team approve, or an automation you switch on — and every change is logged.
Scoped to your organisation
Every query is scoped to your organisation, and the AI’s read-only analysis connection is additionally restricted at the database level to your accounts.
Revoke any time
Withdraw access from Amazon directly, and the connection ends with it.
Never sold, never shown to others
Your data is never sold, and never shown to another customer.
Access
What it can see, and what it cannot.
Amazon issues no read-only credential, so the access you grant is full by design. Everything in the “Default” column is our own policy, enforced by us — nothing changes in your Amazon account except on your instruction — an action you or your team approve, or an automation you switch on — and every change is logged.
01
Least privilege
We request the narrowest Amazon scopes that let the analysis work, and nothing beyond them.
02
Isolation per organisation
Every query is scoped to your organisation, and the AI’s read-only analysis connection is additionally restricted at the database level to your accounts.
03
Encrypted connections and credentials
Data is encrypted in transit (HTTPS) and your Amazon credentials are encrypted at rest.
04
Every action logged
Each change carries a user, a timestamp and the instruction that caused it — auditable by you.
05
Not sold, not shown to others
Your data is never sold, and never shown to another customer.
06
Staff access is limited and logged
Only authorised ScaleSKUs staff can access account data, only to deliver the service or support you asked for, and every staff session is logged.
07
Protected at the edge
All traffic passes through Cloudflare: DDoS protection, a managed web application firewall, and HTTPS only — TLS 1.2 or newer, with HSTS.
08
Encrypted off-server backups
The database is backed up nightly, encrypted, to storage outside our servers, with its change log archived for point-in-time recovery.
09
Sign-in protection
Two-factor sign-in is available. Changing your password signs out every other session, and session cookies are encrypted and sent over HTTPS only.
10
Report a vulnerability
Found a security issue? Email support@scaleskus.com (see scaleskus.com/.well-known/security.txt). We look into every report.
The service providers that process data for us, what each does and where, are listed in our privacy policy.
Leaving
Exit is one click, and your reports come with you.
There is no data hostage-taking here. Cancel whenever you like, revoke Amazon access from your Amazon account at any time, ask us to delete your data, and everything you exported stays yours.
Ask a security questionRevoke authorization directly from your Amazon account at any time.
Cancel in the dashboard — no retention call, no notice period.
Your data isn’t deleted automatically when a plan ends, so you can pick up where you left off. Ask us to delete it at any time — we complete deletion requests within 30 days, except records the law requires us to keep.
Exports and reports you generated remain yours to keep.