Data Classification and Encryption Policy

Marketplace data is classified by sensitivity and protected with HTTPS in transit, managed provider protections at rest, and restricted secret handling.

Status: Published

Last reviewed: June 21, 2026

Owner: Leo Infinity product owner

Text to paste

Answer: Yes

Yes. Leo Infinity classifies marketplace data by sensitivity and protects confidential data with HTTPS/TLS in transit, managed cloud database/storage protections at rest, restricted service-role credentials, and server-side token handling. Evidence: https://app.leo.com.vc/seguranca/data-classification-encryption

Policy controls

Protected Data includes seller account identifiers, buyer/order information, shipment identifiers, labels, product data, costs, invoices, and marketplace tokens.
Confidential secrets include OAuth client secrets, refresh tokens, service-role keys, webhook secrets, and payment provider secrets.
Confidential data is transmitted over HTTPS/TLS and sensitive credentials are stored in managed environment-variable stores.
Exports and support files containing personal data must be temporary, limited, and deleted when no longer needed.

Evidence notes

The production app is served over HTTPS.
Marketplace token exchange happens in server-side API routes.
Public pages do not expose protected seller data.