Security

Security & data handling

How PrintIntegrator handles data, infrastructure, and access controls. Managed cloud on the $19/month Professional plan; self-hosted and on-premise availa…

Managed cloud (Professional, default)

Included in the $29/month Professional plan — we operate the infrastructure, patch it, back it up daily, and monitor it 24/7 with point-in-time recovery. Nothing for you to run.

Self-hosted / on-premise (Enterprise)

On Enterprise, deploy on your own infrastructure — AWS, GCP, Azure, on-prem, or a VPS — single-tenant, with source-code access. You own the OS, the database, and the backups.

Data residency

Pick the cloud region at install: EU, US, IN, SG, AU, or ZA. Customer designs and personal data never leave the chosen region. Useful for GDPR, DPDP, and similar locality rules.

Practices

Security practices baked in

Transport encryption

TLS 1.2+ enforced for all customer-facing traffic. Static assets served from same-origin domain by default — no third-party CDN routing for personalized content unless you configure it.
At-rest encryption

Stored design files and order records encrypted using the underlying cloud provider keys (AWS KMS, GCP KMS, Azure Key Vault) or a customer-provided HSM on Enterprise.
Role-based access control

Granular roles for admin, operator, designer, and customer-service users. Permissions cover orders, designs, templates, pricing, and reporting independently.
Audit log

Every administrative action — pricing change, template edit, refund, configuration update — captured in an append-only audit log with actor + timestamp + diff.
SSO on Enterprise

SAML 2.0 and OIDC supported for the admin panel. Works with Okta, Azure AD, Google Workspace, Auth0, and any standards-compliant IdP.
Backups + recovery

Daily snapshots with 7-day point-in-time recovery on managed deployments. Self-hosted operators control their own RPO/RTO via their cloud provider tools.
WAF + rate limiting

Web application firewall + per-IP rate limiting on the customer-facing storefront. Form endpoints have honeypot + timestamp checks against scripted submissions.
Security review per release

Each major release ships with an internal security review. Independent third-party reviews are commissioned annually and available under NDA.

Compliance

Where we stand on standards

GDPR + DPDP aligned

PrintIntegrator processes personal data only as needed to deliver the service you've configured. Data processing addenda available on request. EU and India data residency supported at install. Customers control retention, deletion, and export workflows from the admin panel.

SOC 2 readiness

Managed deployments operate against SOC 2 Type II–aligned controls. The formal Type II audit is on the roadmap; the readiness report and current control inventory are available to enterprise prospects under NDA.

Need a specific certification or framework (ISO 27001, HIPAA, PCI scope reduction)? Talk to us — Enterprise self-hosted deployments let your own compliance posture extend directly to the environment PrintIntegrator runs in.

Incident response

If something goes wrong

Reporting

Security disclosures go to security@printintegrator.com. We respond within one business day and triage immediately.

Customer notification

On managed deployments, affected customers receive an initial notification within 72 hours of a confirmed incident, followed by a full post-mortem once the investigation completes.

Responsible disclosure

We welcome security research. Responsible disclosure following industry-standard coordinated-vulnerability-disclosure norms is acknowledged in our hall of fame on request.

Stay informed

Security updates in your inbox.

One short email when we ship a meaningful security or compliance update. No marketing fluff.

Need a security review before signing?

We send the control inventory, data-flow diagram, and our incident-response runbook under NDA. Most procurement teams clear us in a single review cycle.

Request the security pack Book a demo