01
Sign-in and access
Cover single sign-on (SSO), roles, the access each person needs, sign-in limits, and who can run the website.
Security Review Checklist | Nomad eCommerce
Security / Review kit
Run your review. We will bring the map.
Review our architecture for ERP access, SSO/MFA, tokenized payments, and hosting.
Preview
Start here
The review has five parts.
- Sign-in and access
- Where data goes
- Payments
- Monitoring and change control
- Supplier paperwork
01 / The checklist
What to review.
Use this as the approach for the first security conversation.
02
Where data goes
Which customer, price, order, and bill information moves between the ERP and the website?
03
Payments
How payment data is handled, which provider is involved, and what the ERP sees.
04
Monitoring and change control
How do we launch and keep records, watch the website, and back up information? How do we handle problems and review changes?
05
Supplier paperwork
Request the current security summary and setup plan, plus the supplier list and review papers.
06
People and steps
Who leads access reviews? Who handles support access and customer data requests?
02 / The honest part
We will not claim a certificate we do not hold.
Security is a focused review, not a badge. Request the current paperwork and confirm the claims that matter to your business.
The rule
Proof over badges.
Bring your information types, connection plan, and supplier review. We will map how information moves and the checks around it.
If a requirement is not met, say so early. A clean no is better than a vague yes.
Read the security summary03 / Questions
What to ask in the review.
These are the questions that change the plan.
Start with the ERP and the website. Add the payment provider, and any analytics or support tools.
Prices, order history, and account information may need different handling. Treat each with the right level of control.
Name the roles, who approves access, and how often it is reviewed.
The answer should name who leads, how you communicate, and what proof you keep.
04 / Keep going
Connect the review to the setup.
Security is part of setup, not a separate file.
The next moveBring the review.
Bring the review.
We will bring the data map.
Tell us what your security team needs to see, and we will keep the conversation honest.