SECURITY & RESIDENCY
Built EU-first, and honest about it.
Leira is designed around a simple stance: keep your data in Europe, encrypt it, verify it, and never hold anything personal about your customers.
- 01
Encrypted at rest
Every backup and every stored access token is sealed with AES-256-GCM. Encryption keys are held separately from the OAuth credentials, so rotating one never exposes the other.
- 02
EU data residency
Metadata lives in an EU-region database and backups in EU-jurisdiction object storage. There is no US data path anywhere in the pipeline. Your store's data never crosses the Atlantic.
- 03
Verified backups
A backup that claims success is re-read from a random sample and checked before it's marked verified, so you find out a backup is good now, not when you need it.
- 04
No personal data, by design
No order or customer scopes, ever. That keeps Leira at Protected Customer Data Level 0/1, so your shoppers' personal information never reaches our servers. Leira asks only for the scopes it uses; off-site copies (Plus) go to your own storage with write-only credentials.
- 05
HMAC-verified webhooks
Every webhook Shopify sends is HMAC-SHA256 verified before Leira acts on it. A request that fails the check is never processed.
- 06
Hard-delete on erasure
Uninstalling stops all work and drops the dead credentials right away, but your backups stay in place: reinstall and they're still there. Shopify's GDPR erasure order (shop/redact) then hard-deletes the shop's backups, blobs and metadata.
RESTORE LOG
Verified, diffed, reversible.
leira://restore-log
- 09:41:02snapshot 8f3c…a1 verified: sample re-read from EU storage
- 09:41:17diff computed: 12 products · 2 collections · 1 page changed
- 09:41:19dry-run complete: 0 conflicts · 15 fields to change
- 09:41:21pre-restore snapshot taken: 8f40…d7 (undo point)
- 09:41:24restore applied: 15 fields · reversible
A stylized restore log. The real flow (verify, diff, dry-run, pre-restore snapshot, apply) means every restore can itself be undone.
COMPLIANCE
Because Leira never accesses orders or customers, it needs no Protected Customer Data application and no data-protection review: a smaller attack surface and a simpler compliance story for you. Read our Privacy Policy and Data Processing terms.