Security
Automation you can bound, audit, and revoke.
SellZyme connects to Amazon through the official Advertising API with least-privilege scopes. What it may do is bounded by your guardrails, every action is logged with its reasoning, and access can be revoked at any time.
Principles
How we think about access
A tool that spends your money automatically has to earn that permission. These are the constraints we build inside.
Least privilege by default
SellZyme connects through the official Amazon Advertising API and requests only the scopes it needs to do the work you've enabled. It never asks for your Seller Central password.
Your guardrails bound the software
Spend ceilings, ACOS thresholds, and margin floors aren't just product features — they're hard limits on what automation is permitted to do. A model error cannot become an unbounded one.
Every action is attributable
Each automated change is logged with the prediction that justified it, the guardrails it was checked against, and the time it ran. Nothing happens that you can't reconstruct.
Reversibility is a requirement
Actions are designed to be undoable. Where an action can't be cleanly reversed, it doesn't get automated — it gets proposed.
Certifications and compliance
SellZyme is early, and we're not going to display badges we haven't earned. Our compliance programme — including formal data processing terms and third-party audit — is in progress, and this page will carry the specifics as they're completed rather than as they're planned.
If you have a security review process or specific requirements, get in touch. We'd rather answer your real questions directly than point at a logo.
FAQ
Security questions
- How does SellZyme access my Amazon account?
- Through the official Amazon Advertising API using OAuth authorisation, requesting only the scopes required for the features you enable. SellZyme never asks for or stores your Seller Central password.
- Can I revoke SellZyme's access?
- Yes, at any time — through Amazon's own authorisation controls or from within SellZyme. Revoking access stops all automation immediately.
- What limits what SellZyme can do to my account?
- Your autonomy level and guardrails. Autonomy is set per account and per action type, and hard limits such as daily spend ceilings and margin floors cannot be crossed by automation regardless of what it predicts.
- Is my account data used to train models for other customers?
- Predictions are made against your account's own history and context. Our data handling commitments are being formalised alongside our compliance programme, and will be published here — we'd rather document them properly than make a vague claim now.
Have a security review to run?
Send us your questionnaire or your questions. We'll answer what we can and tell you plainly what's still in progress.