SECURITY
How Ready-Cart handles your data
Where partner data is stored, who can reach it, how access is controlled, and what is not in place yet. Written for the IT or operations person reviewing Ready-Cart before connecting data to it.
Where data lives
- Application: Cloudflare Workers (edge compute).
- Structured data: Cloudflare D1 (SQLite).
- Files and images: Cloudflare R2.
- Data residency: United States by default.
Sign-in and sessions
- Email and password (passwords are stored hashed), or Google sign-in (OAuth 2.0).
- Session cookies are HMAC-signed.
- Sessions can be revoked per contact.
- When a password is set, a notice goes to the account owner.
Tenant isolation
- Every partner portal is its own tenant on its own hostname (for example, yourbrand.readycart.ai). The hostname resolves to exactly one tenant.
- A session is minted for that tenant and refused on any other tenant’s host.
- Every dealer-scoped read and write passes through one tenant gate with per-role ownership checks.
- There is no global-admin bypass. Ownership is a membership row, revocable with one delete.
- Cross-tenant isolation is covered by an automated test suite that runs before every deploy.
AI and agent access
- Optional. A portal owner can connect an AI assistant through OAuth 2.0 (PKCE) to a scoped MCP endpoint.
- Grants are per tenant, scoped, auditable and revocable.
- Every call is logged.
Audit and logging
- Order submissions are stored as immutable snapshots.
- Edits to shared records carry an audit trail.
- Unhandled errors are logged server-side.
Backups and recovery
- D1 point-in-time recovery, 30 days.
- Dated full exports.
- Versioned deploys with one-step rollback.
- Transactional mail is sent through Resend from verified sending domains: readycart.ai, and partner domains on request.
- Sending domains use SPF, DKIM and DMARC.
- Images in email use signed, expiring URLs. Nothing is public.
Your data
- The partner owns its catalog, dealer and order data.
- Export on request.
- Deletion on request.
- Security questions, export and deletion requests: theo@fourseasonco.com.
What we don’t have yet
- No SOC 2 report.
- No third-party penetration test on file.
- Ready-Cart is a single-operator company. The named owner is Theo Anest.