Built to protect your codes and your account
Digital codes have real value the moment they’re issued. Here’s how DigiFulfill handles that responsibility.
Tenant isolation, enforced by the database
Merchant data is separated with database-level access rules, not just application checks — one merchant's orders and codes are never reachable from another merchant's session.
Two-factor authentication
Merchants can enable standards-based TOTP two-factor authentication, compatible with Google Authenticator, Authy, 1Password, and other authenticator apps.
No passwords in the wrong hands
We never ask for your Google account password. Google sign-in uses OAuth — DigiFulfill never sees or stores it.
Least-privilege code access
Digital codes are delivered by the system directly. Staff don't need standing access to your full code inventory to fulfill an order.
A record of sensitive changes
Changes to pricing, wallet balances, and account security settings are logged with who made the change and when.
Encrypted credentials
SMTP passwords and connected-account tokens are encrypted at rest and are never shown again in plain text after you save them.
Questions about a specific security requirement for your business? Get in touch.