Security of your ORVENDI account and store

Protect your sign-in

Seller accounts offer TOTP two-factor authentication with a compatible authenticator app and recovery codes. Enable it in your account security settings and keep the recovery codes separately in a safe place. Sensitive operations require recent authentication. Use a unique password and protect the email account you use for your business: someone who controls that mailbox may try to recover your ORVENDI account. Never share a sign-in code with another person.

Review sessions and protect information in transit

The seller workspace lets you review your sessions and revoke other sessions if you suspect an unfamiliar sign-in. ORVENDI checks access rights and limits attempts on sensitive actions. The production website uses HTTPS to protect information while it travels between browser and server; HTTPS alone does not establish the security of the entire application. Contact support promptly about suspicious access, without sharing a password, recovery code or private customer information.

Understand payment provider responsibilities

The ORVENDI subscription and payments from your store’s customers are separate flows. Available methods depend on seller configuration, country and eligibility with the provider. Using Stripe does not certify ORVENDI as PCI DSS compliant: responsibilities depend on the integration and applicable requirements. Review suspicious orders and disputes before shipping. No technical control guarantees the absence of payment fraud, and a test payment flow cannot collect real money.

Frequently asked questions