Backup security and encryption

Sbit encrypts backups at rest with AES-256 and protects transfers with HTTPS/TLS. Access is controlled through Shopify authentication and app permissions.

Review the security dashboard in the app for encryption status and data-handling practices.

Guides

Security

How backups are encrypted, stored, and access-controlled in Sbit: Store Backup & Restore.

Last updated: May 15, 2026

Overview

The Security page shows how your store backup data is protected. Backups are stored in secure, encrypted cloud storage with protection at rest and in transit. Access is limited by authentication and permissions so only authorized users can view or restore data.

Security dashboard with data protection hero, feature cards, security overview, and recent security activity
Security - encrypted backups, feature status cards, overview metrics, and recent activity log.

Data protection

At the top of the page, the hero section confirms your backups are protected:

  • Encrypted Backup badge - backups use encryption before they are written to storage.
  • Your Data is 100% Protected - summary that data is encrypted at rest and transferred over HTTPS, with access controlled by auth and permissions.

Three capability pills appear below the description:

  • AES-256 at rest
  • HTTPS uploads & downloads
  • Auth & access policies

Security features

Four cards summarize active protections. Each shows an Active status when enabled:

Data Encryption

AES-256 encryption for all backup data at rest.

Active

Secure Storage

Encrypted cloud storage with redundancy.

Active

Access Control

Role-based permissions and authentication.

Active

Compliance

Industry-standard security practices.

Active

Security overview

The Security Overview panel lists current settings:

  • EncryptionAES-256 before write (at rest)
  • Secure ConnectionHTTPS / TLS transfers
  • Access ControlRole-based permissions
  • ComplianceIndustry standards supported

When everything is healthy, a green status bar shows: Security Status: All Systems Secure.

Recent activity

Recent Security Activity logs encryption, storage checks, scans, and permission changes. Each row includes a timestamp and a Success badge. Use View All to open the full activity history.

  • Backup data encrypted successfullyMay 12, 2026 at 10:30 AMSuccess
  • Secure backup storage verifiedMay 12, 2026 at 10:25 AMSuccess
  • Security scan completedMay 11, 2026 at 3:15 PMSuccess
  • Access permissions updatedMay 10, 2026 at 2:00 PMSuccess

Encryption at rest

A banner at the bottom of the Security page states that encryption at rest is always on for stored backups. Backups use AES-256 encryption at rest, and all uploads and downloads are protected with HTTPS/TLS. Access is limited by authentication and role-based permissions. The banner references common compliance frameworks (such as ISO 27001, HIPAA, and GDPR) as design goals - verify your own regulatory requirements with Stonebit InfoTech if you need certified compliance documentation.

Encryption at rest banner with compliance standards and Learn More About Security button
Encryption at rest banner - always-on protection and compliance standards reference.

Click Learn More About Security in the app for additional documentation or support resources about how Stonebit InfoTech handles backup security.