Security and traceability
Use verified access, limited data, protected event delivery and linked records throughout eligibility, calculation, issuance and reconciliation.
This page describes the security boundaries and controls relevant to Rebate Cards. It does not claim that any control or provider can prevent every error, misuse, breach, loss or dispute.
Control model
The merchant, Shopify connection, verification flow, Rebate Cards platform and card providers handle different data and decisions. Security begins by keeping those boundaries explicit.
Security layers
Collect only what is needed, limit access by responsibility and retain enough history to explain a decision or correction.
Account controls protect merchant access while staged enablement limits sensitive capabilities to the verified and approved program state.
Use only the Shopify, contact, verification and card-related data required for onboarding, eligibility, issuance, support and defined records.
iComply provides the workflow used to verify the company and relevant people during onboarding and review.
The native connection uses authorized store access and supported events as the commerce source for customer, order, fulfillment and refund decisions.
Protect credentials and sensitive values in the systems responsible for them, while keeping card-provider operations within the applicable provider boundary.
Preserve the relationship between the source event, rule version, calculation, approval, card status and every later adjustment.
Security sequence
The security review should follow the path the real data and approved rebate value will take.
Confirm the company and relevant people through the iComply workflow before sensitive program capabilities are enabled.
Confirm the Shopify store, requested access and supported event scope required by the approved program.
Assign roles for rules, funding, calculation review, card actions, refunds, support and reconciliation.
Confirm that event failures, duplicates, rule changes, adjustments and provider responses retain a usable history.
Security outcomes
The goal is a program that can authenticate access, trust its source events, explain value movements and correct exceptions proportionately.
Capabilities and data are available according to the verified business, approved program and operating responsibility.
Supported Shopify events remain tied to the store, customer, order and effective program rule.
Calculation, issuance, refund, reversal and reconciliation records preserve the reason and authority for each change.
Common questions
No. iComply provides verification services. Card issuance and payment functionality are handled through the applicable card providers and program agreements.
The approved scope can include supported store, customer, order, line-item, fulfillment and refund data needed for eligibility, calculation, adjustment and reconciliation.
No. Controls can reduce exposure, detect unusual events and support investigation and correction, but they cannot guarantee that every misuse, error or loss will be prevented.
Use depends on the payment network, issuer, program, jurisdiction, merchant category or other controls, available balance and applicable card limits.
Verified Shopify onboarding
Open your Shopify account, authorize the store and complete the required review before protected self-service capabilities are enabled.
Open your Shopify account