Skip to content
Log inStart free

Security for enterprise

Secure by design.

Your payment provider keeps the card number and Tanqory keeps a token. Every sign-in and every change in the admin is guarded and recorded.

  • Card data stays with your providerTokens, not card numbers, reach your store.
  • Strong sign-in for every seatMFA, passkeys and backup codes for your staff.
  • AI that asks firstThe assistant acts in the admin only after you confirm.
Talk to salesFollow a card payment
A woman at a bright kitchen table pays on her phone while holding a bank card.

Order #1048, paid

CardShown to your team
Visa 4242
Card number on TanqoryKept by your provider
None
Transaction feeEvery order
0%

Follow one card payment

Where a card number goes, and where it never goes

A buyer at Ostra Ceramics pays $186.00 for a dinner set. Watch the card number leave their browser, become a token at the payment provider, and reach the order as a token only.

  1. 01 Checkout

    The buyer types their card

    The buyer's browser

    4242 4242 4242 4242
    Card number
    4242 4242 4242 4242
    Typed into
    Your provider's secure field
    Connection
    Encrypted (TLS)

    4242 4242 4242 4242

  2. 02 Provider

    Your provider keeps the card

    Your payment provider

    Secure field
    Card number
    Held by the provider
    Hands back
    tok_1Qx8...7Lp
    Charge
    $186.00 authorised

    tok_1Qx8...7Lp

  3. 03 Tanqory

    Your order holds a token

    Your Tanqory admin

    Dinner set$186.00
    Order
    #1048, paid
    Card shown as
    Visa 4242
    Card number stored
    None

    $186.00 payout

  4. 04 Payout

    The money lands in your account

    Your provider account

    $186.00
    Order total
    $186.00
    Provider rate
    Your own, no markup
    Tanqory transaction fee
    0%
See payments

Ostra Ceramics, the order and every figure here are an example. Stripe is shown; PayPal and Braintree work the same way.

Every store, every plan

Protection in every layer, on by default

There is nothing to install and no security app to buy. Each layer below runs on every Tanqory store from the first day.

  • Cloudflare

    Edge, last hour

    FirewallIn front of every request
    On
    DDoS protectionAlways on
    On
    API shieldAdmin and storefront APIs
    On

    A guarded network

    Every store sits behind Cloudflare: a web application firewall, DDoS protection and an API shield in front of your storefront and admin.

  • Ostra Ceramics•••• •••• •••• 4242Visa
    tok_1Qx8...7LpCard number stored: None

    Card data kept out

    Card numbers are entered in your provider's secure field and turned into a token there. Your store and your team only ever see the token and the last four digits.

  • https://ostra.example

    ostra.example

    SSL certificateFree on every plan
    Active
    In transit
    TLS
    SecretsProvider keys
    AES-256

    Encrypted everywhere

    Traffic is encrypted with TLS on every page, with free SSL for your domains. Data is encrypted at rest, and secrets such as provider keys get their own AES-256 layer.

  • Cloudflare Turnstile

    Sign-in attempts

    Bot checkSign-in and sign-up
    Passed
    RetriesSame address
    Slowed
    New deviceEmail alert to the owner
    Sent

    Bots stopped at sign-in

    A bot check guards sign-in and sign-up, and repeated attempts are slowed down, so password guessing gets nowhere.

  • Media upload

    dinner-set.jpgType checked
    Clean
    price-list.pdfVirus scan
    Clean
    invoice.exeNot an allowed type
    Blocked

    Uploads scanned

    Every file uploaded to your store is checked for its real type and scanned for viruses before it is stored or shown.

  • Store activity

    Payment settings changedMaya R., 09:14
    Logged
    Staff permission updatedDev P., 10:02
    Logged
    Activity exportedCSV for the audit
    Done

    Every change recorded

    The store activity log records who changed what and when, across settings, payments and staff. Filter it and export it for your auditors.

People and access

The right people in, everyone else out

Most incidents start with a stolen password or a seat with too much reach. Tanqory gives every seat strong sign-in and only the access its job needs.

MFA and passkeys on every seat

Staff sign in with an authenticator app, a text code or a passkey, with backup codes for a lost phone. Owners can require it for everyone.

A man at a standing desk holds up a small key beside his laptop.

Sign-in for Dev P.

PasskeyThis laptop
On
Authenticator appTime-based codes
On
Backup codes8 left
Saved

AI native, with you in charge

AI that saves hours and never acts alone

The assistant takes routine admin work off your team. Anything that changes your store waits for a person to confirm, and every confirmed change lands in the activity log.

  • Changes wait for a yes

    Ask for a price change or a staff update and the assistant prepares it. Nothing is saved until you confirm.

  • Orders flagged for you

    Orders that look risky are flagged with the reasons, so your team reviews a few instead of all of them.

  • Your tools connect safely

    Connect Claude and other AI assistants through the Tanqory MCP server with a secure sign-in, and revoke it any time.

See Tanqory AI

Your data, your provider

Leave whenever you like, with everything

Security also means not being locked in. Your payments run through your own provider account, and your store data exports as files you keep.

  • Export products, customers, orders, discounts and tax reports as CSV

  • Use your own Stripe, PayPal or Braintree account, with a 0% Tanqory transaction fee

  • Pay your provider's own rate, never marked up

  • Set customer privacy and consent in the admin

See pricing

Exports, Ostra Ceramics

orders.csvAll time
Ready
customers.csvWith consent status
Ready
activity.csvLast 90 days
Ready
Payment providerYour own account
Stripe

Security questions

A security lead in a grey suit opens an office door with an access card.

Does a card number ever pass through Tanqory?

No. At checkout the buyer types the card into your payment provider's secure field. The provider keeps the card and gives your store a token, and your order shows only the card brand and last four digits.

Which payment providers can I use?

Connect your own Stripe, PayPal or Braintree account, plus regional gateways for local payment methods. Tanqory charges a 0% transaction fee with any of them, and you pay your provider's own rate.

How do my staff sign in?

With a password plus a second step: an authenticator app, a text code or a passkey, with backup codes for a lost phone. Each person can see their signed-in devices and sign any of them out.

Can I limit what each staff member can do?

Yes. Each seat gets only the parts of the admin it needs: orders for the warehouse, payouts for finance, themes for an agency. You can change or remove access in one step.

Can I see who changed what?

The store activity log records changes to settings, payments, staff and more, with who made them and when. You can filter it and export it as a file.

Is my store encrypted?

Yes. Every page is served over TLS with free SSL for your domains, data is encrypted at rest, and secrets such as payment provider keys are encrypted again with AES-256.

Does the AI change things on its own?

No. The assistant prepares a change and waits for your confirmation before anything is saved, and every confirmed change appears in the activity log.

Bring your security team.

We walk them through your checklist with the product open: the payment path, sign-in, permissions and the activity log.

Talk to salesSee pricing

We use cookies

Necessary cookies keep the site working. With your permission we also use analytics and marketing cookies. Change your choice any time in Cookie settings.