01
The boundary is the product.
Not a dashboard with security features bolted on. If buyer PII can reach your database through this system, we have built the wrong thing.
About
We passed the audit first, then built the way around it.
Data Border comes from the team that runs ShipStream WMS. We went through the Amazon security review for our own platform, learned exactly how expensive it is, and decided our customers should not each repeat it.
Origin
Why this exists.
ShipStream Data Border comes from the team behind ShipStream WMS, a warehouse management system built for high-volume fulfilment.
When the data protection requirements for Selling Partner API access tightened, we watched customers and partners hit the same wall. Warehouses that had printed Amazon shipping labels for years were suddenly choosing between a five-figure security programme and giving up Amazon Buy Shipping altogether.
Most of them are not technology companies. They run pick lines, not penetration tests. The requirements are reasonable — buyer addresses genuinely should be protected — but meeting them once per warehouse is an enormous duplication of effort.
We had already been through the review. We knew which controls the questionnaire actually asks about and what evidence satisfies it. So we built the boundary as a product: your systems send placeholders, the address resolves on our side of the line, the label prints on your printer, and the annual paperwork is ours.
Positions
Four things we are not flexible about.
Written down so you can hold us to them, and so the next person who joins knows what the arguments are already settled on.
02
Publish the numbers.
Prices, rate limits, allow-lists and the cost of the alternative are all on this site. Anything you cannot check is a claim, and claims are worth less.
03
Logistics operators are not security vendors.
Pick lines and forklifts, not penetration tests. Asking a 3PL to run a compliance programme is asking a restaurant to build a power station.
04
Day two is the real test.
Reprints, revoked sellers, blocked orders and the questionnaire that lands every year. Anyone can make the first label work.
The audit was ours. The labels are yours.
Create an account and post a label request against a sandbox seller, or read the security page if you want the controls before the pitch.