Starship
starship / search / angelbooks

Audit report

AngelBooks

WatchReach : moderate

by Halo Solutions Ltd · Finances · Shopify App Store

Finances
Risk level
Watch
Executive summary

Integrated accounting & stock control for your online business

Key insights

  • ◆App is effectively unmaintained, no public update since August 2015 (~10 years).
  • ◆Publisher web presence is a placeholder page; no privacy policy, no security posture, no sub-processor disclosure.
  • ◆Scope of access (accounting, stock, sales) implies broad read of orders/products/customers though exact Shopify OAuth scopes are not exposed on the listing.
  • ◆Operates under UK jurisdiction (Halo Software Limited, Companies House #10856341, Bath, UK); financial-grade data without visible compliance certifications.

Top findingsview all

  • High
    Stale app with no updates since 2015
  • High
    Missing publisher transparency and security headers
Synthesis

Analysis summary

Integrated accounting & stock control for your online business

Key insights
  • ◆App is effectively unmaintained, no public update since August 2015 (~10 years).
  • ◆Publisher web presence is a placeholder page; no privacy policy, no security posture, no sub-processor disclosure.
  • ◆Scope of access (accounting, stock, sales) implies broad read of orders/products/customers though exact Shopify OAuth scopes are not exposed on the listing.
  • ◆Operates under UK jurisdiction (Halo Software Limited, Companies House #10856341, Bath, UK); financial-grade data without visible compliance certifications.
  • ◆No CVE or public breach record found tied to AngelBooks or Halo Software Limited (Bath); the unrelated 'HALO Branded Solutions' 2023 breach is a different US company.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_orders
High

Required for accounting/VAT reporting on Shopify sales. Includes PII (customer name/address) and order line items.

read_products
Medium

Needed for stock-level management and inventory reconciliation.

read_customers
High

Likely needed for invoicing/VAT records; exposes PII.

write_products
High

Stock-level synchronization implies write access to inventory; not explicitly disclosed but inferred from feature set.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
angelbooks.biz
TLS grade
unknown
HSTS
Missing
CSP
Missing

nginx/1.24.0 on Ubuntu; HTTPS works but no Strict-Transport-Security, no Content-Security-Policy, no X-Frame-Options, no Referrer-Policy headers returned. Site appears to be a static placeholder.

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

No accessible privacy policy. /privacy returns 404. No compliance certifications referenced on publisher site or App Store listing despite handling financial data (HMRC VAT returns).

Privacy policy
Track record

Publisher reputation

Publisher
Halo Solutions Ltd
Verified Shopify Partner
No
Years active
10
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.