Starship
starship / search / erply-pos-for-shopify

Audit report

Point of Sale (POS)

WatchReach : broad

by Point of Sale Inc · Places to sell · Shopify App Store

Places to sell
Risk level
Watch
Executive summary

Point of sale, inventory management and robust reporting

Key insights

  • ◆Erply is an Estonian-headquartered POS/ERP vendor; Shopify listing publishes under 'Point of Sale Inc'.
  • ◆EU customer data is stored in EU data centers; hosting provider claims ISO 27001 alignment.
  • ◆Log4j (CVE-2021-44228) was confirmed by Erply ops not to affect cloud.erply.com.
  • ◆No known public breach attributable to Erply or this Shopify app.

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Point of sale, inventory management and robust reporting

Key insights
  • ◆Erply is an Estonian-headquartered POS/ERP vendor; Shopify listing publishes under 'Point of Sale Inc'.
  • ◆EU customer data is stored in EU data centers; hosting provider claims ISO 27001 alignment.
  • ◆Log4j (CVE-2021-44228) was confirmed by Erply ops not to affect cloud.erply.com.
  • ◆No known public breach attributable to Erply or this Shopify app.
  • ◆App Store rating is low (1.9/5 over 6 reviews); not 'Built for Shopify' badged.
  • ◆Privacy policy does not mention any LLM/AI processing.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_products
Medium

Product catalog sync between Erply and Shopify.

write_products
High

Product creation/updates from POS into Shopify.

read_orders
High

Order sync to POS/ERP.

write_orders
High

Order/payment creation from POS into Shopify.

read_customers
High

Customer record syncing across platforms.

write_customers
High

Customer record creation/updates from POS.

read_inventory
Medium

Stock level sync.

write_inventory
High

Inventory adjustments from POS.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
erply.com
TLS grade
A
HSTS
Enabled
CSP
Missing

HSTS strongly enforced (max-age=63072000; includeSubdomains; preload). CSP is delivered only in Report-Only mode with permissive default-src *, so it does not enforce protections in browsers.

Posture

Compliance & certifications

GDPR webhooks Pass
SOC 2 Type II Fail
ISO 27001 Pass
PCI DSS Fail

ISO 27001 inherited from hosting provider. Privacy Shield references are stale post-Schrems II. No SOC2/PCI DSS/HIPAA claims found.

Privacy policy
Track record

Publisher reputation

Publisher
Point of Sale Inc
Verified Shopify Partner
No
Years active
0
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.