Starship
starship / search / northland-fulfillment-1

Audit report

Northland Fulfillment

Broad accessReach : moderateSensitive Access

by Northland Laboratories · Orders and shipping · Shopify App Store

Orders and shipping
Risk level
Broad access
Executive summary

Affordable - Reliable - Fast

Key insights

  • ◆Canadian 3PL fulfillment app by Northland Laboratories targeting cross-border ecommerce shipments.
  • ◆Publisher site (northlandfulfillment.com) is WordPress hosted on WP Engine with Cloudflare in front; HTTPS with HSTS preload enabled.
  • ◆Privacy policy is hosted on a Northland-controlled subdomain and is sparse: no sub-processors, no residency, no certifications, no retention SLA.
  • ◆OAuth scope list is not exposed on the public App Store page snapshot collected.

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Affordable - Reliable - Fast

Key insights
  • ◆Canadian 3PL fulfillment app by Northland Laboratories targeting cross-border ecommerce shipments.
  • ◆Publisher site (northlandfulfillment.com) is WordPress hosted on WP Engine with Cloudflare in front; HTTPS with HSTS preload enabled.
  • ◆Privacy policy is hosted on a Northland-controlled subdomain and is sparse: no sub-processors, no residency, no certifications, no retention SLA.
  • ◆OAuth scope list is not exposed on the public App Store page snapshot collected.
  • ◆No 'Built for Shopify' badge; only 1 review (5.0) indicates a niche/new app.
  • ◆No public CVEs, breach reports, or security incidents found tied to Northland Laboratories or this app.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_orders
Medium

Vous devez lire les commandes à expédier, ce qui expose des données clients et de livraison, induit de la fonction déclarée de l'app.

write_fulfillments
Medium

Vous devez créer et mettre à jour les expéditions pour marquer les commandes traitées, induit de la fonction déclarée de l'app.

read_fulfillments
Medium

Vous devez consulter l'état des expéditions existantes, induit de la fonction déclarée de l'app.

read_shipping
Low

Vous devez lire les paramètres de livraison pour acheminer les commandes vers le marché canadien, induit de la fonction déclarée de l'app.

read_products
Low

Vous devez identifier les articles des commandes à expédier, induit de la fonction déclarée de l'app.

read_inventory
Low

Vous devez consulter les niveaux de stock liés au traitement des commandes, induit de la fonction déclarée de l'app.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
northlandfulfillment.com
TLS grade
A
HSTS
Enabled
CSP
Missing

HTTPS healthy; HSTS with includeSubDomains and preload; X-Frame-Options=SAMEORIGIN and X-Content-Type-Options=nosniff present; CSP header absent. Site is WordPress on WP Engine behind Cloudflare.

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

No certifications or regulatory frameworks named in privacy policy. Policy claims no third-party sharing but lacks data residency, retention SLA, and sub-processor list.

Privacy policy
Track record

Publisher reputation

Publisher
Northland Laboratories
Verified Shopify Partner
No
Years active
0
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.