Audit report
Order Tagger
Broad accessReach : broadSensitive Accessby Union Works Apps · Orders and shipping · Shopify App Store
Auto Tag and Manage Orders - Order Management Automation
Key insights
- ◆Built for Shopify badge present (signals Shopify-vetted performance and integration baseline).
- ◆Acquired by Shop Circle from original developer Union Works in late 2021; Shopify listing still attributes 'Union Works Apps' as publisher while ops/privacy/security run under Shop Circle.
- ◆Publisher operates a dedicated security/bug-bounty program at security.shopcircle.co.
- ◆4.9/5 with 213+ reviews; no public CVE or breach attributed to the app or to Shop Circle as a publisher.
Top findings
Analysis summary
Auto Tag and Manage Orders - Order Management Automation
- ◆Built for Shopify badge present (signals Shopify-vetted performance and integration baseline).
- ◆Acquired by Shop Circle from original developer Union Works in late 2021; Shopify listing still attributes 'Union Works Apps' as publisher while ops/privacy/security run under Shop Circle.
- ◆Publisher operates a dedicated security/bug-bounty program at security.shopcircle.co.
- ◆4.9/5 with 213+ reviews; no public CVE or breach attributed to the app or to Shop Circle as a publisher.
- ◆Publisher domain shopcircle.co has HSTS and partial CSP (frame-ancestors none, block-mixed-content), strong baseline TLS.
- ◆Data residency unclear, publisher is UK-based but policy explicitly permits international transfers without naming jurisdictions.
This section is available to signed-in users
Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.
Get startedOAuth scopes requested
These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.
| Scope | Sensitivity | Why we flag it |
|---|---|---|
read_customers | High | PII access (name, email, phone, address, geo/IP), required for tagging by customer attributes. |
write_customers | High | Customer tag mutations, broad write surface on PII records. |
read_orders | High | Full order history including line items and customer linkage. |
write_orders | High | Order tag mutations and backdating; one critical review reported a backdating error impacting 400 orders, indicating real write blast radius. |
read_products | Medium | Product/inventory/collection read needed for product-attribute tagging rules. |
write_products | Medium | Edit access to product inventory and collections. |
read_fulfillments | Medium | Fulfillment, returns, shipping data read for tag triggers. |
write_fulfillments | Medium | Fulfillment write capability. |
read_files | Low | Shopify admin file viewing for QR-code asset workflow. |
write_files | Low | Generates and assigns QR-code assets to admin files. |
read_locations | Low | Location data viewing for multi-location tag logic. |
read_customersPII access (name, email, phone, address, geo/IP), required for tagging by customer attributes.
write_customersCustomer tag mutations, broad write surface on PII records.
read_ordersFull order history including line items and customer linkage.
write_ordersOrder tag mutations and backdating; one critical review reported a backdating error impacting 400 orders, indicating real write blast radius.
read_productsProduct/inventory/collection read needed for product-attribute tagging rules.
write_productsEdit access to product inventory and collections.
read_fulfillmentsFulfillment, returns, shipping data read for tag triggers.
write_fulfillmentsFulfillment write capability.
read_filesShopify admin file viewing for QR-code asset workflow.
write_filesGenerates and assigns QR-code assets to admin files.
read_locationsLocation data viewing for multi-location tag logic.
This section is available to signed-in users
Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.
Get startedThis section is available to signed-in users
Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.
Get startedNetwork surface
- Primary domain
- shopcircle.co
- TLS grade
- A
- HSTS
- Enabled
- CSP
- Enabled
HSTS max-age ~91 days; partial CSP (block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests). X-Frame-Options DENY, X-Content-Type-Options nosniff. Behind Cloudflare.
Compliance & certifications
Privacy policy present and Shop Circle UK-based (suggests GDPR applicability in practice) but no certifications explicitly declared. No SOC2/ISO27001/PCI/HIPAA references.
Privacy policyPublisher reputation
- Publisher
- Union Works Apps
- Verified Shopify Partner
- Yes
- Years active
- 8
- Other apps
- 30
AI / LLM usage
Order/customer attributes are processed by an internal 'SCAIL' AI layer for natural-language workflow generation; underlying model provider undisclosed.
unknown