Starship
starship / search / tiktok-sales-channel

Audit report

TikTok

WatchReach : moderate

by TikTok / ByteDance · Sales Channels · Shopify App Store

Sales Channelsv3.4.1
Risk level
Watch
Executive summary

Canal officiel TikTok / ByteDance. Risque High, sous-traitant ByteDance, environnement réglementaire UE/US tendu (CLOUD Act / Lois chinoises), transferts internationaux scrutés.

Key insights

  • ◆Pixel TikTok + Conversions API + TikTok Shop.
  • ◆Risque High, sous-traitant ByteDance, climat réglementaire tendu.
  • ◆Plusieurs enquêtes en cours par autorités UE et US (transferts, mineurs).
  • ◆Project Clover (UE) en déploiement pour résidence européenne.

Top findingsview all

  • High
    Sous-traitant ByteDance
  • High
    Pixel + Conversions API
Synthesis

Analysis summary

Canal officiel TikTok / ByteDance. Risque High, sous-traitant ByteDance, environnement réglementaire UE/US tendu (CLOUD Act / Lois chinoises), transferts internationaux scrutés.

Key insights
  • ◆Pixel TikTok + Conversions API + TikTok Shop.
  • ◆Risque High, sous-traitant ByteDance, climat réglementaire tendu.
  • ◆Plusieurs enquêtes en cours par autorités UE et US (transferts, mineurs).
  • ◆Project Clover (UE) en déploiement pour résidence européenne.
  • ◆Note merchants 4,2, fonctionnement opérationnel correct.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_products
Low

Sync catalogue TikTok Shop.

read_orders
Medium

Attribution + TikTok Shop.

read_customers
High

Conversions API.

write_pixels
High

Pixel TikTok.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
tiktok.com
TLS grade
A
HSTS
Enabled
CSP
Enabled

TLS moderne, HSTS, CSP.

Posture

Compliance & certifications

GDPR webhooks Pass
SOC 2 Type II Fail
ISO 27001 Pass
PCI DSS Fail

ISO 27001. RGPD avec TIA recommandée pour les marchands UE. SOC 2 non communiqué.

Privacy policy
Track record

Publisher reputation

Publisher
TikTok / ByteDance
Verified Shopify Partner
Yes
Years active
5
Other apps
0
Past incidents
  • ●2023, Irish DPC amende 345M€ (mineurs).
  • ●2024, CNIL amende 5M€ (cookies).
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.