How SyncO protects your credentials.
The connector holds keys to both your storefront and your ERP. Here is what we do about that.
Credentials at rest
WooCommerce consumer keys and secrets, and Odoo passwords and API keys, are encrypted before they are written to the database. They are decrypted only in memory, at the moment a sync runs.
Credentials in transit
Connections to WooCommerce and Odoo are made over HTTPS. Over plain HTTP, WooCommerce requires OAuth 1.0a signed requests, which SyncO performs rather than sending credentials in the clear.
Webhook verification
Inbound WooCommerce webhooks are verified against the secret WooCommerce issued when the webhook was created. A payload that fails signature verification is rejected before it reaches any sync code.
Tenant isolation
Every connection is keyed by a site id derived from both the store URL and the account that connected it. Two accounts connecting the same store get separate rows and separate configuration; neither can read the other's.
Reporting a vulnerability
If you believe you have found a security issue, contact us with the details before disclosing publicly. We will confirm receipt and keep you updated on the fix.
See how SyncO fits your WooCommerce and Odoo workflow.
Connect a store, map your fields, and watch the first orders land in Odoo.
Get started free