Security and AU hosting
Your data stays in Australia, and it stays yours
TierCommerce hosts customer data in Sydney, connects to your ERP with only the access it needs, and logs every change, sync and AI action.
- Customer data hosted in
- Sydney, Australia
- Support team in
- Brisbane, Australia
- Encryption
- In transit (TLS 1.2+) and at rest
- Audit log
- Every change, sync and AI action
How we protect your data
The same protections apply to every TierCommerce store, whatever your plan.
- Encrypted in transit (TLS 1.2+) and at rest
- Customer data hosted in Sydney, Australia
- Card payments tokenised by a PCI-compliant provider
- Role-based access for your staff and your customers
- An audit log of every change and sync
- ERP connections that use a least-privilege role
- Two-factor authentication and passkeys, required for admins
- ERP and payment credentials encrypted and never shown again
- API tokens that can never do more than the person who made them
Access that matches how your customers buy
Your customers see what they should, and do what they’re allowed to, without your team managing every login.
-
Head users run their own teams
A head user at each customer adds buyers and accounts-payable users and sets what each one can do.
-
Approvals before orders go through
Orders and quotes can need approval by spend limit, role or branch, across several levels.
-
Catalogues only the right people see
Show products, categories and prices only to the customers or groups they’re meant for.
Integrations you can trust with your ERP
Your ERP stays the source of truth. Our integrations only touch what they need, and you can see everything they do.
-
Built and maintained by us
Our native integrations are built in-house, not stitched together from third-party connectors.
-
Every sync logged
Each record that moves between your ERP and TierCommerce is logged, so you can see what changed and when.
-
Failed syncs can be replayed
If your ERP is down or rejects a record, the sync is kept and can be run again, so orders aren’t lost.
-
No order sent twice
Orders and payments are sent so a retry can never create a second one in your ERP.
-
Nothing switched off by mistake
If a nightly sync would remove more than 10% of your records, or any record failed, nothing is switched off until someone checks.
-
Ordering that keeps going
If your ERP goes down, buyers keep ordering. Orders wait and go in as soon as it’s back.
How our AI stays safe
The same rules apply to every co-worker, whatever it does.
-
A person approves when it isn’t sure
You set the confidence level. Anything below it waits for one of your team.
-
Every action is logged
Each order, quote or message is recorded against the document it came from.
-
The same permissions as your staff
Co-workers follow the same user roles and permissions as the people on your team.
-
Your data stays in Australia
Customer and order data is hosted in Sydney, Australia.
-
You see what each one did
A dashboard shows what each co-worker processed, how accurate it was and the time it saved.
Privacy, handled under Australian and New Zealand law
We handle personal information under the Australian Privacy Principles, and New Zealand’s Privacy Act 2020 for people in New Zealand. Our privacy policy explains what we collect and how to see, correct or delete it.
Security questions
Where is our data hosted?
Customer data is hosted in Sydney, Australia. Our team is in Brisbane and supports you in Australian business hours.
Do you store card numbers?
No. Card payments are tokenised by a PCI-compliant payment provider, so card numbers never sit in TierCommerce.
Can we control what each of our staff can see and do?
Yes. Staff and customer users have roles with fine-grained permissions, and AI co-workers follow the same permissions as the people on your team.
What happens if a sync with our ERP fails?
The failed record is logged and kept, and the sync can be run again once the problem is fixed. You can see the history of every sync.
Do staff have to use two-factor authentication?
Anyone who can change settings, billing, integrations, API tokens or theme code must use two-factor authentication. Staff can also sign in with a passkey.
Do you offer an uptime SLA?
An uptime SLA comes with our Enterprise plan. Talk to us about what your business needs.
How do we report a security issue?
Email [email protected] with the details. Please give us a chance to fix it before you tell anyone else.
See TierCommerce working in 30 minutes.
Tell us which ERP you run and the features that matter to you. We’ll walk you through a working store, end to end.