Planned Amazon SP-API data handling

Enreship plans an initial United States launch only after Amazon grants production access and Enreship completes implementation and validation. Canada and Mexico are staged future expansions that require localization, carrier, address, tax, privacy, and operational testing.

Amazon and Selling Partner API are trademarks of Amazon.com, Inc. or its affiliates. Their appearance identifies the planned platform connection and does not imply a partnership, certification, approval, or endorsement.

Enreship's application requests Product Listing, Inventory and Order Tracking, Amazon Logistics/Amazon Shipping, Direct-to-Consumer Shipping (Restricted), and Amazon Fulfillment/FBA capabilities.

Planned merchant-fulfilled workflows are:

• Seller-authorized order import.
• Product listing and inventory-quantity synchronization.
• Carrier rate retrieval and label creation.
• Shipment confirmation and tracking updates returned to Amazon.

Planned FBA workflows are limited to inbound shipments to Amazon fulfillment centers and FBA inventory/shipment status. FBA functionality is not currently implemented or approved.

If production access is approved, each seller will authorize Enreship through Amazon's OAuth consent flow. Enreship will request only roles needed for the functions Amazon approves. Enreship never asks for or stores a seller's Amazon password.

A seller may revoke Enreship through applicable Amazon authorization controls or request disconnection through Enreship support. On revocation or termination, Enreship will stop new access, invalidate stored authorization credentials, and delete Amazon Information as required by applicable Amazon policy, subject only to a documented legal requirement.

Depending on the approved roles and seller-selected workflow, Enreship plans to process order identifiers and status, product and listing identifiers, SKUs and quantities, shipment and package details, carrier/service selections, label results, tracking identifiers and events, and FBA inbound/inventory/shipment status.

Restricted PII is limited to the shipping-required recipient name, delivery address, and phone number when available. It is used only to fulfill the seller-authorized order, obtain shipping services, create the label, confirm shipment, provide tracking, handle delivery exceptions, and meet documented legal obligations.

Amazon PII is not used for advertising, marketing, buyer profiling, unrelated analytics, or enrichment. Amazon Information is never sold or brokered.

Amazon Information will be disclosed only to the infrastructure provider that operates the service and to the carrier selected for the shipment. The named, repository-verified provider list, data categories, purposes, PII status, and restrictions are maintained in Privacy Policy section 4.

Amazon Shipping is a requested capability, not a currently active carrier integration. Its data flow and contracting entity must be documented before production use. Transactional email, customer support, and telemetry systems are not authorized to receive Amazon Restricted PII unless Enreship documents a policy-compliant need, contract, controls, and retention rule.

Amazon Restricted PII will be deleted no later than 30 days after delivery, including through enforced backup lifecycle and expiration controls, unless a documented legal requirement applies. Data needed only transiently for a rate or label request will be removed sooner when it is no longer required.

After seller revocation, authorization termination, or application termination, Enreship will delete Amazon Information and credentials in accordance with applicable Amazon policy. Deleted data will not be restored from backup into active production use; backup copies will expire through the same maximum lifecycle.

Enreship limits application access by authenticated user and role and uses HTTPS endpoints for connected services. Access to Amazon Information will be limited to personnel and systems that need it for the seller-authorized workflow.

Enreship uses Planck Proof for regular agentic API penetration testing of authorized API assets. This statement does not claim a specific monthly or annual cadence, a certification, or Amazon approval.

This page intentionally does not assert MFA coverage, quarterly access reviews, 24-hour access removal, biweekly log review, 12-month log availability, six-month incident-plan reviews, 24-hour Amazon notification, monthly vulnerability scans, annual third-party testing, network appliances, endpoint controls, encryption-key configuration, backup test cadence, or RPO/RTO values. Those controls require product-owner evidence before publication.

Enreship will investigate suspected unauthorized access, contain confirmed incidents, preserve relevant evidence, and notify Amazon, affected sellers, and authorities within the timing required by applicable Amazon policy and law. No shorter response or notification commitment is published without verified operational evidence.

Report a suspected issue to info@enreship.com.

Enreship LLC
933 Hylton Rd, Pennsauken, NJ 08110, United States

Email: info@enreship.com · Phone: 917-426-9625

Related pages: Privacy Policy, Security, Terms, and Data Processing.