Token handling
Shopify access tokens stay server-side in a dedicated token store — never sent to the frontend.
Tenant isolation
Queries are scoped by organization and store from the session. Merchants don’t see each other’s data.
Least privilege
OAuth scopes are limited to what Decision Intelligence needs for sync and analysis.