Our approach is based on several principles:
Access to information should be limited to what is necessary for a person's or system's legitimate responsibilities.
We seek to access and retain only the information required to provide the applicable service.
Information transmitted between systems should use appropriate secure communication protocols.
Customer information is logically separated to reduce the risk of unauthorized access between customers.
Relevant systems and activities may be logged and monitored to help identify security-related events.
Security Governance & Risk Assessment
Sterling Edge maintains a risk-based approach to identifying, assessing, and addressing security risks affecting systems that process customer or Amazon information.
Security risks are evaluated based on factors including the type and sensitivity of information involved, potential impact, likelihood of unauthorized access, system exposure, and applicable contractual or regulatory requirements.
Identified risks are addressed through appropriate technical, administrative, and operational controls. Security practices and identified risks are reviewed periodically and when significant changes are made to systems, services, or the way Amazon Information is processed.
Where supported by the applicable system, information transmitted between Sterling Edge systems and connected services is protected using secure communication protocols such as HTTPS/TLS.
Where information is stored by third-party infrastructure providers, applicable storage-security controls depend on the provider and infrastructure used.
We seek to use appropriate encryption and security controls for information according to its sensitivity and the system processing it.
Access to customer and Amazon information is restricted according to legitimate business requirements.
Access may be controlled through:
User authentication
Role-based permissions
Administrative access restrictions
Service-specific permissions
Account-level controls
Restricted access to production systems
Personnel are provided access only where necessary for their responsibilities.
Where Sterling Edge applications connect to Amazon through applicable APIs, access is established through Amazon's authorization mechanisms.
The application uses the permissions and roles applicable to the authorized service.
Sterling Edge does not require Amazon sellers to provide their Seller Central passwords for API authorization.
Amazon API requests are authenticated according to Amazon's applicable API mechanisms. Amazon's SP-API documentation describes authenticated API requests and associated response mechanisms.
Sterling Edge services may support multiple customers.
Where multiple customers are supported, we seek to logically separate customer information so that information associated with one customer is not unintentionally accessible to another customer.
Application access controls are designed around the relevant customer/account context.
Administrative access to systems containing customer or Amazon information is restricted.
Where appropriate, administrative access is subject to:
Authentication
Access permissions
Need-to-know principles
Logging
Monitoring
Periodic review
Depending on the applicable environment, we may maintain technical logs and monitoring information to help:
Identify unauthorized activity
Investigate security events
Troubleshoot system issues
Monitor system performance
Support incident investigations
Security logs may contain technical information necessary for security and operational purposes.
We seek to identify and address security vulnerabilities affecting systems used to provide Sterling Edge services.
Security updates and patches are applied according to the nature and severity of the relevant issue and the systems affected.
Sterling Edge maintains procedures for identifying, assessing, responding to and documenting suspected security incidents involving information handled in connection with its services.
Where an incident is identified, we assess its nature and potential impact, take appropriate steps to contain and investigate it, and implement corrective measures where necessary.
Where an incident affects Amazon Information, Sterling Edge will follow applicable Amazon security and data-protection requirements, including any applicable notification obligations and timelines.
We maintain procedures for escalating security incidents to the appropriate personnel and documenting relevant response actions.
Sterling Edge maintains a documented incident response process for suspected or confirmed security incidents involving our systems, customer information, or Amazon Information.
The incident response process includes defined responsibilities for identifying, assessing, containing, investigating, remediating, and recovering from security incidents.
Depending on the nature and severity of an incident, the response process may include:
Detection and identification — Identify and record suspected security events.
Initial assessment — Determine the nature, severity, affected systems, and potential information involved.
Escalation — Escalate significant incidents to the personnel responsible for security and incident response.
Containment — Isolate affected systems, accounts, credentials, or access paths where appropriate.
Investigation — Investigate the cause, scope, timeline, and potential impact of the incident.
Evidence and log preservation — Preserve relevant system logs, records, and other available evidence needed for investigation.
Eradication and remediation — Remove the identified cause of the incident and implement appropriate corrective measures.
Recovery — Restore affected systems and services in a controlled manner and verify their operation.
Impact assessment — Determine whether customer information or Amazon Information was affected.
Notification — Make required notifications to affected parties, regulators, and Amazon where applicable.
Post-incident review — Review the incident, identify lessons learned, and implement corrective or preventive measures where appropriate.
Security incidents involving Amazon Information are handled in accordance with applicable Amazon requirements and contractual and legal obligations.
Amazon Security Incident Notification
If Sterling Edge detects a security incident involving Amazon Information, we will notify Amazon at:
security@amazon.com
Sterling Edge's incident response procedure requires notification without undue delay and within 24 hours of detection, subject to applicable Amazon requirements.
Where appropriate, the notification will include available information regarding the nature of the incident, affected systems or information, actions taken to contain and remediate the incident, and any additional information reasonably requested by Amazon.
Security & Incident Response Reviews
Sterling Edge reviews its security and incident response procedures at least every six months and following significant security incidents or material changes to systems or services.
Reviews may consider:
Changes to systems and infrastructure
Changes to Amazon API integrations
Access controls
Security incidents and security events
Vulnerability findings
Incident response effectiveness
Data handling practices
Third-party services
Required corrective actions
Identified improvements are incorporated into the applicable security and operational procedures.
Sterling Edge maintains a process for identifying material organizational changes that may affect its Amazon Solution Provider activities.
Where required under applicable Amazon agreements or requirements, Sterling Edge will notify Amazon of applicable organizational changes within the required timeframe, including changes requiring notification within 30 days.
Employee Access and Data Protection
Access to Amazon Information is limited to the business owner and authorized internal employees who require it to perform their assigned responsibilities.
Access is restricted according to business needs, and Amazon Information is used only for authorized service purposes. External contractors and third-party service providers are not given access to Amazon Information.
Suspected security incidents involving Amazon Information are assessed and handled under our incident-response procedures. We notify Amazon at security@amazon.com without undue delay and within 24 hours of detecting a security incident involving Amazon Information, in accordance with applicable Amazon requirements.
Sterling Edge does not share Amazon Information or customer business information with other customers, partner companies, or outside organizations for their independent use.
Where third-party technology or infrastructure is used to operate Sterling Edge services, access to information is restricted to what is technically and operationally necessary for the applicable service.
Third parties are not permitted to use Amazon Information for their own independent purposes.
Data Retention & Disposal
We seek to retain customer and Amazon information only for as long as reasonably necessary for the applicable service and legitimate legal, security, contractual, and business requirements.
When information is no longer required, we seek to delete or securely dispose of it in accordance with applicable retention requirements.
Security & Amazon Information
Amazon information is treated as confidential business information.
Sterling Edge does not sell Amazon information.
We do not intentionally provide one customer's Amazon information to another customer.
Access is restricted according to applicable business and technical requirements.
Security Monitoring & Logging
Sterling Edge uses appropriate logging and monitoring mechanisms for systems handling customer or Amazon information.
Security and operational logs may be used to:
Detect unauthorized access
Identify suspicious activity
Investigate security incidents
Establish relevant incident timelines
Support incident-response investigations
Monitor system availability and performance
Support security and operational reviews
Where a security incident is suspected, relevant available logs and records are preserved to support investigation and remediation.
Security Responsibilities
Personnel with responsibilities involving customer or Amazon information are expected to follow applicable security, confidentiality, access-control, and incident-response procedures.
Security responsibilities are assigned according to job functions and may include:
Protecting confidential information
Using authorized systems and accounts
Following access-control requirements
Reporting suspected security incidents
Protecting authentication credentials
Participating in security and incident-response activities where applicable
Personnel are not permitted to use Amazon Information for purposes outside their authorized business responsibilities.
No internet-connected system can be guaranteed to be completely secure.
Security measures are therefore designed to reduce risk rather than eliminate every possible security threat.
We continuously review our technology and operational practices as our services develop.
Responsible Security Disclosure
If you believe you have identified a security vulnerability affecting a Sterling Edge website or application, please contact us promptly.
Security Contact:
security@sterlingedge.online
Please do not publicly disclose sensitive vulnerability information before allowing us a reasonable opportunity to investigate.
Do not include passwords, Amazon credentials, access tokens, or other secret authentication information in a security report.
As Sterling Edge's technology platform develops, we may update our security controls and this page to reflect material changes to our security practices.
Last Updated: 19 July 2026
Independent Service Provider
Sterling Edge is an independent service provider operated by Texxo Limited.
Sterling Edge is not affiliated with, endorsed by, or sponsored by Amazon unless expressly stated otherwise.
