Security & Trust

Your business. Your data. Your control.

KeenEdge is designed to protect your Amazon seller account, safeguard your business information, and give you control over automated pricing decisions.

  • No Seller Central password

    You connect with Amazon SP-API credentials. KeenEdge never asks for your password.

  • Live repricing starts off

    A new connection sends no price updates until you turn live repricing on.

  • Revoke at any time

    You can end KeenEdge’s access to your Amazon account from Seller Central.

This page describes KeenEdge’s safeguards as of October 2026. It is not a certification or audit report, and no system is completely secure.

Amazon connection

Connected through Amazon’s Selling Partner API, not your password.

KeenEdge reaches your seller account through Amazon’s official Selling Partner API (SP-API). Granting that access is one decision. Letting KeenEdge change prices is another.

  • Amazon’s official interface

    KeenEdge uses SP-API, Amazon’s interface for software that works with seller accounts. You authorize access in your own Amazon account and give KeenEdge the SP-API credentials that result. KeenEdge checks them with Amazon before saving them.

  • No Seller Central password

    KeenEdge does not ask for your Seller Central password, and never needs it. Your KeenEdge sign-in is separate, and its password is handled by our sign-in provider rather than stored by KeenEdge.

  • Only what repricing needs

    KeenEdge reads listings, prices, competing offers, fees, FBA inventory and sales history, and receives pricing notifications. It does not request Amazon’s restricted access to buyer names, addresses or contact details. What your authorization allows is set by you in Amazon.

  • You can revoke access

    You can revoke KeenEdge’s authorization in Amazon Seller Central. KeenEdge’s access then stops working, and the connection shows as needing to be reconnected the next time KeenEdge contacts Amazon.

Two separate decisions

Depending on the permissions you grant in Amazon, your authorization can include the ability to update prices. KeenEdge’s own live-repricing control is what keeps price updates off until you choose otherwise.

See the setup steps
  1. 1 · You grant Amazon access

    KeenEdge can import your catalog and read prices, offers and fees. Nothing changes on Amazon. You can then add costs, set rules and run simulations.

  2. 2 · You turn on live repricing

    Only after this separate step does KeenEdge send eligible price updates to Amazon, and only within the floors, ceilings and change limits you set.

Your business data

How KeenEdge protects what you share.

Costs, supplier terms and pricing strategy are confidential business information. These are the safeguards that protect it.

  • Encryption

    Connections to the KeenEdge app and to Amazon use HTTPS. Data in our databases, file storage and secrets store is encrypted at rest with provider-managed keys.

  • Amazon credentials, set apart

    Your Amazon authorization credentials are kept in a dedicated secrets store, separate from our application databases. They are used only by KeenEdge’s backend to call Amazon for you, are never displayed back in the app, and authorization headers are redacted from our logs.

  • Sign-in and sessions

    Sign-in runs on Amazon Cognito. Session cookies can’t be read by scripts in the browser, and are set to be sent only over secure connections. KeenEdge keeps no sign-in tokens in browser storage.

  • Least-privilege access

    Inside your account, sensitive actions such as connecting or disconnecting Amazon and pausing repricing need an administrator role. Behind the scenes, KeenEdge’s services are given access to specific data by function, for example read-only for some and append-only for others.

  • Separation between sellers

    Every record belongs to one account, and KeenEdge works out which account you are in from your signed-in session, not from anything in a request. Sellers share KeenEdge’s infrastructure; their data is separated logically, and automated tests check that one account can’t read another’s.

  • Limited internal access

    Our Privacy Policy limits internal access to customer data to people who need it to operate, secure, support or develop KeenEdge.

We don’t publish infrastructure configurations, permission policies or resource names. Sharing them wouldn’t make your data safer.

You stay in control

Automation that works inside limits you set.

KeenEdge’s controls sit between your Amazon account and any price change. You decide what is allowed, when it runs, and when it stops.

  • Profit-aware minimum price

    Each product gets a floor worked out from your landed cost, Amazon’s fee estimates and your minimum margin. KeenEdge won’t price below it.

  • Floors, ceilings and change limits

    Set a maximum price and cap how far a price can move in one run. A price outside the allowed range is moved to the nearest allowed value or held.

  • Pause and freeze

    Pause repricing for a storefront, freeze individual SKUs, or use emergency stop to halt all live repricing at once.

  • You activate live repricing

    New connections start with live repricing off. Turning it on is a separate, deliberate step.

  • Simulate first

    Test strategies in the sandbox on sample data, and replay decisions, before anything touches live prices. The sandbox never updates live Amazon prices.

  • Explainable, recorded decisions

    Each decision records the inputs, strategy and constraints that produced it, and price updates and their results are kept in your history.

Pausing or freezing repricing does not revoke Amazon authorization.

KeenEdge’s sandbox runs on generated sample data and does not update live Amazon prices.

Five different actions, not one switch

Pausing is not disconnecting, and disconnecting is not revoking. Each does something different.

Actions that stop or end KeenEdge’s activity, what each does, and what it leaves unchanged
ActionWhereWhat it doesWhat it leaves unchanged
Pause repricingIn KeenEdgeStops price updates for that storefront. Reading data from Amazon continues. You can resume at any time.Does not end or change your Amazon authorization.
Disable live price executionIn KeenEdgeKeenEdge keeps evaluating and recording recommendations, but sends no price updates to Amazon.Does not end your Amazon authorization or stop data being read.
Disconnect the accountIn KeenEdgeDeletes the Amazon credentials KeenEdge stores and stops KeenEdge calling Amazon for that account.Does not cancel the authorization at Amazon, and does not by itself close your KeenEdge account or remove your other data.
Revoke authorizationIn Amazon Seller CentralEnds KeenEdge’s access at the source. KeenEdge’s access stops working and the connection is marked for reconnection.Does not close your KeenEdge account or delete data held in it.
Close your account and request deletionContact KeenEdgeAsks KeenEdge to close your account and delete its data. There is no self-service closure yet; requests are made by contacting us.Is not triggered by pausing, disconnecting or revoking.
Privacy

Responsible handling of seller information.

Your catalog, pricing, cost and account information is business-critical. KeenEdge’s approach is to collect what the service needs, protect it, and be transparent about how it is handled.

  • Collected for a purpose

    KeenEdge collects and uses the information it needs to provide the features you authorize, such as importing your catalog, calculating margins and sending price updates when you enable them.

  • Protected in storage

    Catalog, pricing, cost, account and operational information is protected with the safeguards described above, including encryption and separation between accounts.

  • Access is restricted

    Access is limited by account, by role within an account, and by the internal-access limits in our Privacy Policy.

  • No restricted buyer data

    KeenEdge does not request Amazon’s restricted access to buyer names, addresses or contact details.

  • Disconnecting and revoking

    Disconnecting an account in KeenEdge deletes the stored Amazon credentials. Revoking in Seller Central ends KeenEdge’s access at Amazon.

  • Transparency about retention

    Our Privacy Policy describes what we collect, how we use it and how long we keep it. Requests about privacy or deletion go to the contact below.

Our Privacy Policy is currently in draft pending final review, so details such as retention periods may change when it is finalized.

Monitoring and reliability

Watching for problems, and a way to tell us about them.

We describe here only the practices we can support today.

  • Account activity is recorded

    Actions that change how your account behaves, such as pausing repricing or activating emergency stop, are logged with the user who took them. Emergency stop also records an optional reason.

  • Operational failures raise alarms

    KeenEdge’s services publish alarms for processing errors, failed workflows and backed-up queues, so failures are noticed and investigated.

  • Scanning in development

    Our development workflow includes automated scanning of code, dependencies and secrets before changes are finalized.

  • If something goes wrong

    If we learn of a security incident affecting your information, we will investigate and notify you, and authorities or Amazon where required, as the law and our agreements require.

We don’t describe backup and recovery, vulnerability disclosure or incident-response procedures here yet. We’ll add them once they are documented and verified.

Report a security concern

If you believe you have found a vulnerability, or suspect unauthorized access to your KeenEdge or Amazon account, email us. Please include enough detail for us to reproduce it, and don’t include passwords or Amazon credentials.

Email legal@keenedge.ai
FAQ

Security questions, answered plainly.

Something we didn’t cover? Email us.

No. KeenEdge never asks for your Seller Central password. You authorize access in your Amazon account and give KeenEdge the SP-API credentials that result. Your KeenEdge sign-in is separate, and its password is handled by our sign-in provider.

Questions about security?

Read the policies, see how setup works, or contact us directly. We’re happy to explain how any of this works before you connect an account.