Security and compliance

​

Security certifications

Smile maintains the following certifications and recognitions:

• Current SOC 2 Type II audit report (available through the Smile Security Hub)
• Built for Shopify
• Shopify Certified Technology Partner

For the latest certification status, security documentation, compliance reports, and subprocessor information, visit the Smile Security Hub

​

Privacy

Smile’s privacy practices include:

• GDPR compliance.
• Smile acts as a Data Processor, while merchants act as the Data Controller.
• A Data Processing Addendum (DPA) is available.
• Processes are in place to support data subject access and deletion requests.
• Smile does not sell customer data.

For full information, see:

• Privacy and data collection
• GDPR and Smile