Email us

contact@pacificprepservices.com

Call us

1 (971)-238-7795

Office Address

560 SE 4th Ave, Suite 525 Hillsboro, OR 97123

Frictionless Fulfillment

Pacific Prep Services
SP-API Compliance, Security,
and Data Protection

Pacific Prep WMS

A system operated by Pacific Prep Services

Pacific Prep WMS is the internal warehouse management system operated by Pacific Prep Services to support Amazon fulfillment operations for sellers who authorize us as their service provider.

This page describes how Pacific Prep Services complies with Amazon Selling Partner API requirements, including Restricted Data Access, data usage limitations, security controls, and operational governance.

Legal Entity and Responsibility

  • Service Provider: Pacific Prep Services
  • System: Pacific Prep WMS
  • Role: Amazon Service Provider requesting SP-API access

Pacific Prep Services is responsible for all data accessed through Amazon’s Selling Partner API and for ensuring compliance with Amazon’s Data Protection and Acceptable Use policies.

Purpose of SP-API Access

Pacific Prep WMS accesses Amazon Selling Partner API data solely to fulfill orders and manage inventory on behalf of sellers who have explicitly authorized Pacific Prep Services as their service provider.

SP-API access is used only for:

  • Retrieving Fulfilled by Merchant (FBM) orders
  • Supporting pick, pack, and ship workflows
  • Confirming shipment and tracking information back to Amazon
  • Supporting FBA preparation and inventory coordination workflows

The system is designed to support real warehouse operations. It does not provide analytics, advertising, data resale, or data monetization services.

Seller Authorization

Pacific Prep Services accesses Amazon data only after receiving explicit authorization from the seller through Amazon’s Service Provider authorization process.

No seller data is accessed without proper authorization.

Data Usage and Personally Identifiable Information

Why We Require PII

Pacific Prep WMS requires limited Personally Identifiable Information strictly to fulfill FBM orders on behalf of authorized sellers.

This may include:

  • Buyer name
  • Shipping address
  • Order identifiers
  • SKU and quantity information
  • Shipping service level

This information is required to:

  • Generate carrier shipping labels
  • Pick, pack, and ship customer orders
  • Confirm fulfillment and tracking status back to Amazon

Amazon data is not used for marketing, analytics, profiling, resale, or advertising.

Data Collection

  • Data is collected exclusively through Amazon Selling Partner API
  • No scraping, browser automation, or third-party data enrichment is used
  • Only the minimum API permissions required for fulfillment operations are requested

Data Storage and Protection

Storage

  • Data is stored only as long as required to complete fulfillment and operational requirements
  • Infrastructure is hosted on secure cloud services with industry-standard protections

Encryption

  • Data is encrypted in transit using TLS
  • Data is encrypted at rest using industry-standard encryption methods

Data Access Controls

  • Role-based access controls are enforced
  • Access is limited to authorized fulfillment and systems operations personnel
  • Least-privilege principles are applied
  • Shared credentials are not permitted

Access rights are reviewed periodically and revoked immediately upon role change or termination.

Data Retention and Deletion

  • Order and customer data is automatically deleted after fulfillment is completed and operational requirements are met
  • Sellers may request deletion of their data at any time
  • Backup systems follow the same retention and deletion standards

Data Sharing

  • Amazon data is never sold, rented, or shared with third parties
  • Data is used exclusively to provide fulfillment services to authorized sellers
  • Data is not transferred outside the scope of fulfillment operations

Logging and Monitoring

Pacific Prep Services maintains logging and monitoring practices to detect and respond to security events within Pacific Prep WMS.

These include:

  • Logging of SP-API access and system activity
  • Authentication and authorization logging
  • Monitoring for abnormal or unauthorized access patterns
  • Review of logs during operational audits and incident investigations

Incident Response and Risk Management

In the event of a suspected security incident, unauthorized access, or data exposure, Pacific Prep Services follows a documented incident response process:

  1. Immediate containment and access restriction
  2. Assessment of scope and impact
  3. Credential rotation and access review as needed
  4. Remediation of identified issues
  5. Internal review and corrective actions

Amazon and affected parties are notified when required by policy or applicable law.

Credential Management

  • Strong password requirements are enforced
  • Password managers are used where applicable
  • Secrets and API credentials are stored securely
  • Credentials are never committed to source control
  • API keys and credentials are rotated as needed

Secure Coding Practices

Pacific Prep WMS follows secure development and deployment practices, including:

  • Environment-based configuration and secrets management
  • Code review prior to deployment
  • Separation of development and production environments
  • Protection against accidental exposure of credentials

Vulnerability Management

  • Identified vulnerabilities are logged and tracked internally
  • Findings are prioritized based on severity
  • Remediation is completed prior to deployment where applicable
  • Systems are reviewed following remediation

Change Management and Responsibility

Change management and system access are managed by:

Role: Founder and Systems Lead, Pacific Prep Services

Responsibilities include:

  • Approving system changes
  • Managing production access
  • Reviewing security and operational controls

Access is granted based on role and operational necessity.

Compliance Commitment

Pacific Prep Services is committed to compliance with:

  • Amazon Selling Partner API policies
  • Amazon Data Protection Policies
  • Applicable data protection and security standards

This page is reviewed periodically and updated as practices evolve.

Contact

For questions related to SP-API compliance, data protection, or security practices, please contact:

Pacific Prep Services
Operations and Systems Team
contact@pacificprepservices.com

Frictionless Fulfillment

  • 560 SE 4th Ave, Suite 525 Hillsboro, OR 97123
  • contact@pacificprepservices.com
  • 1 (971)-238-7795

Terms Of Use

Privacy Policy

Compliance and Governance

SP-API Compliance

Copyright © Pacific Prep Services