Discuss a project

DL-037 · Case study

Restricted data access approvals for Amazon software teams

ERP vendors, sellers and integrators need buyer data from Amazon for labels, invoices and fulfilment. We prepare their private and public apps for restricted data access review.

Client
Name withheld
Location
Poland
Industry
Software vendors and sellers
Capabilities
04Secure
01

Challenge

  • Shipping and invoicing workflows need buyer names and addresses from Amazon orders.
  • Amazon grants that only to apps holding an approved restricted role.
  • Data-protection questions and policy wording decide whether an application passes.
02

Environment

  • Private apps for a single seller and public apps for many.
  • ERP vendors, connector builders and sellers with their own developers.
  • Applications filed through Amazon's Solution Provider Portal.
03

Intervention

  • Set up the developer profile and app in the Solution Provider Portal.
  • Drafted data-protection answers that match how the app really stores data.
  • Fixed privacy policies and retention rules where reviewers would object.
  • Handled reviewer questions and resubmissions until a decision was reached.
04

Outcome

  • Apps receive Restricted Data Tokens for the buyer fields they need.
  • Teams keep a written data-protection position they can maintain.
  • Several private apps approved on the first submission.
A team's app goes through a prepared application of policies and data-protection answers in the Solution Provider Portal; after Amazon's review it receives Restricted Data Tokens for buyer fields used in labels and invoices.RESTRICTED DATA BOUNDARYapprovedTEAM'S APPPrivate or publicPOLICIESPrivacy / retentionAPPLICATIONData-protection answersPROVIDER PORTALSubmissionAMAZON REVIEWQuestions / resubmitRDTBuyer fieldsLABELS / INVOICESFulfilment
  1. 01TEAM'S APPPrivate or publicAPPLICATIONData-protection answers
  2. 02POLICIESPrivacy / retentionAPPLICATIONData-protection answers
  3. 03APPLICATIONData-protection answersPROVIDER PORTALSubmission
  4. 04PROVIDER PORTALSubmissionAMAZON REVIEWQuestions / resubmit
  5. 05AMAZON REVIEWQuestions / resubmitRDTBuyer fieldsapproved
  6. 06RDTBuyer fieldsLABELS / INVOICESFulfilment
Fig. 01Path to restricted data accessA team's app goes through a prepared application of policies and data-protection answers in the Solution Provider Portal; after Amazon's review it receives Restricted Data Tokens for buyer fields used in labels and invoices.Scale NTS

Stack and services.

Stack05

  • Amazon SP-API
  • Restricted Data Tokens
  • Solution Provider Portal
  • Data Protection Policy
  • Private and public SP-API apps

Services used02

Tell us what has to work.

A senior engineer reads every brief. Describe the system, what it runs on today and what happens when it fails.

Discuss a project