Tenant-scoped by default
Merchant templates, uploads, designs, orders, exports, supplier settings, and overrides are isolated by shop in the application data model.
Security model
Isolation first. Least privilege throughout.
Total Print Hub is designed to keep each merchant's operational data, customer work, and supplier connections inside that merchant's boundary.
Private object delivery
Private assets use authenticated access and time-bounded delivery rather than public bucket URLs.
Shared packs stay read-only
Platform art and font packs can be shared efficiently; merchant edits create private overrides and never rewrite the shared original.
Uploads fail closed
Type, size, quota, sanitization, and malware-scanning checks run before untrusted content becomes a stored production asset.
Commerce-authenticated admin
Embedded Shopify administration and connected WooCommerce access rely on verified platform context and server-side credentials. Secrets are not exposed to browser clients.
Production evidence
Design references and production resources stay bound to the merchant, product, quote, order, and export records that created them.