HTTPS on every store
Every storefront and checkout is served over HTTPS. Certificates for your own domain are issued and renewed automatically.
Trust Security & reliability
Security that’s built in, not bolted on
Your store, your customers’ payments and your data are protected by default — so you can focus on selling instead of configuring servers and certificates.
How we protect you
Six layers of protection, on by default
No plugins to install and nothing to configure — every store on Gbox gets the same protections.
Card data never touches Gbox
Cards are entered with PayPal, Stripe or Airwallex — PCI DSS-compliant providers. Gbox never stores full card numbers.
Payments verified server-side
Before an order is marked paid, Gbox confirms the payment directly with the provider. Stripe webhooks are signed and set up for you.
Least-privilege team access
Staff accounts with preset or custom roles, so each person sees only the areas they need.
Replicated, backed-up data
Store databases are replicated continuously and backed up daily, with encrypted backup copies.
Bot protection on forms
Public forms such as our contact form are protected with Cloudflare Turnstile to keep spam and abuse out.
Payments
How money moves — and where card data goes
Card details go straight to your payment provider. Gbox only receives the confirmation that the payment succeeded.
Shopper
Browses your store over an encrypted HTTPS connection.
Your Gbox store
Builds the order — products, shipping and discounts.
Payment provider
PayPal, Stripe or Airwallex collects the card details securely.
Your account
Funds are paid out by the provider directly to you.
Shared responsibility
What we take care of — and what stays with you
Gbox handles
- Hosting, scaling and uptime of the platform
- SSL certificates for your storefront domains
- Platform and security updates
- Database replication and daily backups
- Secure payment integrations
You handle
- A strong, unique password for your account
- Who on your team gets access — and which role
- Keeping your payment-provider accounts secure
- Your store policies, products and customer service
- Telling us quickly if something looks wrong
Responsible disclosure
Found a security issue?
Email [email protected] with the subject “Security report”, the affected URL and steps to reproduce. Please give us reasonable time to fix the issue before sharing it publicly — we will keep you updated.
Send a reportSell on a platform that takes security seriously
Get HTTPS, secure payments and daily backups from day one — free to start.