Proof can look. It can never touch.
Proof checks your numbers without taking control of anything. Read-only, encrypted, private by default, and you can disconnect any time.
Proof reads
Order and payment totals for the months you pick
Refunds, so totals stay honest
The account name your store reports
Customer details, only to add up totals
Proof never gets
Card numbers or bank logins
Any way to charge, refund or pay out
Your passwords. You approve access on the store's own site
Any public view of your customers or orders
Four promises, built into how Proof works.
- Read-only access
Proof can't move money, issue refunds, edit products or change your store.
- Encrypted keys
Access keys are encrypted before they're stored. Only Proof's servers can read them.
- Disconnect any time
One click and the stored keys are destroyed. Your published history stays honest.
- Private by default
Nothing is public until you publish it, and you choose what each record shows.
A stolen password isn't enough.
Turn on two-factor and every sign-in also needs a fresh 6‑digit code from your phone.
Enter your codeSample
From your authenticator app
ProtectedNew code in 18s
The technical details.
The specifics, for anyone who wants to check our work.
Connections
- Shopify: read orders only
- Stripe: Connect with read-only access
- Whop: scoped sign-in with PKCE
- Every hand-off expires in 10 minutes
Storage
- Keys encrypted with AES-256-GCM
- Decryption only on Proof's servers
- Disconnecting destroys the keys
- History is append-only, never edited
Database
- Row-level security on every table
- Private data in a schema browsers can't reach
- Owner tools run on the server, with an audit log
Web
- HTTPS everywhere, with HSTS preload
- Pages can't be framed, except embeds
- Webhooks and jobs are signature-checked
- Private links expire and aren't indexed
Questions
Can Proof take money or change my store?
No. Proof only asks for read access. It can't charge, refund, pay out, edit products or change orders.
What happens when I disconnect?
The stored keys for that source are destroyed straight away. Records you already published stay, marked with when they were last checked.
Who can see my exact numbers?
Only you, unless you choose otherwise. Each record shows exactly what you pick: exact, rounded, a range, a threshold, or just “verified”.
Do you sell or share my data?
No. Proof uses your data to verify your numbers and show what you publish. Nothing else.
Still curious? Read how verification works →
Found an issue?
We read every report. Please give us a chance to fix it before you share it publicly.