Security and Incident Response

Five Acre Code is operated by HansonCore, LLC. This document describes how we receive, triage, and respond to security reports involving fiveacrecode.com, consulting systems, Cart Marshal, and B2B Marshal.

1. Scope

In scope: this website, website forms, production systems operated by Five Acre Code, authorized Shopify service project systems and access we control, and Cart Marshal or B2B Marshal systems we control. Merchant-owned Shopify stores and third-party platforms remain shared or third-party responsibilities as described in the applicable service or app policy.

2. Reporting

Report vulnerabilities to support@fiveacrecode.com with the subject prefix [SECURITY].

3. Triage

We prioritize confirmed exposure of secrets, unauthorized production access, merchant data exposure, customer data exposure, integrity compromise, and active service disruption.

4. Response

Response steps include containment, secret rotation, service-provider review, patching, deployment rollback, evidence preservation, merchant notification, and post-incident review as appropriate to the incident.

5. Contact

The published security contact is support@fiveacrecode.com. The same address is used for app support and privacy requests.

Specific details: Shopify Services Security Policy · Cart Marshal Security Policy · B2B Marshal Security Policy

Five Acre Code is operated by HansonCore, LLC, Mississippi, United States.