Security
Locked down, by default.
A secure Shopify checkout: encrypted keys, verified requests, isolated tenants, card data we never touch.
Locked down by default
How your store is protected.
Encrypted at rest
Your Whop and Shopify credentials are encrypted and never logged or returned.
Verified webhooks
Every inbound event is HMAC-verified against your secret before it is trusted.
Tenant isolation
Row-level rules keep each merchant's data strictly separate, deny-by-default.
Card data stays out
Payments happen in the secure payment field by Whop, so raw card data never touches our servers.
Least privilege
Access is scoped tightly and admin actions are gated and recorded.
Audited actions
Sensitive operations are logged to an append-only trail you can trust.
Layers of defense around your data.
Requests clear rate limiting, an HMAC check, and row-level tenant isolation. Your customers' payments are processed by Whop.
Rate limiting & abuse protection
HMAC-verified webhooks
Row-level tenant isolation
Your customers’ funds
Processed by Whop on your connected account.
Every layer on by default, deny-first.
Deny-first
isolation by default
Verified
every webhook
Whop
processes every payment
We build the checkout. Whop processes the payment.
Your keys, encrypted and yours
Credentials are encrypted at rest with server-only keys, never exposed to the browser or logs.
- Encrypted secrets
- Never client-side
- Never logged
Locked down by default
Payments run on Whop
We create orders and record payments, and your customers' payments are processed by Whop on your connected account.
- Processed by Whop
- Verified payment events
- Idempotent processing
Sale
Step 1Shopper completes your checkout
Paid via your Whop account
Step 2Payment handled under Whop's terms
Synced to Shopify
Step 3Order created with customer and totals
Sample data
Practices we hold ourselves to
- Credentials encrypted at rest, never logged
- HMAC signature checks on every webhook
- Row-level tenant isolation, deny-by-default
- Rate limiting and abuse protection on public routes
- Least-privilege access with gated admin actions
- Append-only audit trail for sensitive operations
- Card data handled in the secure payment field by Whop, never by us
- Idempotent money-path processing under load
Questions.
Sling keeps no balance of your sales. Whop processes each payment and holds the balance on your connected account, and Sling receives its fee from it. Sling is not a bank.
Encrypted at rest with server-only keys. They are never returned to the browser or written to logs.
Every query is tenant-scoped and enforced by row-level rules that deny by default. One merchant can never see another's data.
Sell on infrastructure you can trust.
Secure by default, from the first click.