# Security Overview ### Shopify Reactify Search ensures a secure integration with Shopify through the Shopify Admin API, adhering to best practices: * Access to Shopify Admin API: Secure storage of access tokens for explicit authorisation. * Rate Limiting and Monitoring: Adherence to API rate limits and continuous monitoring for risk mitigation. * Shopify App and Platform Security: Compliance with Shopify's requirements, including OAuth 2.0 for authentication and adherence to data handling and privacy standards. ### **Functions** Leveraging Firebase Functions for serverless compute ensures secure, scalable, and efficient backend code execution. Key features include: * Isolation: Each function operates in its own isolated environment to minimise unauthorised access. * Automatic Scaling: Ensures performance under any load, enhancing reliability and security. * Integrated Security: Functions seamlessly work with Firebase Auth and Firestore Security Rules. ### **Hosting** Firebase Hosting provides fast, secure, and reliable web hosting with a global CDN, automatic SSL certificate provisioning, and HTTP/2 support. Key features include: * SSL by Default: Ensures all content served over the web is encrypted. * Secure Deployment: Integrated with Cloud Build for secure and automated deployments. ### Database Firestore, a flexible and scalable database, includes security features for fine-grained access control. Key features include: * Security Rules: Configure read/write access to collections and documents. * Data Encryption: Encrypt data in transit and at rest for confidentiality. * Audit Logs: Integration with Google Cloud's operations suite for monitoring and auditing. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://search.docs.reactify.com.au/security-overview.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.