Security & trust

KVKK, GDPR, and a SOC
under the shop

Executen runs on Oriana for servers, cybersecurity, and logging. The product still keeps a human on live. The stack underneath is built for audit, not for a badge wall.

KVKK

Personal data for shops in Turkey is treated under KVKK — access, correction, deletion on request.

GDPR

EU visitors and workspaces get the same care: lawful basis, minimization, a person you can write to.

SOC

Security operations and monitoring run with Oriana — alerts, correlation, a team watching the logs.

Oriana Log

Central logs for servers and the product. Retention you can audit. Not a spreadsheet after the fact.

Human on live

Agents draft. Action Center is the door to the page.

Scoped DOM

Personalization cannot become a free script host.

In the product

How we keep the shop intact

  • Scoped storefront

    Allow-listed DOM actions. No arbitrary JavaScript on the merchant theme.

  • Publishable collect key

    pk_live_… is not an admin secret. Rotate it in Developers.

  • Roles that mean something

    Owner, Admin, Marketer, Analyst, Developer, Viewer — on both rooms.

  • Audit in the product

    Brand confirm, publish, pause, invite. People and agents.

  • Central logging

    Application and infrastructure logs go to Oriana Log — so we can see what happened, not guess.

  • KVKK & GDPR

    Shopper and workspace data are handled under Turkish KVKK and EU GDPR. Write us if you need a DPA.

  • Handoff rules

    Complaints, custom prices, injection — the inbox takes over.

  • Workspace tenancy

    Your events, your knowledge, your playbook. Not a shared brain.

Agents

Safe by design for
humans and specialists

  • Forbidden tools

    Publish, approve, pause, rollback, and SQL are not in the agent’s pocket.

  • Preview path

    Drafts do not pollute live analytics.

  • Prompt screening

    The sales desk would rather fetch a teammate than invent a kit.

  • Your brand, confirmed

    Brand Brain text outranks the model.

FAQ

A few things people ask

Didn’t find what you needed? Write us — we’ll get back to you.

Where is data stored?

In your Executen workspace, on infrastructure we run with Oriana. Application and server logs go to Oriana Log. Sales transcripts can stay on a connector you host.

Do you cover KVKK and GDPR?

Yes. We treat shopper and workspace data under KVKK and GDPR. If you need a DPA, write us and we’ll get it started.

What about SOC?

Security operations and monitoring run with Oriana — central logs, alerts, a SOC that watches the stack. Happy to walk you through what that looks like.

Can a failed experience take down the shop?

Personalization is designed to fail open. The page should still load.

Who can publish?

Someone with the right role. Action Center exists so that is not a scavenger hunt.

Questions about
how this is built?

We’d be glad to walk you through the product and the Oriana stack. Send a note — you’ll hear back from us.

  • Early access
  • One snippet to start
  • Agents that draft, not wander