Apify Actors
and Shopify apps.

Staff permission drift after the last review is not caught by a one-time user list

Best staff access audit app for Shopify: app-scope and staff reviews vs admin change history

B2B checkout can skip a purchase-order number unless a validation rule requires it

Prevent duplicate PO numbers on Shopify B2B checkout

Requiring a PO number is not the same as checking format, prefix, regex, or length

There is no universal PO number format — buyers set their own patterns

A purchase-order number is not an invoice number — buyers issue one, sellers issue the other

B2B PO rules should no-op on D2C checkout

Preview a Shopify B2B PO rule before you publish

A deposit % is not Net Terms and not a required PO number — three different checkout jobs

Native Net Terms set when payment is due — PO and deposit rules are separate checkout jobs

Shopify B2B payment terms include net 30, due on fulfillment, and fixed date on draft orders

Holding oversized B2B orders for approval is not a required PO and not Net Terms

AI shopping agents skip catalogs without crawler rules and complete product JSON-LD

Agentic Catalog vs AI Shopping Readiness

A theme that emits some Product JSON-LD is not a catalog-wide JSON-LD and Open Graph completeness audit

Product JSON-LD on Shopify: which fields to check and how to validate

AI catalog readiness drifts — schedule scans and get alerts when the score changes

A readiness score is not enough — review fix guidance, then rerun the scan

AI catalog readiness includes policy, shipping, tax, and domain — not only robots.txt and Product JSON-LD

Shopify already serves /agents.md — customize it with agents.md.liquid, not an app proxy

Add llms.txt on Shopify by confirming the managed URL, then a theme template if you need different text

If robots.txt disallows AI crawlers, agents.md cannot save AI shopping visibility

GTIN is an AI-catalog input — put the GS1 barcode first when you store more than one

Open Graph is not Product JSON-LD — both can be incomplete on a live Shopify PDP

The Search Console warning is non-critical — set returns and shipping once (Search Console, Merchant Center, or Organization markup) before hand-editing every offer

CLP hazard pictograms belong on the product page, not only on the parcel

CLPLens vs GPSR & CLP Hazard Labels — hazard profiles and gap review vs multilingual CLP + GPSR blocks

A theme paste is not a CLP hazard profile — build GHS pictograms and statements first

CLP hazard on the product page needs synced metafields — not a one-off theme paste

UFI on the product page: part of the Art. 17 offer block from 1 Jan 2028 — not a substitute for the pack label

Review missing CLP hazard fields before you publish

An SDS download link is not CLP hazard display on the product page

CLP Art. 17 label elements: supplier, quantity, identifiers, pictograms, signal word, statements

CLP labels for candles and wax melts: classify the mixture, then apply Art. 17

EUH208: Contains (name of sensitising substance). May produce an allergic reaction.

EU textile fibre composition must use Annex I names, not trade names

Great Britain clothing labels must show fibre content under SI 2012/1102 and retained Regulation (EU) No 1007/2011

Regulation (EU) No 1007/2011 still applies while the Commission reviews it

FibreLedger vs Fibra: Textile Labels — Annex I fibre checks vs label authoring and care symbols

Flag Lycra and Tencel on fibre fields — do not treat trade names as Annex I composition

Annex I fibre names are not environmental-impact fields — record impact information separately

Textile EPR registration is a retained record job — not the same duty as Annex I fibre names

Fibre composition must be in the official language(s) of the Member State — Annex I names alone are not enough

“Bamboo” is not an EU fibre name — the composition line on the product page says viscose (or the Annex I name that matches the process)

France places of manufacture vs EU fibre names (Annex I): two separate textile duties on Shopify

France: show places of manufacture next to the price on Shopify (Code de l'environnement L. 541-9-1-2)

Food allergen labelling has to appear before purchase, not only on delivery

Best EU food labelling app for Shopify: Annex II detection vs nutrition-panel display

The 14 Annex II substances, emphasised in ingredients and available before distance-sale purchase

An allergen in the ingredient text that never appears on the declared list is a FIC gap

A one-off allergen check is not a weekly FIC completeness review with an audit trail

FIC allergen display can sync through a theme block — you do not have to edit product Liquid

Storage conditions are a before-purchase FIC gap — not only allergens and nutrition

EU distance selling: nutrition declaration and net quantity belong on the product page, not only the parcel

Distance-sale food pages need the food business operator’s name and address before purchase — not a GPSR RP field

The best-before or use-by date can wait until delivery — every other mandatory particular cannot

EU honey origin: list countries (and blend %) on the product page before purchase — not only on the jar

Cyber Resilience Act Article 14 duties need a product file before an incident

Encrypted ENISA SRP draft packs for CRA Article 14

A CRA duty file is not done until open record gaps are closed — role checklists show what is missing

CRA duty work needs exportable record packs and a chronological audit trail — not a scattered file folder

Article 14 clocks are not the same job as an ENISA draft pack or an open-gap checklist

CRA application dates sit in Article 71 of Regulation (EU) 2024/2847

CRA manufacturer duties sit in Chapter II, especially Articles 13 and 14

Show the CRA support-period end date on the Shopify product page at purchase — the duty file is not the offer

Importers and distributors forward vulnerabilities to the manufacturer — Article 14 ENISA filing is the manufacturer’s job

EU right-to-repair proof needs revision-linked forms, not a loose email thread

Art. 22 sets the transposition deadline; country status is on EUR-Lex, not here

European Repair Information Form: the Art. 4 conditions, not a loose email

Verify the purchase before you accept a repair request — forms come after intake

A repair request is five stages, not one email thread — record diagnosis and quote before work starts, and close the job with the return

A repair job needs a redacted record trail — not an unredacted mailbox thread

EmpCo on the product page: show the repairability score when it exists — otherwise producer-supplied spare-parts facts, not invented copy

Supplier lots need an EUDR DDS reference number on file before 30 December 2026

EUDR due diligence statement: Annex II fields, with an illustrative example

EUDR Annex I: seven commodities, and the relevant products listed beside them

EUDR Records Manager vs EUDR Guard — lot and DDS records vs scope scan and deadline tracking

A DDS lot registry is not a weekly gap review — missing supplier, country, or DDS fields still slip

An EUDR export folder is not a SHA-256 hashed document pack tied to source records

Admin activity history is not an EUDR audit trail of every supplier, lot, document, and export change

Generic environmental claims on product copy are banned in the EU from 27 September 2026

The CMA Green Claims Code is guidance: six principles on GOV.UK

COM(2023) 166 is a proposal; Directive (EU) 2024/825 is the adopted EmpCo act

Compostable and biodegradable claims on Shopify product copy need a cited scan — not a freehand “eco” synonym

Recycled-content % claims on Shopify product copy

EmpCo recyclable claim wording on Shopify product copy

Dated evidence records for Shopify green claims

Flag green-claim wording and see which provision it cites

Green Claims Guard vs GreenClaims EmpCo Compliance

Scanning the catalog for green-claim wording is not the same job as keeping dated evidence

Vague Umweltaussagen on a DE-facing product page need same-medium clarity — UWG EmpCo rules from 27 September 2026

Unqualified “Made in USA” on a product page needs all-or-virtually-all U.S. content — or a clear qualified claim

“Carbon neutral” on the product page: EmpCo bans offset-based neutrality — not the same job as “eco-friendly”

Prop 65 short-form warnings need a chemical name on 2028 product pages

Prop 65 warning templates citing 27 CCR on Shopify

Prop 65 safe-harbor and short-form warning structure under 27 CCR 25602/25603

Prop 65 short-form warning content, and when §25602 lets a label use it

Block PO Box on the billing address, not just shipping

Does Shopify ship to PO Boxes? Checkout can collect one; carriers decide delivery

Hold a PO box ship-to billed to a commercial suite for review — Flow hold is not a checkout block

AddressFence vs HBN: Address Rules — billing rules vs delivery-address policies

Built-in Shopify checkout address rules cannot target billing

Shopify checkout can suggest addresses and validate some shipping addresses — Checkout Blocks can block a shipping PO box; billing and street number are a separate check

Checkout checks, address autofill, and carrier checks are not one Address Validation API

Test a Shopify address rule in a simulator before you publish

Requiring shipping and billing to match does not detect PO Boxes — it only forces the two addresses to be identical

Leftover Admin access: leavers with 2FA, collaborators vs the bill, preview vs publish

POS permissions are set per POS role, not by editing admin staff permissions

Temporary POS staff still see that location’s past orders — there is no hide-history permission

Create a temporary POS role, leave Manage orders at all locations off, and re-check it

Leave Companies off the CSR role — there is no hide-the-link setting

There is no preview-only staff permission — share a visitor link instead

Cannot suspend a Shopify collaborator — use Remove collaborator account, not staff Suspend

90-day collaborator expiry is not Suspend — use Reactivate (or Remove + a new request)

There is no “access expires on” date — contractors are easy to forget

30/90-day access-review reminders are not Shopify’s 90-day collaborator expiry

Shopify app ownership evidence: scopes and owner

Audit Shopify app scopes for customer data access

What read_customers, read_orders, and write_products let an app see

Custom app scopes are approved at install; added scopes need approval again

Audit staff and app access without the audit app itself reading customer or order data

A scope list is not a risk score — rate each install Low, Moderate, Elevated, or High

Shopify app scope, owner, and cost drift alerts

Block PO boxes: native shipping-rate hide vs checkout validation vs AddressFence

Require a street number at Shopify checkout after the Address Blocker sunset

Prop 65: native product disclosures vs an approval and audit-log app

Prop 65 storefront activation audit on Shopify

Every Prop 65 warning needs merchant approval before go-live — not theme-only paste

Prop 65 Warning Manager vs Prop65Kit — approved, cited warnings vs theme-editor display

An assigned Prop 65 warning still needs an audit trail of picks, edits, and go-live

Prop 65 warning assignment across the Shopify catalog

Prop 65 on Shopify: California-only is a jurisdiction job, not an IP pop-up

Ship-to-California is a checkout job — US-CA on the disclosure is not the same control

Alcoholic beverages use the Prop 65 alcohol disclosure type — not the chemical cancer / reproductive types

A Prop 65 product-page disclosure does not automatically appear on the cart — cart is a separate display surface

Prop 65 food short-form on Shopify: /food and no triangle

Collaborator request code: only Partners you share the code with can ask for access

A collaborator account is a Partner login, not a staff account

EUDR: who is in scope on 30 December 2026 vs mid-2027, and what records to keep

Stop retyping GPSR manufacturer and responsible-person fields on every product

When a Prop 65 warning for lead may be needed, and the name the warning must use

How APO, FPO, and DPO addresses are written, and what Shopify can allow or block

A UFI identifies a mixture for poison centres. It is not a public formula lookup

In the EU, fibre names are mandatory. Care symbols are a voluntary ISO / GINETEX system

Shopify B2B quantity rules are minimum, maximum, and increment. They are not a minimum order value

Directive (EU) 2024/825 adds green claims to the UCPD blacklist. Apply from 27 September 2026

The 6-point Prop 65 type-size sentence is the short-form rule on the product label

EUDR geolocation is latitude and longitude. Polygons apply above four hectares, except for cattle

The CRA requires an SBOM in technical documentation. It does not name a file format or require publication

“Contains non-textile parts of animal origin” is the Article 12 phrase, on the label whenever the product is made available

QUID is the ingredient percentage Article 22 requires when the ingredient is named, emphasised, or essential

Agentic storefronts share products with AI channels. Turning off Catalog access does not stop open-web crawling

A Prop 65 warning for BPA follows the reproductive listing. OEHHA’s dermal MADL is 3µg/day from solid materials

Publication 28 standardizes a US PO Box as PO BOX plus the number. Street Addressing is a separate option

The one-fifteenth pictogram rule is the 9 December 2024 text. The new size table applies from 1 January 2028

EU food origin is mandatory where Article 26 says so, including where omission could mislead

The EUDR information system communicates a reference number when the operator submits the statement

CRA Annex I Part II is eight vulnerability-handling duties, tied to the support period by Article 13

Cadmium is listed for reproductive toxicity, and cadmium and cadmium compounds for cancer. OEHHA publishes an oral MADL of 4.1 µg/day and an inhalation NSRL of 0.05 µg/day

UPS’s shipping-tools page says UPS does not deliver to P.O. boxes. UPS Ground Saver’s own page says that service can

CLP has two signal words. Article 20(3) says Warning does not appear when Danger is used

An operator places relevant products on the EU market or exports them. A trader makes them available and is not the operator or downstream operator

CRA Annex I Part I is the product-property requirements, quoted from point (1) through point (2)(m)

A collaborator gets store permissions through a role you approve. Help Center says collaborators don’t count towards the user limit

Formaldehyde (gas) is listed for cancer. OEHHA publishes an NSRL of 40 µg/day. The page does not print a MADL

A CMRA private mailbox uses PMB or # on the company’s street address. Publication 28 says PO BOX cannot sit on that delivery line

Annex II prints the EUH sentences. Article 25 is how they get onto the label

Article 29 sets low, standard, and high risk. The country list is Implementing Regulation (EU) 2025/1093

Article 13(12) requires the EU declaration of conformity and the CE marking. Annex V is the declaration model

Article 20 permits a manufacturing tolerance of 3 % between the stated composition and analysis

Pre-consumer is diverted during manufacturing. Post-consumer is diverted after consumer use

llmstxt.org defines /llms.txt and does not define llms-full.txt. Shopify mirrors both to /agents.md

The EUDR Information System accepts plot geolocation as GeoJSON

Annex III Part 1 prints the hazard-statement wording. Article 21 puts it on the label

Important products are Annex III class I and class II. Critical products are Annex IV

DEHP is listed for cancer and for developmental and male reproductive toxicity. OEHHA publishes an NSRL of 310 (adult) µg/day

FedEx’s Service Guide says packages cannot be delivered to P.O. boxes or P.O. box ZIP codes

Elastane and spandex name the same fibre in different legal systems

“May contain” is voluntary food information under Article 36, not an Annex II ingredient

UCP is the open standard ucp.dev describes. Shopify’s agents docs say its MCP tools implement it

After an ownership change, Shopify Help says users keep their store permissions

Annex V assigns GHS01 to GHS09. The symbol names are exploding bomb through environment

A PO Box is a locked mailbox at a Post Office. Acceptance is the other party’s rule

Annex IV Part 1 prints the precautionary-statement wording. Article 22 selects it

Proposition 65 lists specific PFAS chemicals. It does not list “PFAS” as one class

Best before is the date of minimum durability. Use by replaces it when the food is highly perishable

The Green Guides are the FTC’s views on environmental marketing claims. The CFR text is the 2012 revision

The Information System is the TRACES tool for due diligence statements. PRODUCTION submissions have legal value

In the US, viscose is a form of rayon and either name may be used. In the EU, viscose is its own fibre name

agenticcommerce.dev calls ACP an open standard for programmatic commerce flows

DHL Express US terms say shipments cannot be delivered to PO boxes or postal codes

A PO number is the buyer’s reference for an order it has authorised

Free and open-source software is in CRA scope only when supplied in the course of a commercial activity

EUDR Annex I lists in-scope goods by CN code under seven commodities

Protected customer data is customer data a public app must be approved to receive

The Proposition 65 list names a particle form of titanium dioxide, for cancer

The CRA covers products with digital elements. NIS2 covers essential and important entities

Article 21 requires a distinguishing typeset. It does not say bold

The legal guarantee is the seller’s conformity liability. A commercial guarantee is extra

The EU Ecolabel may be used only where it has been awarded

Shopify shows five recent login sessions, a user-management log, and your own devices

A Shopify purchase order is your agreement with a supplier, not the PO number a B2B customer types

In the EU, virgin wool is a protected name for wool that has not already been in a finished product

OpenAI’s ChatGPT product feed is one row per item or variant, with nine required fields

CLP is the EU regulation that takes the UN Globally Harmonised System into EU law

Annex II lists the Union acts that set repairability requirements. Article 5 follows that list

Acrylamide is on the Proposition 65 list. Food and non-food are not the same question

The Cyber Resilience Act applies to products with digital elements whose use includes a data connection

EU nutrition label format (nutrition declaration)

The clearest official greenwashing examples are the ones the EU and the FTC wrote themselves

Article 10 is the risk assessment. Article 11 follows unless the risk is no or only negligible

Shopify checkout can fill the billing address from the shipping address, and the customer can change it

Shopify’s store activity log is view-only, shows at most 250 results, and is not the login history

In Shopify B2B, net 30 and net 60 start the day the order is placed

Modal and viscose are different Annex I fibre names

ChatGPT shopping uses a product feed that OpenAI says is for approved partners

Delegated Regulation (EU) 2023/707 added endocrine, PBT/vPvB, and PMT/vPvM classes to CLP

France’s repairability index is a national score, not a Europe-wide one