01 · Shopify
Challenge apps
Twelve live App Store listings. Open the hub, then the challenge guide for the job.
Shopify apps hubMomiji ToolsGuides
Every guide on this site, grouped by Shopify app and topic. Each title and summary is the page’s existing title and meta description.
On this page
Shopify apps Prop 65 GPSR/CLP EUDR B2B PO PO Box / AddressFence Agentic Catalog Textile / FibreLedger Green claims CRA EU food info RepairProof Staff access Comparisons Apify
01 · Shopify
Twelve live App Store listings. Open the hub, then the challenge guide for the job.
Shopify apps hub02 · Apify
Product pages for APS, ACE, G2, TED/SAM, and the rest of the Store catalog.
Tools catalogShopify
Shopify
Ship-to-California Prop 65 is a checkout shipping-address job, not US-CA on the disclosure or an IP pop-up. Native path first. Not legal advice.
Shopify native disclosures do not keep an audit trail of warning picks, edits, and go-live. Prop 65 Warning Manager records those events. Not legal advice.
Food Prop 65 short-form uses /food and no triangle. That is warning content, not a separate Shopify disclosure type. Templates, approval, and activation audit. Not legal advice.
Prop 65 Warning Manager requires merchant approval before any warning goes live and timestamps picks, edits, and activations in an audit trail. Not a theme-only display tool. Not legal advice.
A storefront activation record is not the same job as typing a warning into the theme. Approve before go-live; keep activation events in the audit trail. Not legal advice.
Find which Shopify products have a Prop 65 warning: filter the product list by disclosure type, and keep approval before any warning goes live. Not legal advice.
Prop 65 warning for goods labeled on or after 1 Jan 2028 needs a listed chemical name on the product page. Install Prop 65 Warning Manager, attach the short form, and match the label. Not legal advice.
Publish Prop 65 warnings from templates that cite 27 CCR §§ 25601–25607, including 2028 short-form text with chemical names. Approve before go-live; keep the audit trail. Not legal advice.
27 CCR 25602/25603 set safe-harbor methods and warning content. For internet sales: the warning or a clearly marked WARNING hyperlink before purchase. Quote structure only. Not legal advice.
27 CCR §25602(a)(4) and §25603(b) set short-form Prop 65 label content, including a chemical name. OEHHA states the amendment dates. Quote structure only. Not legal advice.
Wine, beer, and spirits use Shopify’s Prop 65 alcohol disclosure type, not cancer / reproductive. Native path first. Not legal advice.
A Prop 65 product-page disclosure is a separate Display preference from the cart. Native Disclosures can target both. Approval and storefront-activation audit are a different job. Not legal advice.
California-only Prop 65 on Shopify is a US-CA jurisdiction on structured Disclosures, not an IP pop-up. Native path first. Not legal advice.
OEHHA says businesses with fewer than 10 employees are exempt from Prop 65 warnings. What the exemption covers, what it leaves open, and a checklist.
OEHHA lists Lead for reproductive toxicity and Lead and lead compounds for cancer, and publishes an oral NSRL of 15 µg/day and a MADL of 0.5 ug/day for Lead. A safe-harbor warning names the listed chemical. Not legal advice.
27 CCR §25602(a)(4) sets the short-form on-product type size: no smaller than the largest type used for other consumer information, and not smaller than 6-point. Internet and catalog methods add no point size. Not legal advice.
OEHHA lists Bisphenol A (BPA) for reproductive toxicity and publishes a MADL of 3µg/day for dermal exposure from solid materials. Cancer was considered but not listed. Safe-harbor wording is 27 CCR §§25601–25603. Not legal advice.
OEHHA lists cadmium for developmental and male reproductive toxicity and cadmium and cadmium compounds for cancer. The cadmium page publishes an oral MADL of 4.1 µg/day and an inhalation NSRL of 0.05 µg/day. Safe-harbor wording is 27 CCR §§25601–25603. Not legal advice.
OEHHA lists Formaldehyde (gas) for cancer, dated 01/01/1988, and publishes an NSRL of 40 µg/day. That page does not print a MADL. Safe-harbor wording is 27 CCR §§25601–25603. Not legal advice.
OEHHA lists DEHP for cancer and for developmental and male reproductive toxicity, and publishes an NSRL of 310 (adult) µg/day plus the MADLs on that chemical page. Safe-harbor wording is 27 CCR §§25601–25603. Not legal advice.
The OEHHA list dated July 31, 2026 names “Titanium dioxide (airborne, unbound particles of respirable size)” for cancer, listed September 2, 2011. Safe-harbor lines are 27 CCR §25603(a) and (b). Not legal advice.
The OEHHA Proposition 65 list dated July 31, 2026 does not list PFAS as one class. It lists specific chemicals, including PFOA, PFOS, and PFNA. A safe-harbor warning names a listed chemical.
OEHHA’s July 31, 2026 list has two acrylamide rows. The P65Warnings fact sheet, updated October 2025, has a separate sentence about acrylamide in food. Not legal advice.
Shopify
A Safety Data Sheet link is not the same job as showing CLP pictograms and statements on the product page. Record hazard profiles, sync metafields, review missing fields before publish.
Show CLP/GHS hazard pictograms and H/P statements on the product page before purchase. The app does not classify the mixture. Not legal advice.
Shopify has no built-in CLP hazard profile. CLPLens creates product hazard profiles with GHS pictograms and statements, then syncs metafields for storefront display. Not legal advice.
Gap-check GHS pictograms, signal word, and H/P statements before the CLP product-page block goes live. CLPLens: CLP Hazard Display. Not legal advice.
Shopify has no built-in CLP hazard block. CLPLens syncs app-owned product metafields for theme-block hazard display and keeps audit records. Not legal advice.
From 1 January 2028, a CLP distance-sale offer must clearly show Art. 17 label elements — including the UFI where the pack already needs it. Not a UFI generator. Not legal advice.
Under CLP Art. 17 a hazard label carries supplier details, nominal quantity, identifiers, pictograms, signal word, H and P statements, and supplemental information where applicable. Not legal advice.
Candles and wax melts are mixtures under CLP. If classified as hazardous, Art. 17 label elements apply. Cites EUR-Lex and UK HSE. Not legal advice.
Annex II section 2.8 requires EUH208 when a mixture contains a sensitising substance at or above Table 3.4.6 of Annex I. Confirm the live EUR-Lex text. Not legal advice.
A UFI is a 16-character code the company generates with ECHA’s UFI generator. CLP Annex VIII places it on the label and in the poison-centre notification. The code does not reveal the formula. Not legal advice.
CLP section 1.2.1 as it stood on 9 December 2024 sets a pictogram at one fifteenth of the label area and not less than 1 cm². Regulation (EU) 2024/2865 replaces the dimension table and adds font rules that apply from 1 January 2028. Not legal advice.
CLP Article 2 defines two signal words: Danger for the more severe categories and Warning for the less severe. Article 20 assigns the word from Annex I Parts 2 to 5, and says Warning does not appear when Danger is used. Not legal advice.
Article 25 sends supplemental label statements to Annex II. The consolidated text of 1 July 2026 prints the EUH sentences below, including EUH208 and EUH210. Not legal advice.
Article 21 requires hazard statements worded as in Annex III. The consolidated text of 1 July 2026 prints the English wording for physical, health, and environmental hazards. Not legal advice.
Annex V of Regulation (EC) No 1272/2008 assigns GHS01 to GHS09, from exploding bomb through environment. Wording is the consolidated text of 1 July 2026, CELEX 02008R1272-20260701. Not legal advice.
Article 22 selects precautionary statements from Annex I and Annex IV. The tables copy the English wording in Annex IV Part 1 of the 1 July 2026 consolidation.
CLP takes the UN Globally Harmonised System into EU law. Recitals 5 and 6 of the original Official Journal say so. Article 1 does not use those words. EUH statements are CLP supplemental label text. Not legal advice.
Commission Delegated Regulation (EU) 2023/707 added CLP hazard classes for endocrine disruption and for PBT/vPvB and PMT/vPvM substances and mixtures, with dated transition rules. Not legal advice.
GPSR, Shopify Scripts, CRA, Directive 2024/825, EUDR, CLP online offers and Prop 65 dates on one page, each with a primary source. Not legal advice.
Shopify
Shopify Admin activity history is not an EUDR audit trail of every supplier, lot, document, and export change. EUDR Records Manager keeps that full audit trail. Not legal advice.
Who is in EUDR scope on 30 December 2026 vs 30 June 2027 for smaller operators, and what records to keep. Cites Commission and EY pages. Not legal advice.
Shopify Admin has no EUDR document pack with a hash that matches exports back to source records. EUDR Records Manager builds SHA-256 hashed document packs. Not legal advice.
Store the EUDR DDS reference you received against each supplier lot. Not a filing tool. Application 30 December 2026. Not legal advice.
Illustrative Annex II fields for an EUDR due diligence statement. Not a filing. Cites Regulation (EU) 2023/1115 and the official Information System pages. Not legal advice.
Regulation (EU) 2023/1115 Annex I lists relevant commodities and the derived products in scope. Read the live annex. It can be amended. Not legal advice.
Article 2(28) of Regulation (EU) 2023/1115 defines geolocation as latitude and longitude of at least six decimal digits. Polygons apply to non-cattle plots of more than four hectares. Not legal advice.
Shopify has no built-in weekly EUDR gap review. EUDR Records Manager flags missing supplier, country, or DDS fields on a weekly scheduled gap review. Not legal advice.
The EUDR information system communicates a reference number to the operator for each due diligence statement submitted. Downstream operators and traders keep the numbers they receive. No format is stated here. Not legal advice.
The consolidated EUDR text defines an operator as the person who places relevant products on the market or exports them, excluding downstream operators. A trader makes them available and is neither. Due diligence and the statement sit with the operator. Not legal advice.
Article 29 of Regulation (EU) 2023/1115 classifies countries as high, low, or standard risk. The list is Commission Implementing Regulation (EU) 2025/1093 of 22 May 2025. Article 13 is simplified due diligence. Not legal advice.
The EUDR Information System accepts production-place coordinates as GeoJSON. The file description, updated 17 August 2026, sets geometry, properties, six-decimal truncation, and a 25 Mb DDS file-size limit. Not legal advice.
The EUDR Information System is the Commission’s TRACES tool where operators submit due diligence statements. PRODUCTION submissions have legal value. ACCEPTANCE is for testing.
Annex I of Regulation (EU) 2023/1115, consolidated to 18 September 2026, lists EUDR goods by CN code. This page copies those rows. It does not decide scope. Not legal advice.
EUDR Article 10 is the risk assessment of Article 9 information against criteria (a) to (n). Article 11 is mitigation unless the risk is no or only negligible. Not legal advice.
Shopify
Require PO number format, prefix, and uniqueness on B2B checkout. Native Net Terms do not check that. Preview a sample number before you publish.
Shopify native B2B Net Terms set payment due dates per company location. B2B PO Guard — Require PO adds PO and deposit rules alongside those terms; D2C stays untouched. Not legal advice.
Shopify Help Center lists no terms, net 7 through net 90 including net 30, due on fulfillment, and fixed date on draft orders. Set on the company location. Not legal advice.
Shopify lists net 7, 15, 30, 45, 60, and 90. All start the day the order is placed. The worked example is net 30. Payments are not captured automatically when terms expire. Not legal advice.
Stop reused PO numbers on Shopify B2B checkout: add uniqueness to the PO validation rule and preview it against a known duplicate before you publish.
Preview any PO rule live against a sample number before you publish. D2C stays untouched. Not legal advice.
A deposit % on B2B checkout is not Net Terms and not a required PO number. Set deposit guardrails and optional order review. D2C stays untouched.
Holding oversized B2B orders for approval is not a required PO and not Net Terms. Route company orders above a threshold for manual review. D2C stays untouched.
Required PO and B2B checkout rules must no-op on D2C. Company checkout is a different surface. Preview PO rules. Not legal advice.
Shopify has no built-in no-code PO format setting. A Cart and Checkout Validation function can read cart.poNumber. B2B PO Guard — Require PO checks format, prefix, regex, length, and uniqueness. Not legal advice.
There is no universal PO number format. Buyers set their own. Common patterns and example regexes with what each accepts and rejects. General information only.
A PO number is the buyer’s purchase reference. An invoice number is the seller’s bill reference. They are different identifiers. General information only.
Shopify Help documents B2B catalog quantity rules: minimum, maximum, and increment per variant. That page does not describe a minimum order value in currency. Order review is a separate job. Not legal advice.
A purchase order number is the buyer’s reference for an order it has authorised. FAR 2.101 defines a government purchase order. Shopify B2B checkout can collect one. Not legal advice.
Shopify purchase orders record what you buy from your suppliers. A B2B checkout PO number is what a customer types when they buy from you. Not legal advice.
Shopify
Free blocks shipping-address PO Boxes and parcel lockers at checkout, plus a small set of ZIP rules. Billing-address PO Box rules and the street-number rule Address Blocker dropped are on a paid plan. Native checkout rules cover shipping only.
Shopify does not ship parcels. Whether a PO Box gets a parcel depends on the carrier. UPS and FedEx state their own PO Box rules. Not legal advice.
Shopify has no commercial-suite detector. Flow can hold fulfillment after the order exists. Free on AddressFence blocks shipping PO Boxes and parcel lockers at checkout; billing-address rules are on a paid plan, and the app is not a hold. Not legal advice.
Shopify's address format validation can't require a street number. Additional address fields cover only some countries. Here is the gap and a fix.
Shopify built-in, no-code checkout settings do not target billing. Free on AddressFence blocks shipping PO Boxes and parcel lockers, plus a small set of ZIP rules. Reading billingAddress is on a paid plan. Not legal advice.
Requiring shipping and billing to match only forces identical addresses. It does not detect a PO Box. Free blocks PO Boxes and parcel lockers on the shipping address at checkout, plus a small set of ZIP rules. Street-number checks and billing-address rules are on a paid plan.
Free blocks shipping PO Boxes and parcel lockers, plus a small set of ZIP rules. Billing PO box and street-number rules are on a paid plan; test them in a simulator before you publish, with one-click rollback.
A PO box rule can miss a spelling or stop a real street like Boxwood Road. A test list to run through the AddressFence simulator before you publish.
Royal Mail says some UK homes use a name instead of a street number. A test list of house-name addresses for the AddressFence simulator before you publish.
Shopify checkout can suggest addresses and validate some shipping addresses. Checkout Blocks can block a PO box on shipping for all merchants; billing and street number still need a validation function or an app. Not legal advice.
Shopify documents checkout address checks, address autofill, and carrier label checks. Those are not one product named Address Validation API. Confirm shopify.dev and Help Center.
USPS writes APO, FPO, and DPO addresses with AA, AE, or AP and no foreign city. Shopify Help maps those fields and documents zones, rates, and checkout validation. Confirm the live pages. Not legal advice.
USPS Publication 28 section 281 standardizes a Post Office Box as PO BOX plus the number. Section 284 and usps.com describe Street Addressing where it is available. Shoppers still type other spellings. Not legal advice.
UPS’s shipping-tools page says UPS does not deliver to P.O. boxes. Section 14 of the UPS terms says the same, and that APO and FPO addresses are not accepted. UPS Ground Saver’s page says that service can deliver to U.S. PO Boxes. Not legal advice.
Publication 28 section 285 says mail to a CMRA uses PMB or # plus the private mailbox number. PO BOX cannot sit on that delivery line. A PO Box keyword rule misses it. Not legal advice.
The FedEx Service Guide, effective 5 January 2026 and updated 11 September 2026, says packages cannot be delivered to P.O. boxes or P.O. box ZIP codes. Address Validation docs state a Ground Economy exception. Not legal advice.
USPS describes a PO Box as a locked mailbox at a Post Office. Street Addressing uses that Post Office’s street address. CAN-SPAM accepts a registered box only in a commercial email footer.
DHL Express Terms and Conditions of Carriage for the United States say shipments cannot be delivered to PO boxes or postal codes. This page covers that US edition. Not legal advice.
Shopify checkout copies the shipping address into the billing address field unless the customer, or a setting, changes that. Shipping-address validation is a separate sentence. Not legal advice.
Shopify
Shopify Admin has no catalog-wide audit of Product JSON-LD and Open Graph completeness on live product pages. Agentic Catalog audits both on live pages. Not legal advice.
Shopify themes usually output Product JSON-LD. Check name, image, description, sku or gtin, brand, offers.price, priceCurrency, and availability, then validate. Not legal advice.
Check llms.txt, AI-crawler robots.txt, and Product JSON-LD before AI shopping discovery. Not a ranking or inclusion promise.
Since 28 May 2026 Shopify serves /agents.md by default. Review or override it with agents.md.liquid, not an app proxy. Not a ranking promise.
Shopify.dev says /llms.txt mirrors /agents.md by default. Customize with a theme template, or review catalog readiness signals in an app. Not a ranking promise.
Shopify Admin does not score policy, shipping, tax, and domain for AI shopping in one place. Agentic Catalog folds them into one readiness score. Not a ranking promise.
Shopify Admin has no AI catalog fix-guidance loop. Agentic Catalog reviews fix guidance and lets you rerun readiness scans. Not a ranking promise.
Shopify has no AI catalog readiness score. Agentic Catalog schedules daily or weekly scans with email alerts on score changes. Not a ranking promise.
Channels read the first barcode on a Shopify variant. Put the GS1 GTIN first when you store more than one. Barcode is an AI-catalog input, not a ranking promise.
Open Graph and Product JSON-LD are different Shopify PDP surfaces. Completing one does not complete the other. Not a ranking or inclusion promise.
Shopify Help says agentic storefronts make products available to AI channels and are active by default for eligible stores. Controls are in Sales channels, then Agentic. Turning off Catalog access does not stop open-web crawling. Not a ranking promise.
Shopify Catalog supplies product data, but each AI channel controls the final wording. Make each listing say what is included, and keep bundle copy on the bundle. Not a promise the summary changes.
Meta is served through Shopify Catalog, and direct checkout happens on Meta, so storefront visits may not show. Check orders by channel, market, Catalog access, and product eligibility. Not a sales promise.
agents.md cannot override a robots.txt Disallow for GPTBot, ClaudeBot, or PerplexityBot. Check the live /robots.txt first. Not a ranking or inclusion promise.
Search Console “Missing field hasMerchantReturnPolicy / shippingDetails” flags recommended merchant-listing Offer properties, not a product-removal error. Set returns and shipping once, then re-score live Product JSON-LD.
llmstxt.org specifies /llms.txt and does not define llms-full.txt. On Shopify, both URLs mirror /agents.md until a theme template makes one diverge. Not a ranking claim.
ucp.dev calls the Universal Commerce Protocol an open standard for agents, apps, businesses, and payment providers. shopify.dev/docs/agents says Shopify’s MCP tools implement UCP. Not a ranking or sales claim.
agenticcommerce.dev calls the Agentic Commerce Protocol an open standard for programmatic commerce flows. The Shopify pages reviewed here describe UCP, not ACP. Not a ranking or sales claim.
OpenAI’s product feed is one row per purchasable item or variant, with nine required fields: item_id, title, description, url, brand, seller_name, image_url, availability, and price. Not a ranking claim.
OpenAI says product feeds give ChatGPT catalog data for titles, descriptions, images, price, and availability. Onboarding is currently available to approved partners. Not a ranking claim.
Shopify
Art. 16(3): fibre composition must be in the official language(s) of the Member State of availability. Annex I names alone are not enough. Not legal advice.
In Great Britain, textile labels must show fibre content under SI 2012/1102 and retained Regulation (EU) No 1007/2011. Distance sales: visible before purchase. Not legal advice.
Validate fibre names against Annex I. Flag trade names such as Lycra. Record French places of manufacture on the product page. Not legal advice.
Regulation (EU) No 1007/2011 still applies. The Commission is reviewing it (Have Your Say / DG GROW). A revision is not adopted law until EUR-Lex shows one. Not legal advice.
Shopify has no built-in checker that flags Lycra or Tencel on fibre composition fields. FibreLedger flags trade names that are not lawful Annex I fibre names. Not legal advice.
French places of manufacture and Annex I fibre names are two separate textile duties on Shopify. Recording origin is not a fibre-composition substitute. FibreLedger Textile Labels. Not legal advice.
Since 10 July 2026, French online listings for clothing, footwear and household linen must show places of manufacture near the price, same text size.
Shopify has no built-in textile environmental-impact fields. FibreLedger records environmental-impact information alongside Annex I fibre checks. Not legal advice.
FibreLedger Textile Labels retains EPR registration and audit records for textile sellers, alongside Annex I fibre-name checks and French origin / environmental-impact fields. Not legal advice.
Art. 5(1): only Annex I names describe fibre composition. “Bamboo” is not one. Viscose-route bamboo is viscose (Annex I no. 25). Not legal advice.
When “100 %” is allowed (up to 2 % extraneous fibre), how to list a blend, and when “other fibres” is permitted under EU Regulation 1007/2011.
Article 20 permits a manufacturing tolerance of 3 % between the stated fibre composition and analysis, and extraneous-fibre values of 2 % and 5 %. Consolidated text of 15 February 2018. Not legal advice.
Regulation (EU) No 1007/2011 requires fibre composition. The Commission’s EUR-Lex report treats care symbols as a voluntary ISO 3758 / GINETEX system. National rules can still differ. Not legal advice.
Article 12 of Regulation (EU) No 1007/2011 requires the phrase “Contains non-textile parts of animal origin” on the labelling or marking whenever the product is made available on the market. Not legal advice.
Annex I of Regulation (EU) No 1007/2011 names elastane. 16 CFR 303.7(k) names spandex. The FTC says the ISO standard uses elastane for spandex and that you may use either name. Not legal advice.
In the US, 16 CFR 303.7(d) names rayon, and the FTC says you may use viscose or rayon. In the EU, Annex I of Regulation (EU) No 1007/2011 names viscose as its own fibre. Not legal advice.
Annex I of Regulation (EU) No 1007/2011 defines modal and viscose as separate regenerated-cellulose fibre names. This page does not rank softness or sustainability. Not legal advice.
In the EU, fleece wool or virgin wool may be used only for wool that has not already been in a finished product. Annex III lists the protected names. Not legal advice.
Shopify
Scan compostable and biodegradable marketing wording on Shopify product copy; Green Claims Guard flags green-claim wording and names the exact provision it cites. Not legal advice.
Finding eco-friendly wording is not the same as keeping dated evidence for a specific claim. Scan, flag with cites, export dated evidence records. Not legal advice.
EmpCo Annex I 4c bans offset-based carbon-neutral or climate-neutral product claims from 27 September 2026. Lifecycle-in-value-chain claims are a different analysis. Not legal advice.
"Recyclable" on the product page is not the same job as carbon-neutral offsets. Scan green wording, review cited flags, keep dated evidence. Not legal advice.
Directive 2024/825 bans unspecialised eco-friendly or green wording from 27 September 2026 unless recognised excellent performance applies. Not legal advice.
The CMA Green Claims Code is guidance on existing consumer protection law. Six principle headings are published on GOV.UK. Not legal advice.
COM(2023) 166 is a Commission proposal, not adopted law. Official EU pages still describe it as pending. Contrast adopted Directive (EU) 2024/825. Not legal advice.
Directive (EU) 2024/825 adds generic environmental claims, unverified sustainability labels, and offset-based neutrality claims to the UCPD blacklist. Adopted 28 February 2024; published in the Official Journal on 6 March 2024. Member States had to adopt and publish transposing measures by 27 March 2026 and apply them from 27 September 2026. Not legal advice.
Shopify has no built-in green-claim provision map. Green Claims Guard flags wording and names the exact provision it cites. Not legal advice.
Vague German Umweltaussagen (umweltfreundlich, öko, klimaneutral) on a DE-facing Shopify product page need same-medium specification under UWG EmpCo rules from 27 September 2026. Not legal advice.
Unqualified Made in USA on a Shopify product page generally needs all-or-virtually-all U.S. content, or a clear qualified claim. FTC 16 CFR Part 323. Not legal advice.
A bare “recycled” line is not the same as a recycled-content percent on the same page. Scan green wording, review cited flags, keep dated evidence. Not legal advice.
Shopify Admin has no catalog-wide green-claim scanner. Green Claims Guard scans catalog and content for eco marketing wording, then you review flags. Not legal advice.
A self-made eco badge can fall under the EU sustainability-label ban from 27 September 2026 (Annex I, point 2a). What counts and what stays allowed. Not legal advice.
EU rules from 27 September 2026 judge “net zero by 2030”-style claims case by case: a detailed plan, measurable targets and an independent check. Not legal advice.
Annex I point 4b bans a whole-product environmental claim that covers only one part, such as recycled packaging vs a recycled product. A rewrite pattern for Shopify copy. Not legal advice.
The EU green-claims bans amend a consumer-protection directive. What that means for a wholesale or mixed Shopify store, and which pages to check.
16 CFR §260.13 defines recycled content and says to qualify a claim when the distinction matters. Percentages stay on the recycled-content percent guide. Not legal advice.
The FTC Green Guides, 16 CFR Part 260, are the FTC’s views on how environmental marketing claims avoid deception under Section 5. The CFR text reviewed is the 2012 revision.
Article 9 of Regulation (EC) No 66/2010 limits the EU Ecolabel to products that meet the criteria and for which it has been awarded. From 27 September 2026, Annex I point 2a covers other sustainability labels. Not legal advice.
Official greenwashing examples are the practices Directive (EU) 2024/825 adds to Annex I, the examples in its recitals, and the FTC Green Guides examples in 16 CFR Part 260. Not legal advice.
Shopify
CRA duty records for products with digital elements. Keep the Article 14 product file before an incident. Reporting starts 11 September 2026. The app does not file ENISA notifications. Not legal advice.
CRA Art. 13(19): show the support-period end date (month and year) at purchase on the Shopify product page. The duty file is not the offer. CRALedger does not render the date. Not legal advice.
Importers and distributors inform the manufacturer of a vulnerability. Article 14 ENISA filing is the manufacturer’s job from 11 September 2026. The listing includes vulnerability forwarding. Not legal advice.
Track CRA Article 14 incident deadlines and prepare encrypted ENISA Single Reporting Platform draft packs. Submit on ENISA’s platform — not inside the catalog app. Not legal advice.
Shopify Admin has no CRA duty-record pack export with chronological audit evidence. CRALedger exports record packs and chronological audit evidence. Not legal advice.
Shopify has no built-in CRA role checklist. CRALedger tracks product roles, checklists, and open record gaps. Not legal advice.
Shopify has no built-in CRA Article 14 deadline tracker. CRALedger tracks Article 14 incident deadlines on the product file. Not legal advice.
Regulation (EU) 2024/2847 Art. 71 sets application dates, including 11 December 2027 generally and earlier dates for Article 14 and Chapter IV. Verify on EUR-Lex. Not legal advice.
CRA manufacturers have Article 13 conformity and vulnerability-handling duties and Article 14 reporting duties. Other operators are later articles. Dates are on the timeline guide. Not legal advice.
Annex I Part II of Regulation (EU) 2024/2847 requires an SBOM in a commonly used machine-readable format covering at least top-level dependencies. It is technical documentation for authorities, not a format the regulation names. Not legal advice.
Annex I Part II of the Cyber Resilience Act lists eight vulnerability-handling requirements, from an SBOM through free security updates with advisories. Article 13 ties that handling to the support period. Not legal advice.
Annex I Part I of the Cyber Resilience Act is the product-property requirements: point (1) on an appropriate level of cybersecurity, and point (2)(a) to (m) where the risk assessment makes them applicable. Article 13(1) ties them to placing on the market. Not legal advice.
Under Regulation (EU) 2024/2847, Article 13(12) requires an EU declaration of conformity under Article 28 and CE marking under Article 30. The declaration model is Annex V. Not legal advice.
Article 7 lists important products in Annex III, class I and class II. Article 8 lists critical products in Annex IV. The lists are the Official Journal English text. Not legal advice.
Under Regulation (EU) 2024/2847, free and open-source software is in scope when made available in the course of a commercial activity. Stewards have a lighter regime. Not legal advice.
The Cyber Resilience Act covers products with digital elements and economic operators. NIS2 covers essential and important entities. Each cell on the guide is a quoted provision. Not legal advice.
Article 2 of Regulation (EU) 2024/2847 says which products with digital elements the Cyber Resilience Act applies to, and which it does not. Not legal advice.
Shopify
For prepacked food sold at a distance, the best-before or use-by date may wait until delivery; every other mandatory particular belongs on the product page before purchase. Not legal advice.
For EU distance selling, the food business operator’s name and address is a mandatory particular before purchase (Art. 9(1)(h)) — not a GPSR responsible-person field. Not legal advice.
For EU distance selling, the nutrition declaration and net quantity belong on the product page before purchase, not only on the parcel. Not legal advice.
Article 22 of Regulation (EU) No 1169/2011 requires a QUID when an ingredient is named, emphasised, or essential to characterise the food, subject to Annex VIII. Distance selling: before purchase. Not legal advice.
From 14 June 2026, honey origin countries and blend percentages belong on the Shopify product page before purchase, not only on the jar. Not legal advice.
EU FIC requires allergen info before purchase. Detect Annex II allergens from ingredient text and show them on the product page. Not legal advice.
The 14 Annex II substances of Regulation (EU) No 1169/2011 must be emphasised in the ingredient list and, for distance selling, available before purchase (Art. 14). Not legal advice.
Shopify descriptions can hold storage text, but Admin does not gap-review food pages. EU Food Info Guard reviews storage gaps before product display. Not legal advice.
Shopify has no built-in weekly FIC completeness review. EU Food Info Guard runs weekly scheduled completeness reviews with an audit trail of every change. Not legal advice.
Hand-coded Liquid metafields need template edits. EU Food Info Guard syncs allergen display to a storefront theme block via an app-owned metafield without template edits. Not legal advice.
Article 26 of Regulation (EU) No 1169/2011 makes country of origin or place of provenance mandatory where omission could mislead, and for Annex XI meats under implementing rules. The primary-ingredient rules in Implementing Regulation (EU) 2018/775 apply from 1 April 2020. Not legal advice.
Article 36(3)(a) covers voluntary information on the possible and unintentional presence of allergens. Commission Notice 2022/C 355/01 says harmonised provisions are pending. Not legal advice.
In Regulation (EU) No 1169/2011, best before is the date of minimum durability. Use by replaces it for highly perishable food, and the food is deemed unsafe after that date.
Article 21(1)(b) requires the Annex II name to be emphasised by a distinguishing typeset. Bold is an example in that sentence, not a word the article requires. Not legal advice.
Under Regulation (EU) No 1169/2011 the mandatory nutrition declaration is energy plus fat, saturates, carbohydrate, sugars, protein and salt, per 100 g or 100 ml, in the Annex XV order. Not legal advice.
Shopify
From 27 September 2026, EmpCo pre-purchase duties: show a Union-harmonised repairability score when it applies, otherwise producer-supplied spare-parts facts. Not legal advice.
From 31 July 2026, keep repair requests, quotes, and revision-linked forms with a redacted audit trail. Not legal advice.
Directive (EU) 2024/1799 Art. 22 sets the transposition deadline. Use EUR-Lex national transposition measures. This page claims no country’s status. Not legal advice.
Directive (EU) 2024/1799 Art. 4: the European Repair Information Form names the repairer, the good, the defect, price or maximum, time, handover, and related conditions. Voluntary. Not legal advice.
Shopify inbox threads stay unredacted. RepairProof EU preserves redacted repair records from intake through return with revision-linked forms. Not legal advice.
Track Shopify repair requests through diagnosis, quote, repair, return, and closure. RepairProof EU keeps the stage record. Not legal advice.
Match the Shopify order and product before you accept a repair request. RepairProof EU verifies purchases before intake. Forms come after. Not legal advice.
Directive (EU) 2019/771 makes the seller liable for a lack of conformity that becomes apparent within two years of delivery. A commercial guarantee is an extra undertaking and does not affect those remedies. Not legal advice.
Annex II of Directive (EU) 2024/1799 lists the Union acts that set repairability requirements. Article 5’s manufacturer repair obligation applies to goods covered by those acts. Not legal advice.
The French ministry’s English text says the repairability index is a score from 1 to 10, required by article 16 of law n° 2020-105. From 2025 a durability index replaces it for some categories. Not legal advice.
Shopify
Shopify’s 90-day collaborator expiry auto-expires unused access. A 30/90-day reminder is a separate cadence; overdue does not expire or Reactivate anyone.
Check which installed Shopify apps hold customer-data scopes: review each app under Settings > Apps, or classify and flag every granted scope in one audit.
read_customers, read_orders, read_all_orders, and write_products control which store data an installed Shopify app can read or change. Review granted permissions in Settings > Apps. Not legal advice.
An app can use a scope only after it is approved on the store. Required scopes are granted at install. Added scopes need approval again. Review them in Settings > Apps. Not legal advice.
Run a staff and installed-app access review without the audit app itself reading customer or order data. Staff Access Audit Guard. Not legal advice.
Actions → Suspend on a collaborator returns “Cannot suspend or reactivate collaborators.” That is expected. Remove the collaborator account in Settings → Users. Access Audit Guard does not revoke users.
Companies permissions are separate from Customers. Leave Companies off the CSR role. There is no hide-the-link setting. Not legal advice.
POS roles have no hide-order-history permission. Temporary staff still see that location’s past orders. Staff Access Audit Guard does not change POS roles. Not legal advice.
Shopify Admin shows per-app permissions, not a Low-to-High access risk score. Staff Access Audit Guard scores every installed app’s access risk. Not legal advice.
Score leftover Admin access without installing. Covers leftover 2FA, collaborator billing, and who can publish. No Admin scrape. Not a security attestation.
Themes permission also lets staff change and publish draft themes. Share a visitor preview link instead. Not a preview-only role. Not legal advice.
POS permissions are set per POS role, separate from admin staff permissions. Review discount and refund rights on the POS role. Cite help.shopify.com only. Not legal advice.
Ownership evidence is the installed-app table (scopes + owner). A staff user list is a different record. Score apps, flag customer-data access, watch owner drift. Not a security attestation.
Drift alerts fire when installed-app scopes, owners, or costs change. Score the store, flag protected customer-data scopes, and track duplicate paid categories — without reading customer data.
Shopify collaborator access expires after 90 days without login. That is not staff Suspend. Use Actions → Reactivate user, or Remove and a new request. Access Audit Guard does not Reactivate.
Shopify has no calendar end date for staff or collaborator access. Collaborators expire after 90 days unused. Reminders are not removal. Not legal advice.
Shopify’s collaborator request code lives under Settings → Users → Security. Only Partners you share the code with can ask for access. Access Audit Guard does not rotate the code.
Collaborator accounts are for Shopify Partners, gated by a request code, and expire after 90 days without login. Staff accounts are store users with roles. Removal differs. Cite Help Center only.
Shopify Help Center says collaborators are Partners you allow in with a 4-digit request code. You approve a role before access, and you can change that role later. Collaborators don’t count towards the store’s user limit. Not legal advice.
Staff access audit for Shopify. Admin user lists are a snapshot. Re-audit staff, collaborators, and app scopes, flag customer-data access, and export evidence. Not a security attestation.
Shopify Help says that when you change ownership of a store in your organization, users keep their store permissions and their organization permissions are removed. Review access after the transfer. Not legal advice.
Shopify’s term covers data that directly relates to a customer. Public apps request that access, and name, address, email, and phone, before the API returns them. Not legal advice.
Shopify lists five recent login sessions under Recent access to store, a separate user-management activity log, and devices on your own account. Not legal advice.
Shopify’s store activity log records recent admin actions and shows at most 250 results. It is view-only and cannot be exported. Login history and the user-management log are separate pages. Not legal advice.
Compare
Fair comparison: Staff Access Audit Guard vs Adminlog ‑ Audit Trail. App-scope and staff reviews vs admin change history. Not a ranking. Not legal advice.
Fair comparison: Free on AddressFence blocks shipping PO Boxes and parcel lockers. Billing-address rules, on a paid plan, vs HBN: Address Rules delivery-address policies.
Fair comparison: Agentic Catalog by momiji vs Agentic Catalog Repair for Shopify AI shopping readiness.
Fair comparison: Agentic Catalog by momiji vs AI Shopping Readiness for Shopify AI shopping readiness.
Fair comparison: B2B PO Guard vs PO Validator B2B for requiring and validating purchase-order numbers at Shopify B2B checkout.
Checkout can block a shipping PO Box since 17 June 2026. Free on AddressFence also blocks shipping PO Boxes and parcel lockers, plus a small set of ZIP rules. Billing-address rules are on a paid plan. Do not block every PO Box. Address Blocker sunset 31 August 2026.
Fair comparison: CLPLens vs GPSR & CLP Hazard Labels for CLP hazard information on Shopify product pages.
Fair comparison: EUDR Records Manager vs EUDR Guard for EU Deforestation Regulation records on Shopify.
Fair comparison: EU Food Info Guard vs FoodLabelKit for EU food information on Shopify product pages. Annex II detection vs nutrition-panel display. Not a ranking. Not legal advice.
Fair comparison: FibreLedger vs Fibra: Textile Labels for EU textile fibre labels on Shopify product pages.
Shopify has no built-in Annex II allergen mismatch check. EU Food Info Guard flags allergens mentioned in ingredients but omitted from the declared list. Not legal advice.
Fair comparison: Green Claims Guard vs GreenClaims EmpCo Compliance for Shopify green-claim scans. Not legal advice.
Fair comparison: Green Claims Guard vs Sealcheck: EU Green Claims for Shopify green-claim scans. Not legal advice.
Most PO box blocker apps and native Shopify act on shipping. Native Checkout Blocks is available to all merchants for that job. Billing PO boxes and missing street numbers are the gap.
Native Disclosures (cancer, reproductive, both, alcohol) exist since 17 June 2026. The app wedge is a 2028 chemical name plus an audit trail. Not legal advice.
Fair comparison: Prop 65 Warning Manager vs Prop65Kit for California Prop 65 warnings on Shopify product pages.
Put manufacturer and RP fields on a vendor metaobject, then render them on the product template. Attach the vendor once. Not an EU appointment. Not EUDR.
Apify
Cheapest first paid run for Apple Podcast Scraper Apify: searchTerm technology, country us, limit 3. Live PPE: Start $0.005 + result $0.0025. Estimate ≈ $0.0125. From $2.50 / 1,000.
Get a spreadsheet with previous rank, not only today’s Top Podcasts position. A chart_rank CSV has no previousRank. First snapshot: US + limit 1 ≈ $0.003. From $3.00 / 1,000 rows. Movement report $2.50 after the $0.05 cap. No Apple API key.
Run Apple Podcasts charts for multiple storefronts and iTunes Search one country at a time. ISO codes such as us, gb, jp. From $2.50 per 1,000 results.
Key Apple Podcasts Scraper output fields from official Apple/iTunes endpoints: showName, collectionId, rank, sourceUrl, and fetchedAt. From $2.50 per 1,000 results.
Search Apple Podcasts / iTunes by keyword with the iTunes Search API. Cheapest first paid run: searchTerm + limit 3 ≈ $0.0125 total (incl. Start $0.005). From $2.50 per 1,000 results.
Cheapest first paid run for the Article Extractor actor: one public news, blog, or press URL. Documented PPE math only — Actor Start $0.00005 plus $0.008 per useful article row. Leave the $2.50 audit report and $5.00 batch export off.
Send Apple Podcasts Scraper output from official Apple/iTunes endpoints to a webhook after you approve the dataset payload. dryRun tests without saving or sending. From $2.50 per 1,000 results.
Export recent Apple Podcasts episode metadata with includeEpisodes, or snapshot episode charts, via official Apple/iTunes endpoints. From $2.50 per 1,000 results.
Paste a keyword, keep limit at 3, Start, then Dataset → Download CSV. No Apple API key. Search + limit 3 ≈ $0.0125. From $2.50 / 1,000 results.
Turn a public article URL into Markdown for RAG: headline, byline, date, and body. Open Input → Start. 1 URL ≈ $0.008. From $8.00 / 1,000 useful rows. Default outputFormat is markdown.
Cheapest useful first paid run for a G2 reviews scraper: one public G2 review-page URL, reviewLimit 1, dataset delivery. Live PPE: Actor Start $0.001 plus $0.003 per default-dataset result. Store card from $3.00 / 1,000 results.
Filter public SAM.gov opportunities by NAICS and download CSV without writing api.sam.gov. Open Input → Start. One US source × maxItemsPerSource 1 ≈ $0.008 if a row delivers. From $8.00 / 1,000 rows. Empty queues are $0. Leave report ($5) and export ($7) off.
Pull Apple Podcasts chart rankings by country from official Apple/iTunes endpoints. Snapshot show and episode ranks. From $2.50 per 1,000 results.
Refresh known Apple Podcasts shows by collection ID via the iTunes Lookup API. Recurring watchlist metadata. From $2.50 per 1,000 results.
Cheapest first paid run for a SAM.gov scraper or grants scraper on SAM.gov, TED & Grants Bid Alerts Scraper. One source, maxItemsPerSource 1, dryRun false. Documented PPE only: $0.008 per delivered opportunity or alert row; no live start charge.
Apple Podcasts / iTunes Customer Reviews RSS is per storefront. Empty countries and later empty pages should not become billed rows. Pass podcast IDs; keep the first run to one show and one page.
One CSV queue for TED and SAM bid-desk deadlines and CPV alerts. Start TED-only, then add us with a SAM.gov key. Open Input → Start. maxItemsPerSource 1 ≈ $0.008 per delivered row.
Directory of existing guides. Confirm live listings on the Shopify App Store or the Apify Store. This page does not add prices, review counts, or install metrics.