Installed-app scope audit
Which installed apps can reach customer data? Read granted scopes — not the customer records
In Shopify admin, go to Settings > Apps, open each installed app’s page, and check its Activity and permissions section (the areas it can view or edit) and its Privacy section (the Customers category lists the customer data it can access). To review every install at once, Staff Access Audit Guard classifies each granted scope, flags apps — including AI apps — that can read or write customer data, and scores the store Low to High (higher is safer). For developers: an app reads its own granted scopes with currentAppInstallation and its accessScopes field; scopes such as read_customers, write_customers, read_orders, and write_orders cover customer and order objects.
Staff Access Audit Guard (Shopify App Store) reviews installed app access, granted scopes, staff access records, and ownership evidence without reading customer or order data. Apps request scopes — including AI and agentic apps. The app classifies each granted scope, flags protected customer-data and broad-write access, and scores your store Low to High (higher is safer). This page is not legal advice.
Related: Agentic Catalog by momiji — Crawler rules and complete product JSON-LD for shopping agents.
Free check first: App access scope reader runs in your browser and sends nothing. Paste an app's access scopes and see which touch customer data or can write.
Scope classification is not the same as opening customer records
Shopify’s admin shows which apps are installed. A granted-scope audit answers a different question: which of those installs hold protected customer-data scopes or broad-write access, classified and scored, without the auditor reading customer or order data.
Install Staff Access Audit Guard
How to review app scopes for customer-data access
- Open the installed-app access view and read each app’s granted scopes.
- Flag protected customer-data scopes and broad-write access.
- Score the store Low to High (higher is safer) and note overdue staff or collaborator reviews.
- Keep ownership evidence for who owns each install when scopes or owners change.
Install Staff Access Audit Guard
Not the same as ownership evidence, staff checklist, or collaborator expiry
- Ownership evidence — scopes plus owner table for who owns the install. See ownership evidence.
- Staff permissions checklist — leftover Admin access scoring. See staff permissions checklist.
- 30/90-day review reminders — staff/collaborator review cadence. See 30/90-day review reminders.
- Collaborator cannot-suspend — Remove path. See cannot suspend collaborator.
Install Staff Access Audit Guard
What this page is not
- Not a reader of customer or order payloads.
- Not a substitute for Shopify’s user management activity log when you need who edited a role.
- Not a substitute for the ownership, staff-checklist, or collaborator siblings.
Install Staff Access Audit Guard
Related pages
- Score installed app access risk Low to High — ranked score, not the customer-data scope list alone
- Scope, owner, and cost drift alerts
- Shopify app ownership evidence
- Staff access audit: permission drift
- 30/90-day review reminders
- Access audit without the audit app reading customer or order data
- Staff Access Audit Guard
Paste an app's scopes into the free app access scope reader.
Not legal advice. Confirm your counsel before you treat a scope flag as a legal finding.