App ownership evidence
Ownership evidence is the installed-app table (scopes + owner) — a staff user list is a different record
Staff Access Audit Guard (Shopify App Store) reviews installed app access, granted scopes, staff access records, and ownership evidence without reading customer or order data. It scores every installed app’s access risk, flags apps — including AI apps — that can read or write customer data, and tracks staff and collaborator access with 30/90-day review reminders. It does not revoke staff, uninstall apps, or attest that the store is secure. This page is not a security attestation.
Related: Agentic Catalog by momiji — Crawler rules and complete product JSON-LD for shopping agents.
Free check first: App access scope reader runs in your browser and sends nothing. Paste an app's access scopes and see which touch customer data or can write.
Staff lists answer “who can log in”; ownership evidence answers “which app, which scopes, which owner”
Settings → Users shows people. Installed apps request scopes and have an owner on the install. Ownership evidence is the reviewable record of that app inventory — scopes and owner together — so a later audit can show what was granted and who owned the install. A screenshot of today’s staff list does not replace that table.
Shopify Admin can show app activity and data-privacy signals under Settings → Apps (see track app activity and permissions from Settings). That native view is useful context. A scored access table with owner and customer-data flags is the listing job on this page.
Listing sequence: audit, scopes + owner table, flags, drift
- Install and let the first audit run.
- Open the installed-app access table with scopes and owner — that is the ownership-evidence surface.
- Review apps flagged for customer-data read/write access, including AI apps, as the listing describes.
- Keep staff and collaborator access records alongside the app table when people access is also in scope.
- Re-run the audit after scope, owner, or cost changes.
Not the same as reminder cadence or “staff drift” as the primary question
- 30/90-day review reminders — overdue people reviews versus platform collaborator expiry. See 30/90-day review reminders.
- Staff access audit vs one-time user list — permission drift on people and apps as the hub narrative. See staff access audit.
- Employee monitoring or customer-data export — not this listing. The job is store-level audit metadata and ownership evidence, without reading customer or order data.
What this page is not
- Not a SOC report, attorney advice, or a claim that the store is secure.
- Not a tool that revokes staff or uninstalls apps for you.
- Not a substitute for the 30/90 reminder guide or the staff-drift admin guide when those are the questions you actually have.
Related pages
- Audit app scopes for customer data
- Staff access audit: permission drift is not a one-time user list
- 30/90-day review reminders vs platform expiry
- Shopify changelog: track app activity and permissions
- Staff Access Audit Guard — live App Store listing
Not a security attestation. Confirm the live listing and privacy text before you treat an export as evidence for a third party.