Free tool
Staff access review checklist generator
Direct answer. Tick the kinds of people who can sign in to your Shopify admin or POS, add the review date and the reviewer, and the page builds a checklist you can print or paste into a ticket: who to list, which permissions to compare against each person’s job, whose access to end, and what to write down as evidence. It runs in your browser and sends nothing anywhere.
Each step points to the Shopify Help Center page that describes the setting. It is a review aid, not legal advice and not a security assessment.
Who can sign in to your store?
To keep this list current between reviews, with staff and collaborator review reminders and a check of every installed app’s access, see Staff Access Audit Guard on the Shopify App Store.
Where the steps come from
- Shopify Help Center: users — staff accounts, collaborator accounts and removing access.
- Shopify Help Center: permissions — what each admin permission allows.
- Shopify Help Center: secure sign-in — two-step authentication.
- GDPR, Regulation (EU) 2016/679 — Article 32 (security of processing) and Article 5(1)(f) (integrity and confidentiality).
How often to review is your decision. This page does not set an interval; write down the one your business, payment provider or auditor expects.
What this page is not
- Not legal advice and not a compliance certificate.
- Not connected to your store: it does not read staff lists, permissions or logs.
- Not a data collector: what you type stays in this browser tab.