-
ShipTrackNotify the customerControl costs
-
For your team
- Customer Service Fewer tickets on the shipment, replies with the full context
- Logistics Multi-courier, shipments on hold and performance by area
- Operations Customer service and logistics on the same exceptions
- IT and developers REST API, webhooks, sandbox and MCP server
- Finance Cost control and invoices checked by Nelson
- CEO and founder Shipping numbers, ready for the board
If you ship for othersCost control Nelson reads the courier invoicesNelson Line by line, showing you where you pay more than agreed.More than 10,000 shipments a month, or several brands? Enterprise One→ -
Connects toFor developersMost used
- Pricing
-
Learn
- Enterprise One
Your shipping data, protected and in Europe
ISO/IEC 27001 certification, infrastructure and data in the European Union, GDPR by design. For 12 years we have managed shipments for more than 1,400 eCommerce and logistics businesses: security reviews and procurement find their answers here.
- Does the supplier hold an ISMS certificate? Yes ISO/IEC 27001 certificate
- Where is the data stored? Yes Infrastructure and data in the European Union
- Is a data processing agreement available? Yes DPA under the GDPR
- Are the sub-processors documented? Yes List of sub-processors
- Is access managed by role and logged? Yes Roles, permissions and access logs
- Are availability and response times contractual? Yes SLAs in the Qapla' One contract
What we protect and how
Orders, addresses and contact details of your customers, courier rates and invoices all pass through Qapla'. That is why security covers processes, infrastructure and access, not just code.
- ISO/IEC 27001
- Information security management system certified to ISO/IEC 27001: processes, controls and regular audits.
- Data in the European Union
- Infrastructure and data in the EU. Sub-processors are documented, and the list is available on request.
- GDPR by design
- We collect only the data needed for shipping. Deletion on request and a DPA for your legal team.
- Roles and access
- Permissions by user and by department, plus access logs. Each merchant of a logistics provider sees only its own data.
- Application security
- API keys for each channel, encryption in transit, security reviews of the code and responsible handling of vulnerabilities.
- SLAs and continuity
- For Qapla' One, availability and response times are in the contract, with continuous monitoring and a continuity plan.
What you get for the security review
Your procurement team asks, we send the documents. No forms to chase: one person from our team follows the review from start to signature.
- PDF ISO/IEC 27001 certificate With the scope of the certification and its validity date.
- PDF Data processing agreement (DPA) Under Article 28 of the GDPR, ready for your legal team to review.
- XLS List of sub-processors Who processes which data, for which service and in which country.
- DOC Answers to your questionnaire We fill in your procurement format, not a standard form of ours.
- PDF Contractual SLAsQapla' One Availability, response times and escalation channels.
Frequently asked questions
Is Qapla' ISO 27001 certified?
Yes. Qapla' has an information security management system certified to ISO/IEC 27001, with processes, controls and regular audits.
Where is the data stored?
Data and infrastructure are in the European Union. Sub-processors are documented, and the list is available on request.
Do you sign a data processing agreement (DPA)?
Yes. The DPA under the GDPR is available for your legal team, together with the list of sub-processors.
Do you answer security questionnaires?
Yes. Send us your procurement questionnaire: a member of our team handles it and replies with the documentation.
Are SLAs contractual?
For Qapla' One, availability and response times are written into the contract, with continuous monitoring and a continuity plan.
Have a security questionnaire?
Send it over: we reply with the documentation ready, and we set up a call with your IT team if needed.