The store stays up during a restart
Both the storefront and the API run as two instances. A new version is deployed one instance at a time, and if something fails it rolls back to the previous version on its own.
Operations you do not have to worry about
Server, backups, monitoring and updates are included in every plan. Here is exactly what that means.
No card needed. The Free plan has no time limit.
Monitoring that speaks up on its own
Every two minutes it checks that stores respond. It also reports silent failures: an email that was not sent, a paid order without an invoice, a certificate about to expire, an empty feed.
Backups verified by restoring them
The database is backed up every night and every backup is restored in a test. A copy is kept for 90 days in storage in the EU, and another goes to a second server with a key that can only write.
Security
Payment gateway keys and courier passwords are encrypted in the database. GPS location is removed from uploaded photos. On 14 September 2026 the store and the API went through an OWASP ZAP security scan, and the findings were fixed.
Privacy
Analytics and advertising events are only sent with the visitor’s consent, including from the server. Servers and backups are in the EU, and transfers to processors outside the EU are covered by standard contractual clauses.
Checks before deployment
Around 4,700 automated tests and 78 checks stop an error before it reaches customers.
Your data
Your content stays yours. After the contract ends, you can request your data within 30 days in a machine-readable format. The database is standard PostgreSQL, and the Vendure commerce core is open source.
Your store can be online in a few minutes
Setting up takes a few minutes and you do not need a card. When you are ready, you connect your domain and move to a paid plan.
No card needed. The Free plan has no time limit.