TikTok Shop Seller Terms Of Services (US)
06/03/2024
(For residents of and entities based in the United States of America)Last updated: July 18, 2023 These Seller Terms of Service are effective on you on July 18, 2023, if you created your seller account or accepted or otherwise agreed to these terms on or after July 18, 2023. These Seller Terms of Service are effective on you on August 18, 2023, if you created your seller account or accepted or otherwise agreed to a previous version of these terms before July 18, 2023. Please read our update notice for more details about the changes to these Seller Terms of Service.
1. Introduction
1.1. These Seller Terms of Service (these “SellerTerms”) govern your use of the Commercial Products as defined in the TikTok for Business Commercial Terms of Service (“Commercial Terms” and currently available at https://ads.tiktok.com/i18n/official/policy/commercial-terms-of-service） to promote and sell goods or services, including your use of the e-commerce features and services offered under the name “TikTok Shop” on the TikTok Platform (collectively, “Commerce Products”). “You” or “your” means the entity or individual using the Commerce Products for its business or commercial purposes. “TikTok”, “we”, “our”, and “us” means TikTok Inc., which provides its services to you together with its affiliated companies. “TikTok Platform” means all websites, products, features, apps, services, technologies, software, and properties created or operated by TikTok or any of its affiliates. 1.2. By using Commerce Products, you agree to be bound by these Seller Terms. If you are using or placing Commerce Products on behalf of a company or other entity, then “you” also includes that company or entity, and you agree that you have all rights and authority necessary to bind that company or entity to these Seller Terms. 1.3. These Seller Terms supplement and form part of the Commercial Terms. They apply in addition to the Commercial Terms and any other applicable Supplemental Terms (as defined in the Commercial Terms). a) To the extent any specific provision of these Seller Terms conflicts or is inconsistent with any term of the Commercial Terms, the specific provision of these Seller Terms will prevail.b) Capitalized terms have the meaning given in the Commercial Terms or any other applicable Supplemental Terms unless otherwise defined within these Seller Terms.2. Our Commerce Products and Services
2.1. TikTok provides features and places on TikTok’s Platform, like TikTok Shop, where you can feature, promote, and offer your products and services (“Your Products”) to users of the TikTok Platform. 2.2. Depending on which of our Commerce Products you use, we provide features that allow you to: a) get access to Seller Center and utilize the services/features we offer, including to find and collaborate directly with TikTok creators (“Creators”) to promote Your Products and connect directly with other third parties, including TikTok Shop partners (“Partners”), to help you manage Your Products on TikTok Shop; b) upload and manage product information and listings for display to our users; c) receive orders and independently conclude sales to our users; d) track and manage your orders and deliveries; e) provide customer services directly to users; f) establish promotion plans, e.g., through the affiliate feature; and g) use other functionalities and features offered by TikTok Shop. 2.3. If you use or authorize others, including third-party developers (“Authorized Users”), to use or access TikTok’s application programming interface (API) to host Your Products or manage your activity on the TikTok Platform or otherwise in connection with your use of TikTok’s Commerce Products, you and your Authorized Users agree to abide by the TikTok Shop Developer Terms of Service.3. Licenses and Permissions
3.1. TikTok grants you the license contained in Section 6.1(b) of the Commercial Terms for your use of TikTok’s Commerce Products. 3.2. In offering our Commerce Products and services to you, we agree to use and share your data in accordance with the TikTok Shop Privacy Policy. 3.3. Section 6.2 of the Commercial Terms governs content created by you or for you (“Your Content”) and the license you grant to TikTok and users in connection with your use of TikTok’s Commerce Products. 3.4. This license shall include TikTok’s use of Your Content to analyze and display information about the performance and ranking of your promotions, products, and services on the TikTok Platform, which may be based on factors such as user engagement with Your Products, user ratings and video and promotional quality.4. Seller Eligibility and Commitments
4.1. To be eligible to use our Commerce Products, you may be required to create an account on the TikTok Platform and complete onboarding and compliance screening. 4.2. In accessing and using our Commerce Products, you agree to the following: a) You shall only use TikTok’s Commerce Products if you are 18 years of age or older. b) You represent, warrant, and covenant that at all times during the term of the Commercial Terms: A. You have and will maintain all the permissions, approvals, authorizations, certifications, and licenses that are necessary for you to offer, promote, sell, or otherwise make available Your Products on the TikTok Platform. B. You and Your Products will comply with all applicable laws, regulations, rules, requirements of relevant government authorities, and industry standards, including without limitation, applicable privacy and data protection laws, export control and economic sanctions laws, product compliance and safety laws, consumer protection laws, truth-in-advertising laws, anti-slavery laws, and child, forced, or prison labor laws (“Applicable Laws”). C. You and Your Products will comply with all applicable TikTok policies and guidelines made available by TikTok (as may be updated from time to time), which are hereby incorporated by reference and made part of these Seller Terms. c) You shall not offer, promote, sell, or otherwise make available on the TikTok Platform or through the Commerce Products, any goods or services that are illegal, counterfeit, or otherwise infringe any third party’s intellectual property rights under the Applicable Laws. You shall comply with the TikTok Shop Intellectual Property Policy and the TikTok Shop Anti-Counterfeit Policy. d) If you engage with a Creator in connection with your use of Commerce Products, you shall only engage with Creators who you have confirmed are 18 years of age or older. e) Your Content must comply with the TikTok Shop Content Guidelines, and the TikTok Community Guidelines, each incorporated herein, which may be updated from time to time, and all Applicable Laws. f) Your Content (whether created by you or created for you) must not include falsehoods or misrepresentations about you, us or our affiliates (including TikTok), our or their respective partners and products, a third party, or another person. g) Your Content must be appropriate for audiences 13 years of age and older and adhere to our Community Guidelines. h) You must not falsely state, misrepresent, or conceal affiliation with any person or entity.i) It is your responsibility to understand and abide by any Applicable Laws, including the United States Federal Trade Commission’s Guides Concerning the Use of Endorsements and Testimonials in Advertising, including by ensuring that you provide all necessary disclosures to people viewing Your Content, such as any disclosures needed to indicate the commercial or sponsored nature of Your Content (which includes content created for you by third parties). In addition to your independent legal obligation to include applicable disclosures, TikTok requires the use of the Branded Content Toggle when posting any Branded Content to help you communicate when a commercial relationship exists. j) Your Content must strictly comply with all Applicable Laws, including any advertising regulations, standards, and codes of practice issued by a competent authority in the United States. k) Your product listings must make available all legally required terms and conditions under the Applicable Laws to a buyer prior to the conclusion of any sale. l) Your product listings must comply with our Product eligibility criteria, which can be found in the Seller Academy. m) You shall not offer any product that appears on our Prohibited Products List and Restricted and Unsupported Products List, which can be found in the Seller Academy. n) You are responsible for processing and shipment of any orders and shall comply with the TikTok Shop Customer Order Shipping Guidelines. o) You shall comply with all Applicable Laws with respect to a buyer’s rights related to cancellations, returns, and refunds as well as the TikTok Shop Customer Order Cancellation, Return and Refund Guidelines and the TikTok Shop After-Sale Dispute Escalation Guidelines. p) Except as otherwise provided under the TikTok Shop After-Sale Dispute Escalation Guidelines, you are solely responsible for investigating and resolving disputes with buyers of Your Products. TikTok will neither be a party to nor responsible for any disputes. q) You represent and warrant that neither you nor any of your employees, officers, agents, representatives and/or professional advisers (“Personnel”) has (i) committed an offense under any anti-slavery or human trafficking laws; or, (ii) is aware of any circumstances that could give rise to an investigation or has been notified that it is subject to an investigation relating to an alleged offence or prosecution under any applicable criminal law or regulation, including any anti-slavery or human trafficking laws. If you become aware or have reason to believe that you and/or any of your Personnel have breached or potentially breached any of your obligations under this clause, you shall notify us immediately in writing with full details of the circumstances concerning the breach or potential breach. r) As part of your use of Commerce Products, you agree that you shall use any data (including personal data) that TikTok makes available to you or you receive from TikTok or its users (“TikTok Shop Data”), such as when users interact with Your Products or communicate with you directly, in accordance with (i) these Seller Terms, (ii) your Privacy Policy and any other privacy notice(s), and (iii) any applicable data protection laws, regulations, and guidelines. In addition, you agree that: A. You shall only use TikTok Shop Data for the purposes of processing and fulfilling an order from a buyer and where necessary handling refunds, returns, cancellations, inquiries, complaints, disputes, or claims from a buyer in relation to an order (“Permitted Purpose”). B. You shall not use TikTok Shop Data for any other purpose(s), including without limitation: (i) sell or trade TikTok Shop Data; (ii) use TikTok Shop Data to send any direct marketing or promotional messages or communications to a TikTok user by email or any other method of direct communication with a TikTok user, unless such TikTok user has provided their prior consent in accordance with the requirements of Applicable Law. You shall not use the TikTok Platform’s messaging functionality for any marketing or promotional purposes. You shall not transfer any TikTok Shop Data outside of your jurisdiction without our prior written consent. C. You agree that you shall not sell or share any data about TikTok users unless they have authorized you to do so. D. You shall take any technical and organizational data protection measures required by any applicable data protection laws to ensure the security of any such data, including the Minimum Security Requirements outlined in Appendix 1. E. You shall not transfer or provide access to, any personal data of a TikTok user in the TikTok Shop Data (“User Data”), to any employees, contingent workers, agents, or contractors of TikTok or any affiliate of TikTok that are located in a CFIUS Restricted Country or are CFIUS Restricted Persons. You shall only use or otherwise process such User Data in accordance with all then-current applicable TikTok policies. "CFIUS Restricted County" means any country identified in 22 C.F.R. §§ 126.1(d)(1) or any department, agency, or instrumentality thereof. "CFIUS Restricted Person" means any individual or entity organized, domiciled, headquartered, or with its principal place of business in a CFIUS Restricted Country; (y) any natural individual or entity with nationality of a CFIUS Restricted Country who is not also (1) a U.S. citizen, (2) lawfully admitted for permanent residence as defined by 8 U.S.C. § 1101(a)(20), or (3) a protected individual as defined by 8 U.S.C. § 1324b(a)(3); or (z) any natural individual or entity working or residing in a CFIUS Restricted Country (each of 12.3.2(ii)(a)-(d), including to the best of Service Provider’s knowledge based on reasonably available information, any individual or entity that is owned, controlled by, or acting on behalf of a CFIUS Restricted Person). s) You shall not: (i) use or allow on TikTok Shop any product reviews, testimonials, or endorsements (whether published on TikTok Shop or other platforms) (“Customer Reviews”), unless you hold documentary evidence that such Customer Reviews are genuine; (ii) delete or manipulate the presentation of any Customer Reviews; (iii) influence user behavior in relation to Customer Reviews (including without limitation, requesting positive reviews from users or asking users to remove negative reviews); or (iv) solicit any Customer Reviews from third parties (whether for your own products or for products of another Seller). 4.3. You acknowledge and agree that as a global company, we adhere to applicable laws and regulations which may prohibit us from doing business with restricted individuals, entities, and countries.5. Your Commercial Relationship with Creators and Other Third Parties
5.1. You are solely responsible for the contract and terms and conditions you make with Creators or other third parties, including any Creators or third parties you find or contract with via the Seller Center or the TikTok Shop Partner Center (“TTSPC”), or in connection with TikTok Shop, and TikTok shall not be a party to any such agreements. You acknowledge and agree that any services that Creators or other third parties provide to you will be done as independent contractors, pursuant to agreements to which we are not a party. We do not act as your representative, and we are not responsible for and do not determine the amount or terms of any commissions or other payments you pay to Creators or other third parties for their services to you. If you contract with any third parties via the Seller Center or the TTSPC, the Service Market and Partner Services Terms set out on Appendix 2 will apply. 5.2. We have no liability for any claims in relation to your contracts with Creators or other third parties, including regarding a Creator’s or other third party’s services. We will not be responsible for enforcing any contract between you and Creators or other third parties, including Creators or third parties you connect with through the Seller Center.6. Your Use of TikTok API
If we make available to you any API and API Data (as defined in Appendix 3), the API Terms set out on Appendix 3 will apply to your use of such API and API Data.7. Payment Services to You
7.1. TikTok uses third party payment service providers (“Third Party PSPs”) to provide payment services, including payment collection, processing, settlement, and refund services, for Commerce Products (“Payment Services”). In order to receive payments for Commerce Products, you must review and agree to the below Third-Party PSP agreements and any other terms and conditions that are applicable to you for those Payment Services, which may be updated by such Third Party PSP from time to time in its sole discretion. ● Hyperwallet Agreements: Hyperwallet Terms and Conditions; Hyperwallet Privacy Policy 7.2. In order to receive payments, you may also need to complete an onboarding process with a Third-Party PSP, which may include providing information about you and your business. You acknowledge and agree to provide TikTok accurate and complete information about you and your business, and you authorize TikTok to share that information, including information about your agreements with Creators and Partners, and transaction information with Third Party PSPs to enable the Third-Party PSPs to provide Payment Services. If information about you, your business, or your agreements with Creators and Partners change, you must promptly provide the updated information to TikTok, and you will be solely responsible for any losses associated with your failure to provide accurate and updated information to TikTok. We will not be liable to you for any losses suffered as a result of any breach, default, or other conduct by Third-Party PSPs. 7.3. You acknowledge and agree to be solely responsible for and agree to pay any and all amounts, including but not limited to processing fees, owed to Third Party PSPs, whether charged by them to you or TikTok, in connection with Payments Services they provide to enable payments to you associated with your participation in Commerce Products. You further agree that if TikTok pays any charges by a Third-Party PSP in connection with your participation in Commerce Products that you will be fully liable to and will reimburse TikTok for those amounts. 7.4. TikTok provides transaction management, technology, and communication services to enable Third Party PSPs to provide you with Payment Services. Those services include: (i) connecting you to Third Party PSPs’ platforms to submit onboarding and transactional information; (ii) providing Third Party PSPs with information about you and your business and payments associated with Commerce Products; (iii) providing you with an interface to view transactional and/or account data associated with Payment Services provided by Third Party PSP; and (iv) any other activity necessary to enable Third Party PSPs to provide Payment Services. You grant TikTok all needed authorizations to perform these services. For these services and consistent with Section 9 below, you agree that we may charge you and that you will pay a fee to TikTok. TikTok does not provide Payment Services.7.5. You will be provided with details about Third Party PSP fees and TikTok fees that you may be charged in connection with your use of Commerce Products. 7.6. TikTok may establish and maintain a reserve at your account in accordance with the TikTok Shop Reserve Policy. TikTok will use such reserve and disburse any unused balance of such reserve to you pursuant to the foregoing policy. 7.7. You acknowledge and agree that payments to you may be frozen, delayed, or withheld, in accordance with the Applicable Laws, if you are in violation of this Agreement or any other applicable TikTok terms or policies, or as otherwise consistent with applicable Third-Party PSP terms or agreements, and that TikTok shall have no liability or responsibility to you in connection with such actions. You further acknowledge and agree that payments otherwise due to you in connection with Commerce Products may be offset by amounts that you owe TikTok or an applicable Third-Party PSP, including for fees, taxes, chargebacks, refunds, overpayments, payment errors, payment network fines, undelivered goods or services, and other losses, associated with your use of Commerce Products, Payment Services, or other TikTok products. If you owe TikTok an amount that exceeds payments owed to you, you authorize TikTok to charge or debit the Payment Account to cover the amount owed. 7.8. You agree that a Third-Party PSP’s receipt of funds from a buyer for goods or services that you sold through Commerce Products in connection with the Third-Party PSP providing Payment Services shall constitute receipt of that amount by you and shall satisfy the buyer’s obligation to you in connection with that sale. 7.9. If a Third-Party PSP refuses at any point to provide Payments Services to you, we may terminate your Seller Center account, and you will not be able to receive payments in connection with Commerce Products.8. Purchase Price of Your Products
You are solely responsible for setting the purchase price of Your Products. You shall ensure that any promotional pricing, price reductions, or other discounts or offers that you may provide will at all times comply with all Applicable Laws. You acknowledge and agree that we may, in our sole discretion, offer coupons, vouchers, or other promotions that may be accessed or used by buyers that purchase Your Products.9. Commissions to Creators
You are solely responsible for deciding the rate of commission (if any) for Creators and Partners who provide services to you, including to promote Your Products on the TikTok Platform. You acknowledge and agree that a portion of the payments from buyers who purchase Your Products on TikTok will be deducted and paid to Creators with whom you have contracted, as fees payable by you to the Creators (“Creator Commissions”) as agreed by you and the applicable Creator. This will be performed by Third Party PSPs as part of the Payment Services described in Section 7. You acknowledge that Creator Commissions will be paid to the applicable Creator in exchange for services, and not in exchange for a purchase or license of intellectual property from such Creator. You must provide information regarding Creator Commissions owed to enable payouts of Creator Commissions as part of Payment Services. You agree that neither TikTok nor Third Party PSPs will be responsible for any losses associated with inaccurate or incomplete information provided about Creator Commissions. You further agree that you are responsible for reporting and remitting withholding taxes with respect to any payments made to Creators to the extent such payments require reporting or withholding.10. Logistics Services
If you choose to use any logistics services provided by TikTok, you shall comply with the TikTok Shop Logistics Terms. If the TikTok Shop Logistics Terms are terminated by either TikTok or you, you will no longer be allowed to use such logistics services. Termination of Your Account will terminate the TikTok Shop Logistics Terms between TikTok and you with immediate effect. 11. Fees for use of TikTok Shop You agree to pay TikTok a fee for your use of TikTok’s Commerce Products, including the TikTok Shop, TikTok’s technology and management services that enable Third Party PSPs to provide Payment Services to you, TikTok’s logistics services, and other optional services for sellers provided by TikTok to you. That fee will be calculated based on the total amount paid by a buyer for each purchase from you (“Referral Fee”). TikTok may, in its sole discretion, amend the Referral Fee from time to time and will inform you of such amendment by email or through the Seller Center (“Notice”). If TikTok reduces the Referral Fee, such reduction shall automatically terminate within the fixed period as stated in TikTok’s Notice, or in any event within 1 year from the date of the Notice unless otherwise stated in the Notice.12. Taxes
12.1. If you sell to buyers based in the U.S., most jurisdictions require that TikTok collects applicable sales taxes on your sales due to marketplace facilitator legislation. For sales to buyers based in marketplace jurisdictions, TikTok will calculate, collect, and remit the sales tax on your behalf. Prices advertised on TikTok Shop are exclusive of applicable sales taxes, which will be calculated and charged at checkout. 12.2. Except for sales tax collection and remittance into marketplace jurisdictions, you are responsible for complying with all applicable tax laws and rules and regulations, including the determination, calculation, collection, withholding, reporting, and remittance of applicable taxes and duties, fees, surcharges, and additional charges for sales that result from your sale of products on TikTok. In the event that TikTok is held liable for your failure to withhold tax, interest or penalties with respect to any payment made on behalf of you or the information reporting for such payment, you agrees to indemnify TikTok for any such liability unless, prior to the payment, you identify the payment as requiring TikTok to withhold or report and provides all information, including the payment’s source and character, reasonably required to enable information reporting. 12.3. You acknowledge that your use of TikTok’s Commerce Products, including Payment Services, may be subject to tax information reporting and withholding requirements and agree to provide all necessary information to permit TikTok and Third- Party PSPs to comply with any such requirements.13. Account Security, Restriction, Suspension, and Termination
13.1. You shall keep your password secure. You are fully responsible for all activity, liability and damage resulting from your failure to maintain password security. You shall immediately notify TikTok of any unauthorized use or access of your password or your account, or any other breach of security of your account. You also agree that TikTok will not be liable for any loss or damage arising from your failure to keep your password secure or any unauthorized access of or other breach of security of your account. You shall not provide your username and password information in combination to any other party other than TikTok without TikTok's express written permission. You shall keep your account information up to date and accurate at all times, including a valid name, address, phone number and email address. 13.2. We may remove Your Content and product listings, cancel any transactions associated with your Seller Center account, and/or withdraw any promotions and/or subsidies offered by TikTok to you at any time and for any reason, in our sole discretion, without any notice to you. 13.3. We may suspend or permanently disable access to your Seller Center account, your ability (and/or the ability of the company or other entity you represent) to offer and sell products on TikTok Shop, and your TikTok account if we reasonably believe that you have violated our terms or policies, including these Seller Terms, or any of the requirements identified in Section 4 of these Seller Terms (Seller Eligibility and Commitments), or to protect the integrity of the TikTok Platform or the experience or enjoyment of TikTok users. 13.4. We will make reasonable efforts to notify you if we permanently suspend or terminate your account unless doing so may expose us or others to legal liability; harm others in the TikTok community; compromise or interfere with our brand or the integrity or operation of our services; where we are restricted due to technical limitations; or where we are prohibited from doing so for legal reasons. 13.5. If you close or we permanently suspend, disable, or terminate your Seller Center account, these Seller Terms will terminate as an agreement between you and us. 13.6. TikTok may terminate these Seller Terms at any time without cause by giving written notice to you. You may terminate these Seller Terms at any time without cause by giving written notice to TikTok in accordance with Section 15.9(b) of the Commercial Terms. If you continue or resume use of the Commerce Products after termination of these Seller Terms, you agree that such use will be subject to the Seller Terms then in effect. You agree to be liable for any fees incurred prior to such termination. The following provisions will survive any termination of these Seller Terms: Sections 6 (Your Commercial Relationship with Creators and Other Third Parties), 7 (Payment Services to You), 9 (Commissions to Creators), 12 (Taxes), 14 (Indemnification for Your Products), and 15 (Dispute Resolution).14. Indemnification for Your Products
In addition to your indemnification obligations under Section 11 of the Commercial Terms (Indemnity), you agree to defend, indemnify, and hold harmless the TikTok Parties from any and all claims, allegations, liabilities, costs, and expenses, including, reasonable attorneys’ fees and expenses, brought or asserted against any of the TikTok Parties arising out of, or relating to Your Products.15. Dispute Resolution
In the event of a dispute between you and TikTok arising out of or relating to these Seller Terms, the dispute will be resolved pursuant to Section 14.2 of the Commercial Terms (“Arbitration Agreement; Class Waiver – if you are based in the United States”).Appendix 1
TECHNICAL AND ORGANIZATIONAL MEASURES INCLUDING TECHNICAL AND ORGANIZATIONAL MEASURES TO ENSURE THE SECURITY OF THE DATA (“MINIMUM SECURITY MEASURES”) These Minimum Security Measures may be changed from time to time by Us (acting reasonably) providing Seller with a replacement. They are to be implemented by Seller (including its sub-processors) in relation to any personal data transferred under these Terms. Seller will document, implement, and maintain an information security program that meets the standards of best industry practice to protect such personal data, which will include: Information Security Policies- Approved security policies aligned to the highest industry standards
- a policy governing access to data
- a policy governing data sharing with third parties
- process for reporting suspected violations of our policies
- Dedicated information security function responsible for security initiatives and operations
- Designated roles and responsibilities within the security function
- Dedicated internal audit function
- Contractually binding confidentiality obligations on all personnel handling confidential and/or personal data
- Security awareness, education, and training upon onboarding and at regular intervals
- Background checks for all employees to the extent permitted by the applicable laws
- Disciplinary process for policy violations to the extent permitted by internal policy and local applicable law
- Termination or change of employment controls
- Management oversight of assets such as servers, databases, and user endpoints
- Assigned ownership for all assets
- Classification and handling of assets
- Remote access to the IT systems via VPN tunnels, where appropriate, or other state-of-the-art secure, encrypted connections
- Least privilege, and need-to-know basis security concepts embedded into the access management process
- Access authentication program
- Periodic review of access rights (at least annually)
- Access termination within 48 hours for separated users
- Use of multi-factor authentication (MFA) and/or single signon (SSO) to access TikTok systems
- Password complexity and configuration requirements in accordance with TikTok standards
- Encryption of data at rest as instructed by TikTok
- Key management system with applicable security controls
- Physical entry controls
- Security of equipment and assets off-premises
- Secure disposal or reuse of equipment
- Visitor access and authorization program
- Approved change management process for changes to products and infrastructure
- An appropriate backup methodology to ensure data integrity and timely restoration of core operational data
- Secure event log preservation
- Quarterly vulnerability scanning of systems and environment
- Annual penetration testing of systems and environment
- Endpoint Detection & Response (EDR) to protect endpoints
- Annual audit of system configurations and controls
- Server and infrastructure components hardening
- Network protection including security intrusion-detection-system, anti-malware software, anti-distributed denial of service software, firewalls deployed across the environment, etc.
- Segregation of networks into zones
- Network monitoring services in place 24 x 7 x 365 to detect unauthorized activities
- Secure software development process to enable the creation of software that incorporates security into every phase of the software development life cycle (SDLC)
- Security baked into the code from inception rather than addressed after testing reveals critical product flaws
- Separation of development and production environments
- Periodic review of open-source and third-party source code libraries
- Static and dynamic scanning of source code:
- Static scans review the code for vulnerabilities before it is packaged into the front-facing application. These are performed annually to address vulnerabilities in sourced code and compiled applications.
- Dynamic scans are performed during code changes after the compilation of the code and is to identify run-time errors in the application.
- Third party risk management program enables ongoing identification, assessment, monitoring and mitigation processes to manage the risks that occur with using vendors, establishing partnerships, and outsourcing services.
- Process to respond to regulatory and user requests
- Capability to respond to security and privacy questionnaires from TikTok within 10 business days.
- Incident management program
- Forensic capability for collecting incident data
- Business Continuity program to ensure redundancy of products and infrastructure
- Business Disaster program to ensure recovery of personnel and infrastructure in the event of a disaster
- Business impact analysis to identify critical systems and processes
- Logging of access and forensic capabilities to preserve logs and evidence for investigations where necessary