Security & Compliance

check mark inside a shield graphic in the middle of a hallway of servers

ISO 27001 certification

MCF is ISO 27001 certified, aligning with the world’s best-known standard for information security management systems (ISMS).

digital lines and dots depicting a cybersecurity map

InfoSec industry best practices

MCF security controls are aligned with InfoSec industry best practices: National Institutes of Standards & Technology (NIST) Cybersecurity Framework (CSF) and Cybersecurity Maturity Model Certification (CMMC) Level 1 Security Frameworks

image of a chain enlarged with zeros and ones written all over

Risk management & security controls

MCF has risk management and security controls that support a defense-in-depth and security-by-design strategy. We have multiple layers of security and technical controls to protect merchant data.

image of hands on a laptop with white graphics of papers with check boxes above it

Commitment to data security

MCF has an established and dedicated Security, Compliance, Privacy & Trust Program supporting our business and a multi-year security & compliance roadmap that sets goals to continually raise our security bar for merchants.

Frequently asked questions

We use information collected to provide and improve MCF. For example:

We use your account information to communicate with you about MCF and to recommend other Amazon services that might be of interest to you.
We use MCF order information to fulfill orders and facilitate communication with you and your customers about orders.
We use inventory and order information to plan for and improve our fulfillment services for users of the Amazon Fulfillment Network, including MCF merchants, FBA sellers, and Amazon. For example, we use the information to forecast inventory placement in fulfillment locations and make network capacity and expansion decisions in order for the Amazon Fulfillment Network to most efficiently fulfill orders.