Security, Safety, & Compliance Hub:
Why ShipBob is a Trusted Partner
Your Trust is Our Priority
When you choose ShipBob as your fulfillment partner, you’re placing your trust in our ability to handle your operations with care, precision, and integrity. We don’t take that lightly. Our certifications, operational standards, and technology framework are a reflection of our commitment to earning and maintaining your confidence every step of the way.
Security, reliability, and compliance are built into every layer of our fulfillment process, from how we store your products to how we protect your data. As your business grows and evolves, so do we, by continuously improving our systems to meet the highest expectations of performance, privacy, and accountability.
Below is an overview of how we ensure operational excellence and data security.
Product Safety, Facility Compliance, & Certifications
Brands that sell consumable goods often require certain capabilities to meet regulatory, safety, and customer requirements. In partnering with ShipBob, you get the following offerings:
- GMP & GFSI certified fulfillment centers
- Temperature-controlled warehousing
- Lot tracking and expiration date management
- FIFO and FEFO inventory management
- HAZMAT and dangerous goods equipped
Many of the industry-leading brands across the following categories trust ShipBob for these reasons:
Business Continuity & Disaster Response Preparedness
Business continuity and disaster recovery (BCDR) is a process to plan for and recover from events like natural disasters, cyberattacks, system failures, and more. ShipBob is responsible for the safety of our merchants and their customers, our employees, and communities.
Our BCDR policy includes the following:
- Identification of disaster categories and indicators
- Convention of disaster management team (DMT) and risk assessment process
- Internal and external communication plans
- Business continuity plans for major disasters
- Disaster response closure, evaluation, and training
In addition to having plans in place to recover quickly and efficiently after a disaster, minimize disruption, and communicate accurate and timely information to all stakeholders, ShipBob has created the following SOPs, policies, and programs to further support our BCDR process:
Business Continuity & Disaster Response Checklist
- Allergen Program
- Approved Chemical List
- Approved Supplier Program
- Broken Glass Brittle Plastic & Ceramic Incident Report Form
- Chemical Control Program
- Dangerous Goods Policy
- Dataloggers Calibration Verification Log and SOP
- Document Control Program
- Employee Hygiene Program
- Employee Training Program and Verification Form
- Food Defense Plan
- Food Security and Food Defense Program
- Glass Brittle Plastic & Ceramics Program
- Good Manufacturing and Distribution Practices Programs (GMP and GDP)
- Good Manufacturing Practices Program for Visitors, Contractors, and Temporary Employees
- HACCP CCP Decision Tree, Plan Company Summary, & Program
- Inventory Location Hold-Lock SOP
- Non-Conforming Materials Program
- Periodic Cleaning Schedule
- Pest Control Program
- Positive Release Program
- Post Maintenance Sanitation Checklist
- Potable Water Program
- Preventive Maintenance Program
- Product Recall Request SOP
- Recall Policy, Program, Status Report, Withdrawal Fax Email Letter & Telephone Notification Template
- Receiving and Shipping Program
- Regulatory Affairs and Inspection Program
- Risk Assessment Program and Form
- Sanitation and Housekeeping Program
- Senior Management Commitment Program
- Site GMP Inspection Checklist
- Tape Machine Cleaning and Maintenance SOP
- Temperature and Humidity Monitoring Log & SOP
- Traceability Program
- Trailer Inspection SOP
- US Prohibited and Conditional Items List
- Validation of Merchant Safety Data Sheet (SDS)
Security Measures to Protect Your Business
The security and protection of our customers’ data is our top priority at ShipBob. We have implemented a comprehensive set of policies, procedures, and technologies designed to safeguard sensitive information from unauthorized access, breaches, and other security threats. Our robust data protection measures encompass access control, data encryption, employee and contractor policies, system security, incident management, business continuity, risk management, vendor oversight, customer data management, and governance.
Additionally, we have completed SOC 2 and ISO 27001 audits, which validate our commitment to the highest standards of data security. This pamphlet provides an overview of the steps we take to ensure the highest standards of data security, demonstrating our unwavering commitment to maintaining the trust and confidence of our customers. Learn more.
Controls
Product security
Data encryption utilized
Data transmission encrypted
Control self-assessments conducted
Penetration testing performed
Vulnerability and system monitoring procedures established
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
Infrastructure security
Access revoked upon termination
Remote access MFA enforced
Remote access encrypted enforced
Network segmentation implemented
Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
Access control procedures established
Unique network system authentication enforced
Infrastructure security
Organizational security
Asset disposal procedures utilized
Employee background checks performed
Code of Conduct acknowledged by employees and enforced
Confidentiality Agreement acknowledged by employees
Performance evaluations conducted
Password policy enforced
Security awareness training implemented
Code of Conduct acknowledged by contractors
Confidentiality Agreement acknowledged by contractors
Internal security procedures
Continuity and disaster recovery plans tested
Development lifecycle established
Board oversight briefings conducted
Backup processes established
Access requests required
Incident management procedures followed
Physical access processes established
Data center access reviewed
Company commitments externally communicated
Risk assessment objectives specified
Internal security procedures (continued)
Continuity and Disaster Recovery plans established
Cybersecurity insurance maintained
Configuration management system established
SOC 2 – System Description
Whistleblower policy established
Board charter documented
Board expertise developed
Board meetings conducted
System changes externally communicated
Management roles and responsibilities defined
Organization structure documented
Roles and responsibilities specified
Security policies established and reviewed
Support system available
System changes communicated
Incident response plan tested
Incident response policies established
External support resources available
Service description communicated
Risks assessments performed
Risk management program established
What a Fulfillment Partner Owes You
Using technology to drive compliance across a global network
Rather than leaving each decision up to the discretion of an individual associate in the warehouse, such as choosing which carrier to use or which box size to pack an order in, ShipBob enables automated consistency through algorithms and machine learning that together eliminate several steps and require each warehouse associate to simply follow what is on the screen.
In turn, ShipBob’s Operations team systematically and uniformly fulfills orders according to each merchant’s standards and product requirements, regardless of the fulfillment center the inventory is in and who is picking or packing the order. We also provide visibility into exactly what is happening inside each fulfillment center, so merchants stay updated in real time despite not physically being there.
This is the case for each fulfillment center that we add to the ShipBob network – we provide the blueprint via our standardized technology, equipment, and services, so it’s the same exact experience in each fulfillment center.
Building an effective supply chain
We place value on the 5 Rs of supply chain: resilience, responsiveness, reliability, relationship, and ROI, which are big differentiators for ShipBob. Through these key principles, we:
- Resilience: Help you absorb supply chain shocks, through carrier diversity to multi-location backups, with scenario planning and risk modeling.
- Responsiveness: Let you be agile with speed, from diversifying sales channels wherever your customers shop to customizing your fulfillment and distribution based on real-time changes.
- Reliability: Deliver what we say we will (consistently performing on time and at cost) and innovate alongside you.
- Relationship: Are a partner for the longer term and not just a transactional vendor, allowing you to structure, coordinate, and better manage your supply chain through collaboration and trust.
- ROI: Give you measurable financial benefits to enable scalable growth that adds to your bottom line for a more sustainable long-term business model, without the need for costly infrastructure.
Our Customers
Don’t just take our word for it — see why ShipBob is trusted by industry-leading brands
It’s been very comforting that ShipBob is able to help us with food safety compliance. We’ve received strong compliance and willingness to implement additional measures with ShipBob. If we ever have an issue with products, I’m able to track it down to the lot number and where exactly it’s stored in the fulfillment center, which is crucial in our supply chain. It’s also important that if any other product compliance issues arise, we’re very safeguarded by ShipBob’s technology. We’re backed by ShipBob’s WMS system that has all of the details I need at my fingertips. If push comes to shove and I’m in crisis mode, I know that ShipBob’s tech will allow me to find what I need to come to a resolution.Connor Stewart,
Head of Operations + Impact at ARTAH
One of my favorite things about ShipBob is how cohesive and standardized everything is across their entire fulfillment network. We can request a change with our ShipBob team and this change will be documented and consistently implemented in each of the locations that ship our products. As we’ve grown over the past year, we’ve also experienced working with some partners who were not able to scale as quickly as we needed them to without having an impact on efficiency and quality. Quality is non-negotiable for us, and ShipBob has shown us time and again that they will treat our products like their products.Stephanie Lee
Co-CEO of PetLab
