1stPage.
Sign up
1stPage.
Features
Ask AI AI ChatAsk about sales, ads and search terms in plain EnglishClaude & ChatGPT (MCP)Your Amazon data inside the assistant your team already usesScheduled reportsAny answer, re-run daily, weekly or monthly to email or SlackPlatform APIRead-only, expiring keys for your own pipelines
Sales & demand Sales AnalyticsSales, traffic and Buy Box by ASIN, with same-day ordersVendor Central (1P)1POrdered and shipped revenue, sourcing share, vendor inventorySearch Query PerformanceYour share at each funnel stage, per search termRank TrackerDaily organic rank for the keywords you pickSales ForecastBaseline and stretch plans you can pace the year against
Advertising Ads analyticsSpend, ACoS and sales by keyword, campaign and ad typeKeyword OpportunitiesSearch terms with real demand and no ad coverageAmazon Marketing CloudQuery templates, custom SQL, new-to-brand and audiences
Operations & finance Inventory & RestockFBA, AWD, FBM and vendor stock, with send-to-FBA quantitiesAccounting & ProfitSettlements, fees, COGS and profit by productListing QualityAI listing audit, with fixes sent to Amazon after approvalAlerts17 alert types to Slack, email or the in-app feed
Built for enterprise
  • Single sign-on with Microsoft Entra ID
  • Two-step verification on every password sign-in
  • Owner, admin and member roles, scoped to accounts
  • Expiring API keys and OAuth for MCP
  • Data push to S3 or Snowflake, on request
Trust & security →
Coming soon →
EnterprisePricingResources
Sign upSign in

Trust & Security

Who can see your Amazon data, and how we protect it

This is what's in 1stPage today and we checked every line against our code and our AWS account. If your security team needs more than this page, request the packet and we'll work through their questionnaire with you.

Request the security packetEnterprise features

Sign-in

  • Single sign-on with Microsoft Entra ID. An admin connects your tenant once and verifies your email domains, and can choose to add teammates automatically on first sign-in with a set role and account access.
  • Every password sign-in needs a second step: a code from an authenticator app, with recovery codes, or a code sent by email. A user can choose to trust a device for 30 days.
  • Sessions end 12 hours after sign-in. Ten failed attempts lock an account for 30 minutes, and passwords must be at least 12 characters.
  • Sign-in and verification endpoints are rate limited against brute-force attempts.

Access inside your workspace

  • Owner, admin and member roles. Members see only the Amazon accounts they're given.
  • AMC, product cost edits and Listing Quality changes each need their own permission.
  • Nothing in Listing Quality reaches Amazon until someone with that permission approves it.
  • AI chat and MCP answers only read the accounts the signed-in person can open.

API, MCP and data push

  • Claude, ChatGPT and other MCP clients connect with OAuth 2.1, PKCE and dynamic client registration. Access tokens last an hour and refresh tokens rotate.
  • Platform API keys are stored only as a hash and shown once. They're read-only by default, can be rotated or revoked, expire after a year, and stop working when the user is deactivated.
  • On request, we push your 1stPage data to your own S3 bucket or Snowflake account on a schedule.

Where your data lives

  • Hosted on AWS in the US (us-east-1). Analytics data is in ClickHouse Cloud on AWS, reached over a private network link.
  • The database, file storage and cache are encrypted at rest.
  • Amazon authorization tokens are encrypted a second time in the application.
  • The app is served only over HTTPS, with TLS 1.2 or higher.

Amazon data and AI

  • Amazon data is used only to run 1stPage for the customer who connected it. We don't sell it.
  • AI features run on OpenAI and Anthropic through their commercial APIs. They don't train models on your data, and neither do we.
  • The full list of providers that process data for us is in section 5 of our privacy policy.

Logging and monitoring

  • Sign-ins, failed sign-ins, role and membership changes, SSO changes, OAuth consents and API key changes are logged with IP address and kept for at least a year.
  • Every code change is scanned for vulnerabilities, vulnerable dependencies and leaked secrets, and the production image is scanned weekly.
  • AWS CloudTrail and GuardDuty watch the infrastructure.

For enterprise reviews

Request the security packet

Tell us what your review needs and someone on our team will email you back.

Tell us about your review

What does your review need?

By submitting, you agree to our Privacy Policy and Terms & Conditions.