Run commerce day to day on a platform your team already knows how to operate
Sales, customer service, catalogue, fulfilment, and operations teams work from the Vendure Dashboard. Automation keeps orders moving, while permissions, single sign-on, audit trails, and publishing controls keep the operation governed.
One Vendure Dashboard for the teams running ecommerce
When you replace a commerce system, the biggest hidden risk is not the technology. It is the day the people who run orders, refunds, and customer accounts have to do their job in an unfamiliar tool.
The Vendure Dashboard is the workspace for the people who use the platform all day. Sales, customer service, catalogue, fulfilment, and operations teams manage orders, refunds, returns, customers, products, and exceptions themselves, with roles deciding who sees and does what.
Automation that keeps orders moving
Approvals, fulfilment runs, and order syncs run inside the same platform that runs your catalogue and orders, so operators can watch them, step in, and adapt them as the business changes. Your team builds fulfilment runs and order syncs as workflows on the Workflow Engine in every plan.
From Scale, an order over a spending limit waits for the right person to approve it. On Enterprise, a timeout can approve or reject the request automatically. Operators see where every order sits and can approve or step in from the Dashboard.
When an order is placed, your order sync workflow sends it to the systems that fulfil and account for it. If a connection drops part way through, the step retries on its own instead of losing the order, and anything that does fail lands in front of an operator with the full history attached.
A nightly run your team builds on the Workflow Engine batches orders for the warehouse and pauses for a person to confirm before dispatch. Confirm and the orders move; reject and they go back for re-batching. One reliable run instead of a pile of scheduled jobs no one is sure still work.
Governance is in place before the auditor asks
Security wants single sign-on and a complete record of who did what. Compliance wants retention, exports, and proof of who accessed sensitive records. On many platforms the audit trail is a separate product to wire in.
Vendure builds them into the plans, from Scale upward, on the same platform that runs your ecommerce, so the person who signs in is the person the audit trail records and the permissions apply to. Capture is in Scale. Retention and export are part of Enterprise.
The controls your security and compliance teams ask for, as standard
Roles and permissions are the foundation. Single sign-on, an audit trail, and access rules extend them on the same platform.
Single sign-on
Your team signs in with the identity provider you already use: Okta, Microsoft Entra ID, Google Workspace or any OpenID Connect provider. New administrators are created on their first sign-in. When IT removes someone from the identity provider, they can no longer sign in through it. Remove or disable their Vendure administrator as part of offboarding.
Permissions that match your org
Decide who can see and do what, down to the channel, brand, or region. A finance manager, a warehouse lead, and a support agent each get the access their role needs and nothing more.
A complete audit trail
Every change is recorded with who made it, when, and what changed, with sensitive fields removed before anything is stored. Login attempts are captured too, and you can record who viewed sensitive records when a regime requires it.
Data people should not see stays hidden
Access policies narrow which records each administrator can see, for example only orders in certain states or customers in certain groups. Custom conditions cover other rules. Part of Enterprise.
When the auditor asks, the evidence is already there
Audit evidence is structured, searchable, and something your compliance officer can pull without an engineering ticket. Vendure records changes, logins, and, where you need it, who read which record, keeps them for the window your regulator requires, and exports them on a schedule or on demand. Capture is in Scale. Retention and export are part of Enterprise.
Record who viewed which sensitive record and when, keep it for your required window, and export it to your compliance archive on a schedule.
Capture Dashboard changes and login activity as standard, then hand the quarterly export to your auditor as a file or a filtered download, without an engineering ticket.
When a data-subject request lands, filter the trail to that person, reconstruct what changed and who accessed it, and let old entries age out in line with your policy.
Draft, preview, publish, and roll back changes
From Scale, catalogue records can be saved as drafts, previewed in your storefront, and published when ready.
Version history lets you restore an earlier version of a record, so teams can recover from a mistaken update and answer what changed, who changed it, and when.
What operations and compliance teams ask before they switch
Sales, customer service, catalogue, fulfilment, and operations teams use it for the everyday work of running ecommerce. Roles and permissions adapt the information and actions available to each team.
Yes. Approvals and exception handling happen in the Dashboard. Operators approve, reject, or step into a stuck process themselves. Engineering gets involved to change how a process works, not to run it day to day.
Any OpenID Connect provider, including Okta, Microsoft Entra ID, Google Workspace, Auth0, Keycloak, OneLogin, and Ping Identity. Single sign-on covers your administrators and arrives with Scale. Federation adds SAML and several identity providers at once, which helps when a parent company and a recently acquired business have not merged identity yet. It is part of Enterprise.
Retention and export are part of Enterprise. You set retention to the window your regulator requires, and old entries age out automatically. Exports run on a schedule or on demand, and your compliance team can filter and download the trail from the Dashboard without an engineering ticket.
Single sign-on for administrators and the audit log arrive with Scale, and audit retention and export with Enterprise, under one commercial agreement, supported by the team behind Vendure. On the open-source foundation, these are things your team would build and maintain itself. See what's included.
Vendure gives you the building blocks that SOC 2, ISO 27001, HIPAA, GDPR, and similar regimes ask for: single sign-on, permissions, retention, exports, and an access trail. The certification attaches to the deployment you run; the platform is built to support the controls behind it.
Yes, with a phased plan. Your team or a partner builds the integrations first, then moves processes one at a time. A phased replacement means your team is not asked to change how they operate on a single cut-over day. Talk to us and we will map yours.
See your operations running on Vendure
Run your orders, catalogue changes, and approvals through the Vendure Dashboard in a 14-day trial, or compare the plans to see which governance controls each one adds.


