Who we are
YLSOMO (Chongqing) Trading Co., Ltd. (依丽索莫（重庆）贸易有限公司), Unified Social Credit Code 91500105MAE11T2M0K, is a trading company registered in Chongqing, China.
Our registered business scope covers second-category value-added telecommunications services, online data processing and transaction processing (commercial e-commerce), import and export of goods, and import and export of technology. Our main business is cross-border trade in apparel, bags and luggage, and general merchandise.
What we build
We develop our own TikTok Shop security relay gateway for ERP integration. As the developer of this integration we connect to the TikTok Shop OpenAPI and provide:
- Product synchronisation — listing and inventory data kept in step between the ERP and the shop.
- Order retrieval — fulfilment and logistics state pulled for the stores the ERP is authorised to serve.
- Webhook event reception — TikTok Shop events received, verified and delivered to the seller’s own endpoint.
The gateway sits between the seller’s ERP and TikTok Shop. It authenticates the ERP, signs outbound calls on the seller’s behalf, refreshes store authorisations, keeps each store’s data separate from every other store’s, and retries delivery when the seller’s endpoint is unavailable.
Data isolation and DSPR compliance
The system is designed against TikTok’s Data Security and Privacy Requirements (DSPR). The measures below are implemented, not planned:
| Control | How it works |
|---|---|
| Store isolation | Every protected table is scoped to a single store. A query that cannot be attributed to a store is rejected, never answered with another store’s data. This is enforced at the persistence layer, not by convention. |
| United States hosting | The service runs on servers located in the United States. Order data is not routed through any other region. |
| Buyer PII | In the mode currently in production, buyer personal data — recipient name, telephone number, shipping address, postal code — is relayed in memory only and no persistent copy is written. Where an order-retention mode is enabled, the same fields are stored encrypted with AES-256-GCM on the same United States servers. |
| Automatic expiry | Retention periods are enforced by a scheduled purge. Expired records are removed automatically and every deletion is written to an append-only audit log. |
| Access control | Store credentials are encrypted at rest under a key held separately from operational credentials. Access follows least privilege; personal data never appears in logs. |
| Data subject rights | Access, correction, deletion and portability requests are handled within 30 days; deletion instructions are executed within 5 business days. The seller is the controller and the first point of contact. |
The gateway is a processor. The seller is the controller and decides why and how long order data is processed. We do not sell goods through this service, we hold no consumer accounts, and we do not use order data for our own purposes.
The application
This gateway is the basis of our TikTok Shop Custom App for the United States market, used for ERP integration with our cross-border US stores: order fulfilment, inventory synchronisation and business automation.
Our team has hands-on experience integrating cross-border e-commerce APIs and putting e-commerce data compliance into production.
Documents
中文简介
依丽索莫（重庆）贸易有限公司（统一社会信用代码 91500105MAE11T2M0K）为注册于中国重庆的贸易企业， 经营范围涵盖第二类增值电信业务、在线数据处理与交易处理业务（经营类电子商务）、货物进出口、 技术进出口，主营服饰、箱包、日用百货的跨境贸易。
我们自研 TikTok Shop 安全中转网关 ERP 集成系统，作为开发方对接 TikTok Shop OpenAPI， 实现商品同步、订单拉取与 Webhook 事件回调接收。系统采用数据隔离架构：每个店铺的数据在持久层 强制隔离，无法归属到店铺的查询一律拒绝；服务部署于美国服务器，订单数据不经过其他区域。
买家 PII（收件人姓名、电话、收货地址、邮编）在当前生产模式下仅在内存中中转、不落盘； 若启用订单留存模式，则在同一批美国服务器上以 AES-256-GCM 加密存储， 并由定时清理任务按留存策略自动过期删除，删除动作写入只追加的审计日志。 以上机制满足 TikTok DSPR 数据合规要求，用于美国跨境店铺的订单履约、库存同步与业务自动化管理。
本 Custom App 用于美国市场跨境店铺的 ERP 集成对接。团队具备跨境电商 API 对接与电商数据合规落地经验。
Contact
privacy@ylsomo.com
Room 19-8, Building 2, No. 16 Guanyinqiao Pedestrian Street,
Jiangbei District, Chongqing, China