Secure Shopping

Authorize.Net Verified Merchant

Payment processing is handled by Authorize.Net, a certified Visa Merchant Service provider operating since 1996.

Authorize.Net CIM

Customer Information Manager (CIM) stores your saved payment information on Authorize.Net’s secure servers, never on ours.

PCI DSS Compliant

Our payment infrastructure meets Payment Card Industry Data Security Standard requirements, scanned and validated by Trustwave.

SSL/TLS Encryption

Every page and form on our site, including checkout, account, and contact, is protected by Transport Layer Security. Your data is encrypted in transit between your browser and our servers, so it can’t be intercepted.

Our certificates are issued and renewed by Let’s Encrypt, the nonprofit certificate authority that secures hundreds of millions of websites worldwide. You can verify ours any time by clicking the lock icon in your browser’s address bar.

Passwordless Sign-In

Skip the password entirely. Add a passkey to your account and sign in with your fingerprint, face, or device PIN. Passkeys only work on our real website, so they can’t be phished, and your fingerprint or face never leaves your device; our site never holds a secret that could be stolen.

Prefer a text? One-Tap Login sends a single-use code to your verified US or Canadian mobile number that expires in minutes. Set up either one, or both, in My Account.

Industry Standard Firewalls

Our servers sit behind enterprise-grade firewalls that follow a simple rule: closed by default. Only the doors a shop actually needs, like secure web traffic, are open; every other route to our servers is sealed off before a request ever reaches them.

Behind the firewall, intrusion detection runs continuously, watching for port scans, probing, and other unusual patterns. Addresses that misbehave are blocked automatically at the network edge, long before they could reach a checkout or sign-in page.

Automated Bot Defense

Our site is protected by SignalNoiseBT, a multi-layered bot defense system built specifically for our shop. It runs continuously, guarding against credential-stuffing attempts, account scrapers, card testers, and the other automated abuse that targets every e-commerce site.

Real customers pass through transparently. Suspicious traffic is challenged or blocked at the network edge, protecting both your account and our shop’s performance for everyone else.

Global Threat Intelligence

We integrate with AbuseIPDB, a community-driven database of reported abusive IP addresses contributed by webmasters, security professionals, and system administrators worldwide.

Incoming traffic is checked against this real-time intelligence, helping us identify and challenge known bad actors before they ever reach your shopping session.

AWS Cloud Infrastructure

SanMarcoCoffee.com runs on Amazon Web Services, the same scalable, redundant infrastructure that powers Amazon.com and many of the world’s largest sites.