SP Compliance Gate

Two-Stage Compliance Gate for WooCommerce

SP Compliance Gate gives you complete control over who can access your WooCommerce store — and what they can see — based on your compliance requirements. Whether you sell age-restricted, regulated, or research-use products, this plugin lets you enforce the right level of access at every point in the customer journey.

Stage 1 — Lightweight Gate
A quick, low-friction layer that lets visitors continue without creating an account. They simply confirm minimum age and accept your Research Use Only (RUO) terms before proceeding. Perfect when you need acknowledgment on record, but full identity verification isn’t necessary.

Stage 2 — Full Access Control with Email Verification
A complete lockdown that requires visitors to create an account, verify their email address, and log in before they can browse or purchase. When Stage 2 is active, your site is fully sealed — product pages, search results, APIs, sitemaps, and feeds are all protected. Nothing leaks to unauthenticated visitors or bots.

Flexible Scope
Apply either stage independently to your home page, catalog and product pages, or the checkout flow. Mix and match enforcement levels to balance customer convenience with compliance requirements.

Security Built In

• Brute force protection automatically locks out repeated failed login and verification attempts
• Cryptographically secure, time-limited email verification codes
• Full API protection — blocks unauthenticated access to product data, sitemaps, and feeds
• CSRF protection on all administrative actions
• Username enumeration prevention — identical error messages prevent account harvesting
• All passwords stored with industry-standard encryption

Why Not a PHP Snippet?
Simple PHP snippet gates may block the front door, but they leave the side doors wide open. REST APIs, sitemaps, product feeds, and direct URL access can all bypass a basic code snippet — exposing your product catalog to anyone who knows where to look. SP Compliance Gate seals every entry point, not just the obvious ones.

TESTING
SP Compliance Gate provides a 48-hour testing period. We strongly encourage you to take advantage of this time to verify the plugin works on your website as expected — once a license key is generated, no refunds will be granted.