Kept apart, down to the database.
Each store’s records are separated in the application and again by the database itself, so one store can never read another’s.
Trust & security
Your store’s data.
Your rules.
Your store’s data is the record of your business. It is kept separate, private and under your control, and here is how.
Separation
Every store, its own vault.
Only what you grant.
Your team sees only the stores, modules and pages you give them, by role and person.
Owners of several stores.
One login reaches each of your stores, and only yours.
Access
Support enters only when you say so.
No standing access.
Our staff cannot open your store. You grant time-limited support access when you want help.
Every entry logged.
Support sessions, sign-ins and important changes are recorded for you to review.
Told when it matters.
Security emails for a sign-in from somewhere new, a password change or paused sign-ins.
Protection
Private by default.
Secrets encrypted at rest.
Recorder passwords, camera links, POS connections, webhook secrets and staff phone numbers are stored encrypted.
Sessions the browser cannot leak.
Sign-in lives in secure, HttpOnly cookies that page scripts cannot read, and your profile is not stored in the browser.
AI without oversharing.
Personal details are removed before anything reaches the AI provider, and conversations are encrypted at rest.
Practice
Security as a habit.
Scanned every week.
The code is checked every week for vulnerabilities, leaked secrets and risky dependencies.
Guarded sign-in.
Rate limits and lockouts stop password guessing, and bot checks guard sign-in and forms.
Your record, POS optional.
Every module runs on its own record. Clover, Square and online channels connect as add-ons you control.
Questions about your data?
Ask us during a demo. We’ll show you exactly who can see what, and how to change it.