SECURITY & DATA PROTECTION
Your members’ register, and who can reach it.
A members’ club holds the most sensitive list in retail: who someone is, what they are allowed, and what they bought. Before you move that list onto anybody’s platform, you are entitled to know exactly where it sits.
One tenant, one database, one server
Your data is not in a shared table behind a tenant column that one bad query could get wrong. It is its own database on its own machine. The uncomfortable question — “who else is in there with me?” — has no answer here, because nobody is.
Identity numbers are encrypted at rest
The register the law asks you to keep needs an ID number. It is stored encrypted, so it is not something a person browsing the database reads by accident, and not something a database copy hands over.
Every mutation leaves a record
Approvals, refunds, price overrides, stock corrections, tender changes: who did it, when, and what the value was before. It is sold as compliance. What it is actually for is settling the argument about what happened at the counter on Saturday.
Five roles, not one shared password
Cashier, manager, buyer, director, owner — separated by what each may do, not by who was told the password. A cashier can sell without seeing the margin; a shift can be closed without opening the ledger.
Deletion is a scheduled job, not a promise
Retention runs nightly and removes what we are no longer permitted to keep. A privacy policy that says “we delete when it is no longer needed” and has no job behind it is a sentence, not a practice.
Consent is recorded per channel
Someone who agreed to something at the counter has not thereby agreed to email. The channel is captured with the consent, because those are two different permissions and a regulator treats them as two.
What we do not have: no SOC 2 attestation, no ISO certificate, and no badge for either — we will not print one we cannot back. Everything above is behaviour you can ask us to demonstrate on a live system during the demo, which is a stronger answer than a logo anyway.
Ask us to prove any line on this page.
A 30-minute call on a live system. Bring the question your compliance officer would ask.