Security

How we protect your data.

Data protection is part of how we build restaurant and business software. Below is an overview of our current practices.

Encryption

Data is encrypted in transit using TLS. Sensitive data at rest is encrypted using industry-standard methods.

Access control

Access to production systems and customer data is limited to team members who need it, on a least-privilege basis.

Vendor review

Third-party services we rely on are reviewed for security and data-handling practices before adoption.

Monitoring & updates

Systems are monitored for anomalies, and dependencies are kept up to date to address known vulnerabilities.

Data retention

We retain data only as long as needed to provide our services, and in line with applicable law.

Incident response

We maintain a process to investigate and respond to security incidents, and to notify affected parties where required.