Security & Trust

Your data is protected by design

Posveo protects your restaurant data — sales, customers and finances — with industry-standard practices. Here's how it works behind the scenes.

Each restaurant's data is logically isolated (multi-tenant). One account can never access another's data.

Each employee sees only the screens and operations their role allows — waiter, cashier, kitchen, manager.

All traffic is encrypted with HTTPS/TLS. Passwords are irreversibly hashed — no one, including us, can see them.

JWT + refresh token model. Mobile tokens are kept in the device's secure storage (Keychain / Keystore), never in plain text.

On sign-out or password change, all active sessions are revoked immediately. A lost device poses no risk.

Your data belongs to you — it's never sold to third parties. You can request export or deletion at any time.

At the code level

Security isn't just a promise — it's built into the code.

Parameterized SQL queries — injection protection

Rate limiting against brute force on login

Keys and secrets in environment variables (.env), not in code

Passwords stored with a strong hashing algorithm

Short-lived access tokens with refresh tokens

Principle of least privilege — each role sees only what it needs