Security

Your store's data, kept like it is yours.

A store’s stock, customers and prices are the business. Here is exactly how they are held, in plain language — no badges we have not earned.
Separation

One wall per store, checked on every query.

  • Stores cannot see each other

    Every read and write is scoped to the store it belongs to in the data layer itself, not by remembering to add a filter.

  • Your prices stay yours

    Cost, margin and vendor terms never leave your store’s side of that wall.

  • Support that shows itself

    When we look at a store to help, the session is marked as support and read-only unless you say otherwise, and it is logged.

  • Nothing is sold or shared

    Your data is not used to sell anything to anyone, and it is not pooled with other stores.

People

Who can do what is decided before the screen is drawn.

  • Five roles

    Owner, manager, sales, warehouse and driver. Each screen and each action checks the role — hiding a button is never the protection.

  • Costs are owner and manager only

    The floor sells at the price; what it cost the store is not on their screens.

  • PIN sign-in on shared devices

    A registered counter tablet shows the staff on it; each signs in with their own PIN, so every sale carries a name.

  • Sessions that end

    Sign-in is by email and password, refreshed on every request, and a device can be unregistered the moment it goes missing.

Money

Card numbers never reach us.

  • Clover takes the payment

    Cards are read and charged by Clover on your own merchant account. Applios is told what was paid, never the card.

  • No card fields anywhere

    There is no screen in the product that asks anyone to type a card number, because there is nowhere for it to go.

  • Tokens held, not credentials

    The connection to your register is a token you granted and can revoke from Clover at any time.

  • One balance, one truth

    What is owed is computed from the invoice and the payments against it, so the books and the register agree.

The record

Things that happened stay happened.

  • Every unit has a history

    Received, moved, reserved, sold, delivered, written off — with who did it and when.

  • Orders and invoices keep their trail

    Status changes, signatures, payments and the paperwork a shipment arrived with are kept with them.

  • Deleting is bounded

    A unit that has never been on an order can be removed; anything a sale, purchase order or receipt depends on stays as the record it is.

  • Exports are yours

    Your catalog, stock, customers and orders come out in a spreadsheet whenever you want them.

Where it runs

On Cloudflare's network, with the database in the United States.

  • Encrypted in transit

    Every connection is HTTPS, including the ones between the app and its database.

  • Uploads are private

    Photographs of paperwork and rating plates are kept in private storage, reachable only through a signed-in session.

  • Backed up

    The database is backed up on its provider’s schedule, and a store’s own export is always available on top of that.

  • Small on purpose

    No advertising trackers, no third-party scripts watching your staff work.

A question we have not answered here?

Ask it directly — you will get a straight answer, not a data sheet.

Get in touch