Data encryption · standard plus optional
Your data on the wire — only your people can open it
As standard we run site-wide HTTPS plus full-path traffic encryption, so store data does not travel in readable form. For higher security and compliance needs, add a USB key for end-to-end bank-grade encryption.
Two tiers — pick what you need
Not every store has to run with a USB stick plugged in. The default tier is enough for most shops; the tier below is for owners who treat books and customer lists as especially sensitive.
Standard · every store
Site-wide HTTPS ＋ full-path traffic encryption
Store data is never sent in readable form on any leg of the journey — intercept it and you still cannot tell what it is. Included out of the box, no extra setup. Passwords are scrambled at rest; even a stolen database cannot be pieced back into the original passwords.
Optional · add a USB key
End-to-end bank-grade encryption
The key sits on the USB stick at your till. Leave and pull it, and that machine cannot open the data — if the PC is taken or someone copies files off it, what they get is useless.
We enable this tier for your store and issue one activation code per machine. Cashiers keep ringing up as usual — one extra step at start of shift: plug in the USB. Turn it off any time you want.
Why a USB stick reaches end-to-end bank grade
Bank grade is not about one more algorithm — it is about who holds the key that opens the lock. When the key is in your hand, the lock opens in your store, on that machine.
- Leave and unplug — locked at onceThe key lives on the USB you carry. Pull it at closing and the till has no key — not slower, stopped.
- Lock before it leavesTickets and payments are scrambled and locked on this machine before they go out; anything intercepted on the wire is ciphertext.
- Bound to store and machineOne stick for one store and one till. If it is lost, the back office can disable the machine and rotate keys.
With the USB fitted, what the journey looks like
Content is scrambled, locked in a box, then sent — nobody on the road can open it; only the machine at your store with the stick plugged in can restore it.
- Leaving your store
- Tickets and payments are scrambled and locked before they leave. Intercept them and you cannot tell what they are.
- Stores on the same cloud stay separate
- Other merchants on the same cloud have different keys — nobody can open your books.
- Restored only back at your store
- Reports and line items come back locked too, and open only on this machine. Leaving the return trip unlocked would waste the lock.
The till does this automatically — cashiers do not have to think about it, and ringing up stays fast.
Four keys, each wrapping the next
Not one company-wide key. Four layers nested together — any single key alone is useless in someone else's hands.
- Root key
- Only on our servers, never stored in any database — wraps each store's own key.
- Your store's key
- One per merchant, stored wrapped. Another store's data brought here still will not open.
- Each machine's key
- One per device, bound to this store and this machine. Move the data elsewhere and it stays locked.
- Each shift's key
- Issued at login, expires after. This is what actually locks the data.
Three kinds of device — where the key lives
One activation code per machine, single-use, with an optional expiry. The back office can see which machine activated when.
- Till PCKey on the USB stick — pull it and work stops at once.
- PhoneAn activation code swaps in a key locked on the phone. Change phones and re-issue; the old phone's key is void.
- Merchant portal in the browserNo USB on a webpage — the key is issued at login and gone when the tab closes. It stops wire interception; it does not replace strong account passwords.
No back door once fitted
No key, no passage — there is no fallback that lets an unlocked request through.
- No key, stay outsideAnything without a key is refused.
- Unplug and the till stopsThe machine tells the cashier the USB was removed — it does not silently fall back to plaintext.
- Disable a machine any timeStaff leaves or a PC is lost — disable it in the back office, void its key, and it is out at once.
- Rotate the whole setSuspect a leak and replace the store key — every machine must re-activate; old keys are scrap.
This line is for the technical reviewer you bring in — they will know what each item means.
Three places outside the USB layer
These three still have HTTPS and traffic encryption — just not the USB key layer. We do not claim we have what we do not.
- Uploaded and downloaded files
- Images and exported spreadsheets are files; another lock layer would corrupt them. They use the first two layers, and only after the machine proves it has a key.
- Login and activation
- The key is issued in this step — before that, only the first two layers apply.
- How the merchant portal key is kept
- A webpage cannot take a USB stick, so the key sits temporarily in the browser. Merchant portal passwords and permissions still matter.
See what your own store looks like on it
Leave your details and a consultant will walk you through a demo built for your size and format.